$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa File: 22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa (raw, json) Hash identifier: Wu8bRD8kgOD/t/Cx9HDwm4K8/yROc5+KMV+rX7gogPw= Subject key identifier: 26:D5:81:71:3A:AD:BC:31:A3:E0:C3:01:96:DC:02:DC:DE:CF:39:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6A7E1B177FAD4E6588C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 70.43.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6a:7e:1b:17:7f:ad:4e:65:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e54cebb9-5769-4af2-8c11-5c04ce0c7e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8c:24:a2:9a:28:18:c1:2f:d4:7a:5c:f9:31: 5b:30:62:58:93:21:77:b4:33:56:d3:e4:bf:19:76: e1:6e:6a:cc:13:f7:42:e7:ad:0b:1f:6a:ce:29:18: 0b:24:1e:47:f7:b3:22:0c:cf:bf:e5:cf:11:3a:ab: 07:f9:19:dd:b0:bb:25:ca:c4:ed:8f:9b:b3:39:96: a3:60:fd:60:62:87:a6:b6:b0:69:ce:0c:c6:a3:83: 6c:d5:c3:6d:06:0a:61:85:84:50:e5:7a:1e:28:08: 02:86:51:7d:62:45:f2:8d:4b:5c:72:3e:9e:a1:71: e8:91:76:dc:13:7e:4f:c9:f4:2a:59:40:bd:5a:9e: cf:5f:94:1c:75:33:44:d5:46:b0:e0:03:20:8c:37: b2:f5:83:71:d2:cf:f7:93:68:39:22:17:2f:05:05: fc:6c:5c:25:72:25:69:cf:ba:da:6c:2d:9d:5b:c7: 76:88:82:0d:93:e1:c5:25:80:ad:f5:07:87:63:06: 1a:fb:44:9a:e3:75:2e:33:55:b7:f6:22:dd:b0:68: 47:cd:30:69:de:da:e3:00:4d:5a:69:29:03:cd:aa: 08:44:61:b1:08:df:16:9f:9f:5e:e6:08:f5:60:32: 3b:9c:82:39:53:71:13:58:99:40:fd:6e:4e:62:5f: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D5:81:71:3A:AD:BC:31:A3:E0:C3:01:96:DC:02:DC:DE:CF:39:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 70.43.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:02:7d:85:0f:0c:bf:c6:c4:65:99:b5:15:5b:55:0e:0b:0f: 3e:97:02:65:7e:cb:39:64:1e:9b:93:1d:0b:d7:7e:14:0f:1d: ad:e9:32:4e:c8:08:36:20:03:79:18:bb:d0:47:9d:e1:31:bd: 15:ff:ae:c4:51:ef:dd:bf:08:54:e8:fb:d2:55:a6:fd:db:02: 7e:1c:74:6f:fd:18:d2:9d:0d:a2:bb:dd:ba:43:65:30:9b:57: 7c:e2:6a:03:c4:05:fb:cc:95:eb:91:49:0c:1c:8c:9b:98:31: e9:57:58:85:e5:58:46:dc:2b:76:0d:e4:c2:47:16:78:7b:4e: 78:ed:9d:82:30:84:30:45:56:98:3b:8b:9b:ba:5c:52:b3:a7: 21:9f:a3:1e:a1:28:3d:c8:78:8e:28:a2:18:db:73:de:73:c9: 24:85:62:20:75:7b:cd:7d:37:81:64:49:2f:42:8b:1e:5e:95: 67:1e:31:ef:f2:0c:f5:80:03:5e:fa:ed:6c:fa:17:40:6f:cb: dc:b1:ea:bd:e9:ea:02:fe:fc:1f:35:eb:bf:5c:71:7f:fd:1b: 0b:36:36:78:69:db:62:8b:20:f5:ca:3a:55:57:ff:6f:0d:3d: 84:d4:b5:b2:f9:57:02:3e:56:01:aa:6d:4b:f6:a5:db:9d:70: 80:08:2e:32 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCmp+Gxd/rU5liMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTU0Y2ViYjktNTc2OS00YWYyLThjMTEtNWMwNGNlMGM3ZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIwkopooGMEv1Hpc+TFbMGJYkyF3tDNW0+S/ GXbhbmrME/dC560LH2rOKRgLJB5H97MiDM+/5c8ROqsH+RndsLslysTtj5uzOZaj YP1gYoemtrBpzgzGo4Ns1cNtBgphhYRQ5XoeKAgChlF9YkXyjUtccj6eoXHokXbc E35PyfQqWUC9Wp7PX5QcdTNE1Uaw4AMgjDey9YNx0s/3k2g5IhcvBQX8bFwlciVp z7rabC2dW8d2iIINk+HFJYCt9QeHYwYa+0Sa43UuM1W39iLdsGhHzTBp3trjAE1a aSkDzaoIRGGxCN8Wn59e5gj1YDI7nII5U3ETWJlA/W5OYl/pEwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCbVgXE6rbwxo+DDAZbcAtzezzlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjJmYjIzZDktN2Q3OS0z YTUxLTg2Y2QtNWQwM2U3ZTZhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARiswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUgJ9hQ8Mv8bEZZm1FVtVDgsPPpcCZX7LOWQem5MdC9d+FA8drekyTsgI NiADeRi70Eed4TG9Ff+uxFHv3b8IVOj70lWm/dsCfhx0b/0Y0p0NorvdukNlMJtX fOJqA8QF+8yV65FJDByMm5gx6VdYheVYRtwrdg3kwkcWeHtOeO2dgjCEMEVWmDuL m7pcUrOnIZ+jHqEoPch4jiiiGNtz3nPJJIViIHV7zX03gWRJL0KLHl6VZx4x7/IM 9YADXvrtbPoXQG/L3LHqvenqAv78HzXrv1xxf/0bCzY2eGnbYosg9co6VVf/bw09 hNS1svlXAj5WAaptS/al251wgAguMg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:59 2026 by rpki-client