$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b914922-4a91-3977-afaa-f7143feb8588.roa File: 0b914922-4a91-3977-afaa-f7143feb8588.roa (raw, json) Hash identifier: RvBn/RTu2zDTZApxMii8g9bdGwWTEG3TIpUvJ++8Ito= Subject key identifier: B3:5F:D2:29:F3:6D:32:94:55:A7:50:41:42:52:A0:5E:C2:25:1F:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A3325E92938D33CBBF980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b914922-4a91-3977-afaa-f7143feb8588.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 151.213.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:33:25:e9:29:38:d3:3c:bb:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=efa8d47a-7577-4c30-adfb-a9e0a5c7f9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:b5:1c:70:0a:ef:77:5d:52:7e:c5:eb:0c: 46:ac:5c:e8:e1:58:25:fa:bd:36:66:94:45:84:48: 5d:ff:48:a1:81:fc:9f:80:21:6d:7f:9f:2f:ed:58: bd:05:29:ab:3b:e1:11:f7:5e:a8:0b:3b:66:63:5f: b5:90:4d:36:64:28:fd:4b:79:58:a0:01:de:50:7d: 8b:e3:e2:ca:50:e2:90:7d:c6:0b:19:31:5c:33:89: 61:6c:1a:ea:73:97:ca:7e:bf:28:cb:49:1e:42:30: 96:7a:af:50:83:7a:68:c4:ae:59:73:4b:38:cb:a2: f6:ed:51:8f:46:52:33:e7:36:50:9e:d3:08:2e:f2: 24:76:3d:62:54:b6:fa:c3:92:c7:12:ff:13:bf:79: 59:fe:21:07:0c:a4:8a:67:70:63:a3:79:a7:11:62: 19:26:6d:3a:97:20:19:a1:07:24:88:11:29:ed:bf: f1:2d:fa:81:35:86:21:c8:79:60:4f:1d:67:f3:cd: 09:0c:d7:d1:90:0c:5d:9f:76:5e:34:28:0b:dd:74: 3d:dc:d9:75:d2:03:07:95:f2:97:d5:82:c0:77:68: 59:ba:80:d0:e1:0b:ed:a4:c7:49:ce:ab:f5:4f:e3: 83:b5:93:28:15:b5:23:d8:f3:38:f2:3c:43:9f:7e: 9a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5F:D2:29:F3:6D:32:94:55:A7:50:41:42:52:A0:5E:C2:25:1F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b914922-4a91-3977-afaa-f7143feb8588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:03:76:1d:30:31:cc:de:4f:7e:59:98:c0:b0:72:9a:e8:13: 2e:37:32:55:78:e5:32:32:79:79:dd:4f:98:ef:8e:f3:31:34: 75:34:98:1f:cb:a3:ce:2f:cb:6e:d4:1d:20:92:b4:94:de:10: a9:bf:bf:e4:e9:52:26:7b:99:46:0e:b2:a7:35:5a:36:5f:0e: e9:7c:b2:74:be:43:dc:22:8e:5b:e9:42:71:a9:4c:d8:79:45: 21:4e:06:55:48:cd:f1:1d:9f:f2:59:22:b2:11:20:ad:81:d0: 19:3a:4d:98:16:38:85:b7:f6:7a:c2:99:ad:df:d1:5b:cf:40: d1:7c:06:14:aa:1e:0d:62:33:04:8e:5d:20:d0:0d:de:17:b3: 51:7a:65:08:bc:c0:5c:87:23:9c:f1:d8:84:f4:24:1d:6e:f5: 03:98:ec:91:9c:6c:b0:3c:61:34:12:b4:52:e6:a9:55:96:98: 01:4c:50:05:38:d8:be:1c:3f:e0:7d:70:e8:21:65:63:19:eb: f8:f9:d3:03:f9:c1:fa:24:3c:27:e2:06:3f:9e:89:b5:85:fe: 99:bd:11:8f:58:f9:cc:0c:6c:e4:ef:82:9b:f7:6c:39:b9:bd: 47:1a:d2:a3:8a:9c:50:e1:b8:00:37:ee:58:17:0a:2a:e4:7b: ab:a4:38:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajMl6Sk40zy7+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZWZhOGQ0N2EtNzU3Ny00YzMwLWFkZmItYTllMGE1YzdmOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4i1HHAK73ddUn7F6wxGrFzo4Vgl+r02ZpRF hEhd/0ihgfyfgCFtf58v7Vi9BSmrO+ER916oCztmY1+1kE02ZCj9S3lYoAHeUH2L 4+LKUOKQfcYLGTFcM4lhbBrqc5fKfr8oy0keQjCWeq9Qg3poxK5Zc0s4y6L27VGP RlIz5zZQntMILvIkdj1iVLb6w5LHEv8Tv3lZ/iEHDKSKZ3Bjo3mnEWIZJm06lyAZ oQckiBEp7b/xLfqBNYYhyHlgTx1n880JDNfRkAxdn3ZeNCgL3XQ93Nl10gMHlfKX 1YLAd2hZuoDQ4QvtpMdJzqv1T+ODtZMoFbUj2PM48jxDn36agQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNf0inzbTKUVadQQUJSoF7CJR/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI5MTQ5MjItNGE5MS0z OTc3LWFmYWEtZjcxNDNmZWI4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9WJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkDdh0wMczeT35ZmMCwcproEy43MlV45TIyeXndT5jvjvMxNHU0mB/L o84vy27UHSCStJTeEKm/v+TpUiZ7mUYOsqc1WjZfDul8snS+Q9wijlvpQnGpTNh5 RSFOBlVIzfEdn/JZIrIRIK2B0Bk6TZgWOIW39nrCma3f0VvPQNF8BhSqHg1iMwSO XSDQDd4Xs1F6ZQi8wFyHI5zx2IT0JB1u9QOY7JGcbLA8YTQStFLmqVWWmAFMUAU4 2L4cP+B9cOghZWMZ6/j50wP5wfokPCfiBj+eibWF/pm9EY9Y+cwMbOTvgpv3bDm5 vUca0qOKnFDhuAA37lgXCirke6ukODY= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:46 2026 by rpki-client