$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11c972a3-a6cc-334d-8d6b-67c2806bdf2c.roa File: 11c972a3-a6cc-334d-8d6b-67c2806bdf2c.roa (raw, json) Hash identifier: X5j3T014ScJVHN1nOCkuJHz7ccJ9Nm9SXU0ni0H43vo= Subject key identifier: 05:87:3A:91:15:95:CF:E4:54:C7:00:DE:CF:3F:E4:CA:4B:96:27:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA5B4DC90F6E4F05C62A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11c972a3-a6cc-334d-8d6b-67c2806bdf2c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 97.66.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a5:b4:dc:90:f6:e4:f0:5c:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=32c33202-829b-4d33-b220-ea6f3426e3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4e:b2:e5:38:01:84:4a:52:41:3f:70:80:4e: 98:6d:1f:39:75:22:69:31:e2:f6:ff:a0:17:ea:6e: 54:90:16:d5:bb:f9:cc:91:f1:d3:d3:19:52:7a:02: d2:e7:75:b5:90:ea:ff:5c:f0:85:03:d7:ff:0a:6a: 63:48:7f:e7:70:9a:82:6f:28:44:80:ab:fd:f5:70: bc:79:8f:1c:72:31:1e:18:e6:ff:1b:3d:c7:1a:7b: 5a:37:6f:a6:e1:51:55:8f:8e:91:d1:db:1b:47:16: 77:7c:20:3a:f7:26:4b:2f:02:4f:08:9c:1c:b1:c1: 20:14:57:98:49:ff:4f:87:df:7b:e3:ba:5d:4e:9b: f2:d9:c9:fb:04:01:1a:5d:0e:d1:ab:4d:c8:c4:c2: b9:a6:dd:4a:85:e3:d3:1a:cc:20:77:55:07:f8:b3: 61:38:6e:0b:0e:7f:4d:95:d8:c2:16:73:62:ff:68: fc:b5:c4:7f:79:47:60:d2:85:e7:b1:9b:31:9d:5a: bd:2f:65:2a:eb:b8:54:be:cd:50:c1:c3:cd:f7:ef: 52:75:71:4e:e1:77:b9:41:43:6f:4b:15:16:78:b1: 05:5f:54:6a:bb:19:41:18:92:a8:e2:38:7a:a9:12: 1c:50:fc:b6:2d:5b:b6:76:df:e0:09:b5:4f:e6:0d: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:87:3A:91:15:95:CF:E4:54:C7:00:DE:CF:3F:E4:CA:4B:96:27:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11c972a3-a6cc-334d-8d6b-67c2806bdf2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:94:0d:cd:02:58:9b:8c:6c:8d:85:2e:80:34:fa:54:1a:b7: 39:02:e1:86:dc:b8:8a:c7:cc:2b:e8:9f:73:d9:d8:5e:ca:29: 60:79:0a:a2:4d:6f:df:27:5d:58:09:2e:f1:be:2f:db:4c:30: fc:d0:2b:d7:0a:b1:38:53:95:5b:ab:4d:fa:13:f4:98:25:b9: 14:30:b4:07:01:7b:1d:4d:49:f3:0d:c4:d7:98:48:8a:b2:d0: a3:c6:c3:55:95:27:32:2b:4f:8d:19:ab:26:90:19:c5:19:d6: 11:82:97:86:c0:78:8c:f3:cc:2e:3e:b1:bc:66:9c:db:45:2a: d1:2c:c6:21:fb:6e:71:61:99:2e:78:e3:86:04:56:0d:52:13: 27:e3:72:89:5b:53:80:e3:df:b9:b2:1c:cb:06:25:0c:34:52: 58:e9:45:d0:34:cd:24:83:ef:46:ca:ce:3f:86:81:cd:3a:77: 6b:11:30:a3:c8:96:94:36:6e:02:6f:37:c2:66:2a:96:58:84: 56:2c:95:24:24:a5:1b:3c:7f:41:7f:d4:dc:2d:72:48:5c:50: 46:9b:b0:8d:7b:3a:9f:aa:97:91:d3:ef:6d:92:8a:97:5d:ed: 24:7b:be:fb:bc:e6:ac:46:65:49:90:db:22:01:82:c8:91:32: 3d:7f:49:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqW03JD25PBcYqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzJjMzMyMDItODI5Yi00ZDMzLWIyMjAtZWE2ZjM0MjZlM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8k6y5TgBhEpSQT9wgE6YbR85dSJpMeL2/6AX 6m5UkBbVu/nMkfHT0xlSegLS53W1kOr/XPCFA9f/CmpjSH/ncJqCbyhEgKv99XC8 eY8ccjEeGOb/Gz3HGntaN2+m4VFVj46R0dsbRxZ3fCA69yZLLwJPCJwcscEgFFeY Sf9Ph99747pdTpvy2cn7BAEaXQ7Rq03IxMK5pt1KhePTGswgd1UH+LNhOG4LDn9N ldjCFnNi/2j8tcR/eUdg0oXnsZsxnVq9L2Uq67hUvs1QwcPN9+9SdXFO4Xe5QUNv SxUWeLEFX1RquxlBGJKo4jh6qRIcUPy2LVu2dt/gCbVP5g2+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWHOpEVlc/kVMcA3s8/5MpLliewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTFjOTcyYTMtYTZjYy0z MzRkLThkNmItNjdjMjgwNmJkZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYULQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSUDc0CWJuMbI2FLoA0+lQatzkC4YbcuIrHzCvon3PZ2F7KKWB5CqJN b98nXVgJLvG+L9tMMPzQK9cKsThTlVurTfoT9JgluRQwtAcBex1NSfMNxNeYSIqy 0KPGw1WVJzIrT40ZqyaQGcUZ1hGCl4bAeIzzzC4+sbxmnNtFKtEsxiH7bnFhmS54 44YEVg1SEyfjcolbU4Dj37myHMsGJQw0UljpRdA0zSSD70bKzj+Ggc06d2sRMKPI lpQ2bgJvN8JmKpZYhFYslSQkpRs8f0F/1NwtckhcUEabsI17Op+ql5HT722Sipdd 7SR7vvu85qxGZUmQ2yIBgsiRMj1/SdM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:47 2026 by rpki-client