$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/133c0ed9-b70d-391c-9d63-850464bf7a66.roa File: 133c0ed9-b70d-391c-9d63-850464bf7a66.roa (raw, json) Hash identifier: 1LrPs6PEw7rTQiNrmQsYJ5UkyC6yZCwNK7w7VXZm57w= Subject key identifier: 23:6D:36:FE:FE:98:99:77:3C:D2:0D:F5:A9:E6:70:BF:33:00:E9:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9289C70CA0D03196D080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/133c0ed9-b70d-391c-9d63-850464bf7a66.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 24.41.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:92:89:c7:0c:a0:d0:31:96:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5f75836f-50e6-457d-aa71-0f0bc917e3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:88:e1:1d:57:3c:9c:66:78:87:30:2c:68:93: ee:ad:37:f3:58:43:4e:82:42:c8:84:2c:05:f6:01: 31:7a:af:5f:06:3b:ae:80:e5:75:e7:7a:63:90:15: 65:f1:b1:98:72:5c:37:4a:ff:2c:28:93:4a:1b:92: 9c:f4:bf:51:88:93:e0:f0:d4:4d:51:a3:e8:c2:03: 67:e9:b3:35:92:56:77:d2:e5:8b:a5:38:0e:78:4a: 16:66:a7:c2:a9:b3:ab:35:fc:ac:98:60:49:5e:66: 8b:b1:cc:60:8e:15:e5:9a:35:94:93:1a:dc:31:94: 9f:4a:3f:0c:73:66:b5:bc:7b:61:0a:bb:f8:f0:d7: 37:ff:ad:41:1d:3d:d4:a8:c4:71:e8:17:89:03:18: 5e:45:2b:c2:b3:85:cc:00:03:e4:03:25:e8:2c:5f: 2f:0d:89:14:c7:d2:3d:ec:fe:1d:de:6b:f1:48:16: 8d:0b:9c:13:04:71:c3:01:b6:11:1d:a7:29:3a:5a: b2:c8:fc:12:ea:e9:a1:3b:8c:b8:cd:a2:ba:3e:ea: 0f:df:41:4c:8a:3b:9a:3f:55:76:d8:ad:1c:e3:f2: db:f0:34:6a:60:59:68:db:28:58:90:cf:be:a3:a3: 7d:c2:07:76:bd:dc:9b:04:86:54:c5:90:d9:12:68: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6D:36:FE:FE:98:99:77:3C:D2:0D:F5:A9:E6:70:BF:33:00:E9:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/133c0ed9-b70d-391c-9d63-850464bf7a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 24.41.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:10:b8:5d:9e:92:63:2f:a5:26:81:44:56:bc:62:e6:ff:90: 35:85:e8:e7:7e:e3:2b:54:0a:31:2f:68:b3:14:22:50:e4:18: 3c:8d:37:24:b3:69:4c:2d:9e:fe:d1:7c:dd:ac:76:2c:c1:2b: 0b:ca:f0:b4:71:3c:9e:b6:aa:c2:22:dc:e2:a5:fd:98:eb:bd: 07:04:73:9d:26:78:97:e8:4d:2d:09:56:0f:4d:b8:81:eb:0e: 96:b5:ba:3a:85:28:d7:37:e1:4b:f1:d0:a5:fd:52:fa:f8:1e: bf:20:33:a1:6f:87:45:0a:6e:3f:33:31:31:f1:e7:1e:4d:99: b0:2e:d8:fc:da:8d:c9:58:24:c7:eb:a9:96:03:ef:22:6a:f8: 80:de:55:90:5f:12:95:d9:04:1b:1d:3b:69:50:2f:fd:3b:03: 97:5d:f3:01:e4:a9:36:d8:2b:4c:2f:e0:56:ce:fd:49:53:e3: 68:57:ec:17:d5:1e:e9:60:98:0a:f3:33:de:a3:91:e5:b6:53: bb:6c:22:f9:98:71:8a:28:4a:6d:b0:f5:cf:31:80:19:6f:5b: 8e:98:b6:a5:33:0d:38:5a:21:16:d9:a4:3e:bc:07:19:e3:c5: e3:1e:94:bd:0b:a0:65:61:c8:61:56:43:16:45:c2:86:bb:5a: 58:31:0c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpKJxwyg0DGW0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NWY3NTgzNmYtNTBlNi00NTdkLWFhNzEtMGYwYmM5MTdlM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYjhHVc8nGZ4hzAsaJPurTfzWENOgkLIhCwF 9gExeq9fBjuugOV153pjkBVl8bGYclw3Sv8sKJNKG5Kc9L9RiJPg8NRNUaPowgNn 6bM1klZ30uWLpTgOeEoWZqfCqbOrNfysmGBJXmaLscxgjhXlmjWUkxrcMZSfSj8M c2a1vHthCrv48Nc3/61BHT3UqMRx6BeJAxheRSvCs4XMAAPkAyXoLF8vDYkUx9I9 7P4d3mvxSBaNC5wTBHHDAbYRHacpOlqyyPwS6umhO4y4zaK6PuoP30FMijuaP1V2 2K0c4/Lb8DRqYFlo2yhYkM++o6N9wgd2vdybBIZUxZDZEmiXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNtNv7+mJl3PNIN9anmcL8zAOlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTMzYzBlZDktYjcwZC0z OTFjLTlkNjMtODUwNDY0YmY3YTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGCkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQQuF2ekmMvpSaBRFa8Yub/kDWF6Od+4ytUCjEvaLMUIlDkGDyNNySz aUwtnv7RfN2sdizBKwvK8LRxPJ62qsIi3OKl/ZjrvQcEc50meJfoTS0JVg9NuIHr Dpa1ujqFKNc34Uvx0KX9Uvr4Hr8gM6Fvh0UKbj8zMTHx5x5NmbAu2PzajclYJMfr qZYD7yJq+IDeVZBfEpXZBBsdO2lQL/07A5dd8wHkqTbYK0wv4FbO/UlT42hX7BfV HulgmArzM96jkeW2U7tsIvmYcYooSm2w9c8xgBlvW46YtqUzDThaIRbZpD68Bxnj xeMelL0LoGVhyGFWQxZFwoa7WlgxDP0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:02 2026 by rpki-client