$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa File: 0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa (raw, json) Hash identifier: THGqzGd0ZleUsQq3SkDVTDaSQ9k7Ba1TcZGH+F4PhEY= Subject key identifier: 39:4A:E6:24:4A:B6:B7:06:35:C5:D5:CE:4F:4E:A5:F3:DE:A6:0D:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A64C12C027C0E83992500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 151.213.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:64:c1:2c:02:7c:0e:83:99:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=488b4f98-92ba-4e15-b611-c89a499c2dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:d4:01:77:8a:c6:9e:28:17:a9:73:46:47: f5:4d:5f:31:44:b0:59:2f:1e:93:8a:3f:14:db:6e: 8a:a8:2f:e6:75:a3:72:2e:3c:3c:52:8b:4b:80:bb: 4c:6f:e3:d2:53:e9:c1:0a:10:ec:2a:cc:0d:d6:44: 4d:61:a1:35:a7:52:f0:b6:7f:ad:d8:ce:79:27:25: fb:95:c7:2a:9d:ab:fc:22:81:d7:70:9d:06:a7:01: 22:40:fe:14:45:62:6e:53:a7:1f:ca:8a:c5:3a:cc: 6a:ad:be:94:7b:5c:52:ca:ad:0e:2e:e0:5f:04:4c: e7:84:8f:5d:6a:bc:13:45:23:e7:d6:13:1c:a2:ca: c6:24:ff:41:25:8a:0e:e0:e4:df:30:7f:0a:b3:bf: 8c:93:b0:8d:ee:39:41:45:0f:35:2a:75:f3:b0:1c: e0:1c:be:df:ea:ec:b7:45:e1:f7:a1:a2:a3:e7:46: 9d:9f:db:b6:f3:5e:8f:ea:ef:a4:43:2b:8a:40:80: e8:e4:c5:a1:0d:27:28:e7:7c:21:df:bd:19:66:78: f1:4c:5e:6a:dc:00:6a:2c:bb:7a:2a:2e:66:37:a9: b1:e4:0d:a0:c3:d6:64:a7:6e:5f:c5:d9:64:df:56: 36:cf:b2:a8:e3:4e:14:6c:01:59:00:33:df:7b:98: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4A:E6:24:4A:B6:B7:06:35:C5:D5:CE:4F:4E:A5:F3:DE:A6:0D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e2:02:04:be:3e:63:cb:72:0c:ba:e4:1e:35:16:75:35:c8: 27:58:4b:71:17:a9:6c:b6:f3:03:28:b0:7d:99:32:2f:51:15: 21:2e:80:87:fd:66:05:c6:5a:43:e0:69:be:87:f1:b9:92:53: a2:5e:3a:95:07:57:39:ce:5d:d5:78:35:2d:1a:fc:cb:a8:94: 2a:c2:cb:95:76:73:32:92:a3:84:57:cf:bf:02:7f:63:d3:ef: 29:b7:64:d2:a3:b8:cb:95:da:fa:3a:39:fb:c9:0b:06:f9:14: 9e:8b:20:58:a8:0c:02:0b:2f:98:94:1e:cc:77:35:5b:56:03: be:7f:1d:86:7b:b3:a0:a9:3a:68:0e:77:e5:52:69:c7:df:d3: fb:89:7c:ca:9f:4d:4d:6c:83:1f:2b:65:1f:29:ea:40:ff:8f: 24:09:5c:84:c7:06:a9:90:1a:2f:a2:7e:fd:fe:0c:ca:76:a7: de:dc:0f:d0:bd:1a:46:29:93:32:d5:d3:75:77:e5:a7:84:99: 3b:2a:c8:db:c6:0d:16:28:7c:d0:9f:06:1e:cd:87:d7:cc:ea: 1e:c3:57:b9:8c:d6:dc:de:1c:9c:06:af:6e:d4:13:38:3f:7c: c8:d0:fd:5e:0c:14:b7:ce:88:20:71:96:de:d3:19:6c:5c:58: 1d:31:df:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04amTBLAJ8DoOZJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NDg4YjRmOTgtOTJiYS00ZTE1LWI2MTEtYzg5YTQ5OWMyZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsarUAXeKxp4oF6lzRkf1TV8xRLBZLx6Tij8U 226KqC/mdaNyLjw8UotLgLtMb+PSU+nBChDsKswN1kRNYaE1p1Lwtn+t2M55JyX7 lccqnav8IoHXcJ0GpwEiQP4URWJuU6cfyorFOsxqrb6Ue1xSyq0OLuBfBEznhI9d arwTRSPn1hMcosrGJP9BJYoO4OTfMH8Ks7+Mk7CN7jlBRQ81KnXzsBzgHL7f6uy3 ReH3oaKj50adn9u2816P6u+kQyuKQIDo5MWhDSco53wh370ZZnjxTF5q3ABqLLt6 Ki5mN6mx5A2gw9Zkp25fxdlk31Y2z7Ko404UbAFZADPfe5g77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlK5iRKtrcGNcXVzk9OpfPepg0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGNhNGRkZmEtNDJkNS0z MWY3LTg2NWQtM2QwODYwMzkzZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl9VwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7iAgS+PmPLcgy65B41FnU1yCdYS3EXqWy28wMosH2ZMi9RFSEugIf9 ZgXGWkPgab6H8bmSU6JeOpUHVznOXdV4NS0a/MuolCrCy5V2czKSo4RXz78Cf2PT 7ym3ZNKjuMuV2vo6OfvJCwb5FJ6LIFioDAILL5iUHsx3NVtWA75/HYZ7s6CpOmgO d+VSacff0/uJfMqfTU1sgx8rZR8p6kD/jyQJXITHBqmQGi+ifv3+DMp2p97cD9C9 GkYpkzLV03V35aeEmTsqyNvGDRYofNCfBh7Nh9fM6h7DV7mM1tzeHJwGr27UEzg/ fMjQ/V4MFLfOiCBxlt7TGWxcWB0x35Q= -----END CERTIFICATE-----Generated at Thu Mar 26 12:20:50 2026 by rpki-client