$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4135ce-e5e5-373e-b171-86440096c4bb.roa File: 2a4135ce-e5e5-373e-b171-86440096c4bb.roa (raw, json) Hash identifier: +NbbwDbNJMXo4+Qk9EWctWRrtT7dWtp3iPMUIpdI2FE= Subject key identifier: 69:45:37:B5:CB:11:EE:A7:0E:BC:AA:DE:D5:B4:5D:83:81:CD:C1:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6883CADAB61A9524AC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4135ce-e5e5-373e-b171-86440096c4bb.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 64.196.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:68:83:ca:da:b6:1a:95:24:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=558966f0-5568-4643-a61e-a4d3bfaf0a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1b:4c:6b:c0:0b:61:90:2c:74:af:40:a0:0f: 42:f8:c2:f5:d0:86:4a:74:54:c8:dc:79:c4:6f:82: 62:e9:a6:54:1d:14:08:f1:89:a0:bc:ab:72:1e:b3: 5f:6a:2f:91:36:0b:69:5d:b3:98:75:62:8e:f0:f6: 40:3d:4f:4d:8c:d8:68:b8:b4:a4:a8:71:21:95:63: 5b:b1:2a:d6:30:e5:87:cb:37:bf:6a:02:e9:0e:7b: 8c:4a:33:33:f3:48:c8:82:9d:eb:33:8d:5d:d7:fd: 95:e4:ec:0f:40:49:3b:4e:15:c7:ad:28:88:59:30: f1:a4:16:15:88:3d:80:3b:0a:e6:8f:df:61:b3:ae: e7:01:c1:3e:23:7d:70:83:97:ae:ac:74:49:9a:a9: 18:df:29:b4:d9:de:cb:ce:9e:9b:c3:eb:46:5b:54: 61:87:ae:8a:a8:68:dd:7a:9b:94:7b:33:bb:6c:75: a2:a5:38:b8:05:c1:7c:10:fd:a3:d5:74:0e:7b:92: 6e:60:6a:a6:04:3f:e5:f6:31:c5:cd:66:22:08:ce: a5:ef:4b:77:85:91:44:2c:46:b0:6b:2c:6c:1b:58: 73:79:c3:04:99:72:95:eb:fa:3d:78:91:e7:da:c3: cf:ce:c6:15:73:b9:7c:e7:f4:dd:c3:5f:f8:cd:e3: 05:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:45:37:B5:CB:11:EE:A7:0E:BC:AA:DE:D5:B4:5D:83:81:CD:C1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4135ce-e5e5-373e-b171-86440096c4bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:9c:79:f4:5c:11:ac:bc:a2:e9:42:0a:de:70:fd:ff:98:24: 6c:3d:43:17:8a:28:b2:d3:4f:3b:0f:ee:aa:f5:18:49:64:db: 25:e0:9e:66:b8:02:80:c4:bc:7b:33:5e:3a:5b:28:27:fc:ca: 13:a8:f3:2a:93:03:14:70:a1:a1:d0:6e:d9:78:a3:8c:57:7a: e3:82:3f:ea:2e:9c:8e:78:e4:70:1f:0e:27:ca:7c:21:0f:56: 8b:ff:2f:15:5b:a7:98:49:69:20:fc:18:f6:3c:db:fc:d9:34: 87:5c:70:34:0e:65:f6:f7:39:e1:03:77:ab:01:9e:b6:07:71: 13:46:05:2b:54:48:b9:31:cc:80:d9:8a:6b:c2:d8:84:09:69: 71:14:3b:1a:97:c7:d3:4a:53:ab:f8:b1:c8:07:af:89:dd:48: d0:e9:e8:5f:ba:60:49:d3:42:37:d4:b1:ba:43:b2:a8:6e:c1: 49:f2:49:cd:36:3f:1d:5a:77:b0:a8:b6:e5:b5:33:38:9f:e6: fd:cd:dd:27:66:ba:a6:a4:9b:a3:8a:cb:fa:dc:02:dc:1f:9d: d0:3c:40:ab:5b:53:b0:0c:b3:86:86:30:cf:35:70:ca:0f:07: 09:60:6c:08:c8:ea:2a:f2:a4:0b:26:e8:d6:c9:79:c2:44:46: 76:1c:11:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmiDytq2GpUkrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTU4OTY2ZjAtNTU2OC00NjQzLWE2MWUtYTRkM2JmYWYwYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRtMa8ALYZAsdK9AoA9C+ML10IZKdFTI3HnE b4Ji6aZUHRQI8YmgvKtyHrNfai+RNgtpXbOYdWKO8PZAPU9NjNhouLSkqHEhlWNb sSrWMOWHyze/agLpDnuMSjMz80jIgp3rM41d1/2V5OwPQEk7ThXHrSiIWTDxpBYV iD2AOwrmj99hs67nAcE+I31wg5eurHRJmqkY3ym02d7Lzp6bw+tGW1Rhh66KqGjd epuUezO7bHWipTi4BcF8EP2j1XQOe5JuYGqmBD/l9jHFzWYiCM6l70t3hZFELEaw ayxsG1hzecMEmXKV6/o9eJHn2sPPzsYVc7l85/Tdw1/4zeMFWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlFN7XLEe6nDryq3tW0XYOBzcHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0MTM1Y2UtZTVlNS0z NzNlLWIxNzEtODY0NDAwOTZjNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOcefRcEay8oulCCt5w/f+YJGw9QxeKKLLTTzsP7qr1GElk2yXgnma4 AoDEvHszXjpbKCf8yhOo8yqTAxRwoaHQbtl4o4xXeuOCP+ounI545HAfDifKfCEP Vov/LxVbp5hJaSD8GPY82/zZNIdccDQOZfb3OeEDd6sBnrYHcRNGBStUSLkxzIDZ imvC2IQJaXEUOxqXx9NKU6v4scgHr4ndSNDp6F+6YEnTQjfUsbpDsqhuwUnySc02 Px1ad7CotuW1Mzif5v3N3Sdmuqakm6OKy/rcAtwfndA8QKtbU7AMs4aGMM81cMoP BwlgbAjI6irypAsm6NbJecJERnYcESk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:37 2026 by rpki-client