$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23d9e299-32e4-302b-bea4-dae2bfb6c7e9.roa File: 23d9e299-32e4-302b-bea4-dae2bfb6c7e9.roa (raw, json) Hash identifier: vBlWldmQAlIwKYfDT6PjrG2Y9T9W5Xsem7oExSwRtWY= Subject key identifier: 1F:0A:C9:89:A9:D4:53:99:A4:18:59:87:F4:C0:41:F9:BA:60:4B:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A694184E084F35475FF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23d9e299-32e4-302b-bea4-dae2bfb6c7e9.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 66.248.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:69:41:84:e0:84:f3:54:75:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fdfc528e-a87a-4ae8-9c16-3dfbb1c66331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:e4:f7:0a:02:c8:83:ff:51:49:33:e2:e0: 82:57:3d:60:b6:df:c9:6b:87:16:a5:d6:8c:a8:cc: b1:89:97:2a:36:c7:5f:29:c6:15:13:7d:67:ac:30: 2c:04:d9:60:d7:c6:7d:93:f2:7d:fe:c8:ad:fd:85: 81:29:25:75:72:15:32:40:da:1e:aa:65:de:bd:98: c3:43:57:8a:b8:aa:ad:b6:35:ab:b4:76:cc:3e:e6: e8:45:f8:40:c4:a2:95:ed:21:85:4f:1c:47:ed:33: 81:ec:f4:b6:16:92:2f:3c:88:87:63:d8:8b:2f:95: dd:3c:58:e8:89:e1:b0:79:f7:7f:61:b0:9c:33:8b: 7c:36:8d:be:6f:b0:86:7c:73:47:b8:2c:2e:61:59: 4d:d6:6b:2d:b8:fa:40:e2:81:1f:35:c6:90:cb:fa: 55:12:fd:c6:56:62:1c:b4:97:8f:b7:28:ef:7f:1f: 18:5e:7e:15:ce:3b:06:b6:0e:03:02:6a:43:ef:26: f9:c7:29:bd:a2:0a:f2:fd:51:83:f1:55:97:37:d0: 7f:f0:e3:25:5e:ed:09:28:01:2e:85:e7:fb:93:10: 5a:db:a3:ba:6b:de:0a:4b:b7:54:e0:59:37:ce:b4: 68:d6:89:89:2c:81:d8:f2:7a:1f:99:8a:8f:d1:c8: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0A:C9:89:A9:D4:53:99:A4:18:59:87:F4:C0:41:F9:BA:60:4B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23d9e299-32e4-302b-bea4-dae2bfb6c7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.248.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a2:c6:9f:67:a4:ea:12:c2:6e:17:7d:73:c5:ad:46:68:25: ea:57:a5:79:91:ba:15:2c:83:df:ae:0c:74:66:5b:db:59:e9: 53:7d:e1:1f:66:7b:75:16:4d:40:72:95:3c:bf:13:8a:9e:df: 16:ae:d8:65:ff:38:bd:04:bc:8d:97:e4:f2:6d:df:9c:29:44: 34:59:2b:98:cb:d7:3f:a8:cc:b4:d1:26:58:a9:95:ac:77:58: 06:80:14:eb:c9:dc:31:15:3b:d4:53:f1:69:ed:b5:31:b3:1d: 4c:02:28:04:2a:3a:36:38:19:a9:97:c4:f3:2f:70:1f:2c:2e: 20:40:46:bc:d1:01:67:cf:7d:5e:8e:e2:17:50:1a:be:0a:6b: 73:f4:d3:e3:9f:e3:68:c3:42:6a:c6:ee:8d:c7:f3:fd:d7:8a: d9:1e:e0:3c:e4:c4:5f:e3:42:bf:14:57:3c:cf:b1:84:9e:3d: 78:37:fb:82:f1:84:1c:71:ef:27:f0:fe:2d:33:c3:3c:a9:e4: 0e:8d:4c:94:7b:72:bf:b6:58:8c:7a:46:1d:67:16:79:be:ae: ec:96:5f:d6:b9:73:03:79:fa:b2:03:5e:5d:f7:27:75:86:d7: ae:ad:3c:9f:7c:68:18:49:58:4b:6c:38:71:46:55:62:73:54: 6f:56:2f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmlBhOCE81R1/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmRmYzUyOGUtYTg3YS00YWU4LTljMTYtM2RmYmIxYzY2MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiDk9woCyIP/UUkz4uCCVz1gtt/Ja4cWpdaM qMyxiZcqNsdfKcYVE31nrDAsBNlg18Z9k/J9/sit/YWBKSV1chUyQNoeqmXevZjD Q1eKuKqttjWrtHbMPuboRfhAxKKV7SGFTxxH7TOB7PS2FpIvPIiHY9iLL5XdPFjo ieGwefd/YbCcM4t8No2+b7CGfHNHuCwuYVlN1mstuPpA4oEfNcaQy/pVEv3GVmIc tJePtyjvfx8YXn4VzjsGtg4DAmpD7yb5xym9ogry/VGD8VWXN9B/8OMlXu0JKAEu hef7kxBa26O6a94KS7dU4Fk3zrRo1omJLIHY8nofmYqP0ciZnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8KyYmp1FOZpBhZh/TAQfm6YEtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNkOWUyOTktMzJlNC0z MDJiLWJlYTQtZGFlMmJmYjZjN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQvgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaixp9npOoSwm4XfXPFrUZoJepXpXmRuhUsg9+uDHRmW9tZ6VN94R9m e3UWTUBylTy/E4qe3xau2GX/OL0EvI2X5PJt35wpRDRZK5jL1z+ozLTRJliplax3 WAaAFOvJ3DEVO9RT8WnttTGzHUwCKAQqOjY4GamXxPMvcB8sLiBARrzRAWfPfV6O 4hdQGr4Ka3P00+Of42jDQmrG7o3H8/3Xitke4DzkxF/jQr8UVzzPsYSePXg3+4Lx hBxx7yfw/i0zwzyp5A6NTJR7cr+2WIx6Rh1nFnm+ruyWX9a5cwN5+rIDXl33J3WG 166tPJ98aBhJWEtsOHFGVWJzVG9WL1o= -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:19 2026 by rpki-client