$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e3c65c2-88e1-3ed2-af24-b2c823666033.roa File: 1e3c65c2-88e1-3ed2-af24-b2c823666033.roa (raw, json) Hash identifier: uYXUZL2VSJJjdGVNLCp907X3itVgF+D22/oMuAtQtps= Subject key identifier: 17:FA:B6:1E:56:C0:3B:46:19:D3:74:4F:87:56:18:FF:55:F3:70:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9457AADEF79F12FBC400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e3c65c2-88e1-3ed2-af24-b2c823666033.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 64.65.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:94:57:aa:de:f7:9f:12:fb:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ee1a987b-b722-43ff-a76e-10526aa6af2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:2b:1f:d0:34:44:a9:b9:a9:e0:ad:c4:7b: 77:47:7e:f5:48:9d:c8:84:5a:44:2a:0f:d4:96:4e: 5a:17:80:1f:00:06:2e:15:f8:ba:9e:05:bf:dd:84: d0:a3:66:62:d9:db:58:1c:1d:e8:77:f6:56:4a:31: 8c:ee:9c:70:10:84:ea:a0:a1:65:54:e1:f4:1f:38: a9:cd:fe:a2:ca:8c:ae:e8:6b:11:a8:48:27:81:fc: c6:7a:00:f6:aa:46:e5:d9:4d:cf:b2:e5:31:db:54: 82:1b:97:00:75:87:eb:17:60:04:0f:a2:d9:24:e9: e6:3a:89:13:c9:53:98:20:1f:1d:d5:c7:a9:7a:3d: 13:a0:87:9b:8c:b6:cc:e9:c1:f1:81:a2:a4:62:b0: 76:01:26:f9:00:31:2b:a1:db:a6:04:53:79:cb:03: 90:ca:79:4b:23:31:a2:54:1c:9d:0d:9a:58:92:40: b4:58:47:3a:07:cf:76:bf:67:6b:1a:e0:0d:09:78: ff:60:00:14:88:8f:82:c4:91:a7:a9:83:f8:bd:11: 82:14:9e:22:ab:76:2e:04:2f:bc:df:14:03:90:eb: b8:b0:be:0a:4e:9d:c1:99:8d:09:98:02:fc:cc:40: 90:3b:9e:f0:ef:ed:f0:ae:1d:26:81:da:71:2e:f0: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FA:B6:1E:56:C0:3B:46:19:D3:74:4F:87:56:18:FF:55:F3:70:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e3c65c2-88e1-3ed2-af24-b2c823666033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.65.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f7:64:8c:49:b8:94:dd:aa:1e:4b:89:10:3e:24:56:74:f6: 1f:32:64:16:65:b8:16:d8:a4:a6:57:25:e5:2d:8b:e4:2b:a7: 53:2d:f4:03:f6:5d:4f:09:de:17:5a:e7:12:c0:30:b6:e0:f9: cb:88:fa:e9:10:bd:ea:fd:4d:bd:b8:f7:3a:31:77:f6:d8:a5: 18:95:42:24:50:aa:b3:fb:8a:87:f0:6d:5e:27:76:18:87:a6: aa:83:2a:85:41:28:e5:30:67:71:f2:e0:7c:15:b4:87:32:12: a9:90:58:4c:6d:e0:81:f1:0b:ef:e8:06:a7:75:53:e6:6f:42: 9e:8d:33:77:f0:bb:cb:50:dc:77:03:7b:9c:b5:27:02:28:e8: a3:8c:41:c5:bc:c4:b4:a8:77:76:a5:19:b5:e2:4c:25:0d:19: df:76:0c:85:81:1b:59:57:2b:ae:d8:de:68:f4:9b:64:48:87: 57:e5:0c:aa:91:fe:c9:98:32:91:2e:e2:f3:bb:9c:7f:02:ba: 28:50:62:d8:24:48:7c:7a:cd:ba:ee:2a:d9:84:19:f8:04:90: da:be:31:42:f7:bc:26:de:7a:be:bc:37:15:7a:39:42:26:63: 06:7b:ff:05:19:31:5e:e9:42:d3:85:c6:48:8f:d4:58:d3:a1: 84:75:d7:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpRXqt73nxL7xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWUxYTk4N2ItYjcyMi00M2ZmLWE3NmUtMTA1MjZhYTZhZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv68rH9A0RKm5qeCtxHt3R371SJ3IhFpEKg/U lk5aF4AfAAYuFfi6ngW/3YTQo2Zi2dtYHB3od/ZWSjGM7pxwEITqoKFlVOH0Hzip zf6iyoyu6GsRqEgngfzGegD2qkbl2U3PsuUx21SCG5cAdYfrF2AED6LZJOnmOokT yVOYIB8d1cepej0ToIebjLbM6cHxgaKkYrB2ASb5ADErodumBFN5ywOQynlLIzGi VBydDZpYkkC0WEc6B892v2drGuANCXj/YAAUiI+CxJGnqYP4vRGCFJ4iq3YuBC+8 3xQDkOu4sL4KTp3BmY0JmAL8zECQO57w7+3wrh0mgdpxLvC88wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBf6th5WwDtGGdN0T4dWGP9V83AwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUzYzY1YzItODhlMS0z ZWQyLWFmMjQtYjJjODIzNjY2MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQEHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn3ZIxJuJTdqh5LiRA+JFZ09h8yZBZluBbYpKZXJeUti+Qrp1Mt9AP2 XU8J3hda5xLAMLbg+cuI+ukQver9Tb249zoxd/bYpRiVQiRQqrP7iofwbV4ndhiH pqqDKoVBKOUwZ3Hy4HwVtIcyEqmQWExt4IHxC+/oBqd1U+ZvQp6NM3fwu8tQ3HcD e5y1JwIo6KOMQcW8xLSod3alGbXiTCUNGd92DIWBG1lXK67Y3mj0m2RIh1flDKqR /smYMpEu4vO7nH8CuihQYtgkSHx6zbruKtmEGfgEkNq+MUL3vCbeer68NxV6OUIm YwZ7/wUZMV7pQtOFxkiP1FjToYR11+o= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:07 2026 by rpki-client