$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa File: 218756c3-af8c-38b1-b072-6e0e113f26f2.roa (raw, json) Hash identifier: /iq0qP8oG6FlEOMbhlVB4SSYDHnOJR4a3zMGoKa3ma0= Subject key identifier: C6:BD:39:28:06:D7:5A:02:53:D7:3E:88:CA:BA:3E:10:FF:CE:5B:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6F3104A4F2FBFDE9C140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 204.32.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6f:31:04:a4:f2:fb:fd:e9:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9436b00e-5f2c-401f-9a3a-000420408af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1b:ea:c2:9d:9d:b2:cf:10:93:fc:0b:f3:bb: 8c:9d:d2:20:dd:9e:56:5e:42:d1:83:7c:80:08:48: 4d:81:1e:31:dd:88:ba:62:72:07:d3:8e:cc:d8:2f: 4e:29:73:3f:f1:f2:87:81:a6:1a:13:13:f1:5c:3c: dd:5c:9c:a4:ca:12:4f:7b:70:1b:0a:d9:62:17:99: fc:1d:6b:7d:88:8a:72:b2:d0:75:30:e9:75:34:36: f6:70:57:5c:1f:bb:ca:bf:41:1d:c3:bb:b0:1e:f9: 13:25:68:fb:d7:3e:cb:61:3a:b1:2e:9c:fd:a0:73: f3:b5:9d:ec:27:ed:14:75:56:6c:d9:48:51:5d:eb: 0b:3a:ca:b2:fd:c3:66:fd:6e:19:fd:9b:a3:11:d0: 45:4f:97:8b:0f:7d:6c:cd:cf:97:03:12:4e:f1:81: e0:b1:46:b4:0e:98:00:89:88:f1:3d:8d:e3:6e:d3: cd:63:d3:54:25:53:7f:b8:67:3f:db:75:87:dc:79: 3a:60:61:72:72:14:a4:03:f9:c4:06:f5:a2:d0:21: 24:84:fb:43:ee:39:c5:84:51:91:41:e6:08:01:af: 1b:a1:98:49:7c:82:6a:da:3e:ca:a3:00:0d:76:2f: d9:3d:9d:26:6c:ba:fc:9e:cb:d2:38:e1:38:94:c7: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BD:39:28:06:D7:5A:02:53:D7:3E:88:CA:BA:3E:10:FF:CE:5B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 204.32.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6e:db:f1:c9:6d:cc:70:4a:3a:5f:da:5f:65:8e:12:a9:23: 62:97:8a:32:dc:15:c0:91:ba:a9:25:66:71:68:49:5a:69:c6: 13:a2:4d:a0:ce:49:9e:67:dd:95:e1:84:b5:66:ec:c6:c5:d7: 8f:ab:72:0a:a7:95:49:31:ad:d1:77:cd:11:b6:bd:93:e4:2f: 0a:e0:8b:97:15:ee:09:eb:ce:72:b3:c5:b5:ee:75:45:d4:8f: 76:ed:42:d0:c4:19:db:2a:36:b0:73:1d:63:7c:0e:79:ad:5c: 88:48:e9:1d:02:92:46:45:f7:15:3a:81:54:28:e6:2c:e5:c3: 5c:2d:c0:2e:ea:57:00:f2:cb:d8:b1:87:05:8a:dc:ae:d8:42: 42:20:01:23:de:0c:2e:68:98:62:f4:76:6c:5f:2f:17:d8:0d: 9f:d9:cc:4c:82:d5:d6:fc:4f:05:af:48:cd:07:91:1d:97:16: 1b:bf:c0:be:90:24:a3:3b:63:71:10:6c:7e:36:32:93:26:6d: 9f:88:83:32:d7:af:a7:38:da:39:8a:f3:07:c1:d9:d2:87:78: 7d:37:8c:b9:f6:ab:e9:a3:c9:81:ea:54:52:69:11:b7:04:2b: 6c:3f:79:28:fa:11:80:2f:ae:25:e2:33:51:d1:78:54:45:54: 2d:c3:54:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCm8xBKTy+/3pwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTQzNmIwMGUtNWYyYy00MDFmLTlhM2EtMDAwNDIwNDA4YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxvqwp2dss8Qk/wL87uMndIg3Z5WXkLRg3yA CEhNgR4x3Yi6YnIH047M2C9OKXM/8fKHgaYaExPxXDzdXJykyhJPe3AbCtliF5n8 HWt9iIpystB1MOl1NDb2cFdcH7vKv0Edw7uwHvkTJWj71z7LYTqxLpz9oHPztZ3s J+0UdVZs2UhRXesLOsqy/cNm/W4Z/ZujEdBFT5eLD31szc+XAxJO8YHgsUa0DpgA iYjxPY3jbtPNY9NUJVN/uGc/23WH3Hk6YGFychSkA/nEBvWi0CEkhPtD7jnFhFGR QeYIAa8boZhJfIJq2j7KowANdi/ZPZ0mbLr8nsvSOOE4lMfGOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMa9OSgG11oCU9c+iMq6PhD/zls/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE4NzU2YzMtYWY4Yy0z OGIxLWIwNzItNmUwZTExM2YyNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzCDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVu2/HJbcxwSjpf2l9ljhKpI2KXijLcFcCRuqklZnFoSVppxhOiTaDO SZ5n3ZXhhLVm7MbF14+rcgqnlUkxrdF3zRG2vZPkLwrgi5cV7gnrznKzxbXudUXU j3btQtDEGdsqNrBzHWN8DnmtXIhI6R0CkkZF9xU6gVQo5izlw1wtwC7qVwDyy9ix hwWK3K7YQkIgASPeDC5omGL0dmxfLxfYDZ/ZzEyC1db8TwWvSM0HkR2XFhu/wL6Q JKM7Y3EQbH42MpMmbZ+IgzLXr6c42jmK8wfB2dKHeH03jLn2q+mjyYHqVFJpEbcE K2w/eSj6EYAvriXiM1HReFRFVC3DVFY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:13 2026 by rpki-client