$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa File: 0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa (raw, json) Hash identifier: d3JDjTHYO/0Gbx5Bqs+nQjK6aTZQgjn/QlurpmE4DkU= Subject key identifier: 66:8B:D2:40:77:7A:79:2C:21:48:EB:D3:55:55:61:CB:E9:A7:E3:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9F3DDD78F95E3D169800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.204.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9f:3d:dd:78:f9:5e:3d:16:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=1cd378ae-f211-4ad8-9e18-a96746fd32a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:13:f0:2e:80:68:fe:bf:04:c3:a5:11:a0: 41:b6:8c:d3:47:02:20:26:af:f6:33:73:79:46:5a: 9a:18:06:4d:4f:95:07:76:5e:83:a1:8c:39:c1:77: a9:a2:7d:e0:3c:f7:24:76:60:b1:5e:0c:74:cb:b8: c3:c2:e6:bd:26:f4:6c:e9:11:e4:3f:30:81:d9:a2: 25:84:4a:da:d0:3f:dc:56:31:79:bf:b5:2f:ca:03: 3f:3a:97:c5:37:a1:b5:1a:ff:7b:55:9d:c7:65:07: af:e2:08:18:98:bd:a0:37:49:42:d9:09:3c:c8:31: 50:18:9f:c9:ff:a9:a2:05:cf:c8:36:f8:85:d5:ee: 24:4e:b4:df:56:c9:f5:25:7e:89:0e:b1:5f:3c:ba: 34:f4:55:29:f9:7c:c3:06:ec:93:30:7a:08:51:1b: fb:43:ef:10:48:e7:51:13:59:8e:5c:9f:07:64:fb: 74:58:80:9a:8e:31:de:9b:2b:07:48:34:49:44:08: 32:52:4d:e6:fd:b8:af:11:ef:cf:b6:b2:ab:20:fc: 58:34:0a:1b:a5:5e:c0:dd:85:b9:85:0c:fb:e0:45: 82:ed:f5:2d:53:6e:98:09:65:4a:50:cd:38:58:d8: dd:56:33:03:81:98:c0:7a:95:b3:27:89:4c:f5:55: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8B:D2:40:77:7A:79:2C:21:48:EB:D3:55:55:61:CB:E9:A7:E3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.204.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:57:ef:4f:2c:9e:73:63:50:46:c4:b2:ad:89:a3:be:df:67: 35:69:e4:38:25:21:74:0f:d8:02:a5:93:30:bc:e4:ce:30:79: de:32:dd:d3:9b:60:5d:aa:93:72:47:1f:8e:82:dd:7a:ba:b4: 3f:20:9e:38:bf:0f:69:00:64:89:25:33:38:6b:9e:ed:13:af: 9f:e8:c8:fd:41:5e:f3:75:9a:71:c9:eb:fb:10:59:a5:1c:a1: 5e:33:df:e5:b0:73:1e:48:a5:65:a2:3f:6f:0f:aa:0f:25:f8: 7f:16:f1:c8:47:d6:65:0c:72:6b:34:ce:d4:5b:0b:44:7a:06: cf:79:01:4b:de:35:0d:bf:d0:c2:76:2f:da:b4:5d:43:66:c1: b7:49:33:1c:53:ab:62:4e:49:24:70:8f:ac:b0:34:39:f7:e0: ae:66:51:1c:f5:cb:7d:70:6c:61:00:82:a1:18:42:7a:82:b8: a0:1f:f5:65:0d:17:1d:64:67:08:7b:47:19:0f:e0:9d:9a:3c: de:da:b9:b1:26:22:52:ef:61:cd:86:4e:7e:ad:7e:27:89:b5: f7:7d:63:7d:d2:df:88:29:fb:76:b0:7a:a7:da:b1:da:05:19: f2:d5:01:9e:5d:33:3d:4c:52:85:dd:7a:9c:a8:09:79:79:d0: 8a:cc:4e:00 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCp893Xj5Xj0WmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MWNkMzc4YWUtZjIxMS00YWQ4LTllMTgtYTk2NzQ2ZmQzMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRET8C6AaP6/BMOlEaBBtozTRwIgJq/2M3N5 RlqaGAZNT5UHdl6DoYw5wXepon3gPPckdmCxXgx0y7jDwua9JvRs6RHkPzCB2aIl hEra0D/cVjF5v7UvygM/OpfFN6G1Gv97VZ3HZQev4ggYmL2gN0lC2Qk8yDFQGJ/J /6miBc/INviF1e4kTrTfVsn1JX6JDrFfPLo09FUp+XzDBuyTMHoIURv7Q+8QSOdR E1mOXJ8HZPt0WICajjHemysHSDRJRAgyUk3m/bivEe/PtrKrIPxYNAobpV7A3YW5 hQz74EWC7fUtU26YCWVKUM04WNjdVjMDgZjAepWzJ4lM9VXWywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGaL0kB3enksIUjr01VVYcvpp+OxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGY5ZDEzNDYtY2U2Mi0z NmJhLWEzZTAtOTVjYTJjMzgxOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2MwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaVfvTyyec2NQRsSyrYmjvt9nNWnkOCUhdA/YAqWTMLzkzjB53jLd05tg XaqTckcfjoLderq0PyCeOL8PaQBkiSUzOGue7ROvn+jI/UFe83Waccnr+xBZpRyh XjPf5bBzHkilZaI/bw+qDyX4fxbxyEfWZQxyazTO1FsLRHoGz3kBS941Db/QwnYv 2rRdQ2bBt0kzHFOrYk5JJHCPrLA0OffgrmZRHPXLfXBsYQCCoRhCeoK4oB/1ZQ0X HWRnCHtHGQ/gnZo83tq5sSYiUu9hzYZOfq1+J4m1931jfdLfiCn7drB6p9qx2gUZ 8tUBnl0zPUxShd16nKgJeXnQisxOAA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:12 2026 by rpki-client