$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa File: 36ae05ca-1685-3b04-877b-765a67c8b22a.roa (raw, json) Hash identifier: lELGGFvEVxqhqUXCVfD2ILXPIRc2KyKuYyCrLsYLRqs= Subject key identifier: 97:9B:0C:F6:53:6E:9A:9B:B8:D5:12:05:B0:07:34:DC:23:26:78:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A95F3A8A4BF2C794C7800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 66.148.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:95:f3:a8:a4:bf:2c:79:4c:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=541b1d9a-9b57-4abc-9035-1a44e7517c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8a:5e:7a:09:01:25:e3:f7:c4:c1:f9:fd:d6: 3d:38:df:70:35:aa:23:5f:79:a1:26:93:b4:e3:05: c3:ab:9c:be:f5:6f:93:0b:68:fb:5e:2a:7a:aa:cc: 97:2d:a1:52:3d:8c:44:e2:fa:92:41:4e:f3:5a:5d: 63:e5:6b:84:df:df:d4:5a:7b:7e:9c:11:a7:09:ee: e5:3e:20:ba:32:ba:28:5d:09:77:44:ff:1b:39:82: ed:b9:2c:0f:22:95:5c:f3:37:df:65:c3:22:49:ce: 0d:7f:45:6e:b3:4a:9a:95:1e:58:0e:47:f3:97:0b: 8e:49:1a:62:84:bd:40:0c:b6:71:51:7f:ba:b3:9e: d8:2d:ff:e9:0f:95:e8:e4:93:92:a7:1d:20:46:8e: e2:af:8f:bd:9e:f4:92:ac:f0:6c:30:ac:a2:5e:67: 6d:c6:77:f5:f1:4c:11:6f:ca:cc:1b:e4:b6:15:ac: b5:f9:ed:a8:01:f4:dd:58:00:d2:33:5c:ce:8b:ba: 2d:78:15:96:fd:08:f4:8c:c5:0a:8a:a3:55:d1:e8: 4f:95:e1:a2:4c:2a:39:c8:d1:83:bb:9b:a3:2b:43: eb:9c:48:a5:bf:d2:4b:29:d4:c3:e4:b1:10:ba:82: 22:9c:e8:cb:1a:6b:03:3f:dd:74:60:87:cc:99:20: 2c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9B:0C:F6:53:6E:9A:9B:B8:D5:12:05:B0:07:34:DC:23:26:78:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.148.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a3:83:48:28:f8:de:5a:09:1a:b1:7b:35:54:0a:12:11:6a: e2:c0:c2:9a:ba:da:78:a1:a8:89:e5:5d:e3:c6:6e:ee:d3:ee: f2:4a:98:13:da:70:62:1b:8a:d2:3d:08:0f:9c:19:c3:49:97: 9b:da:6e:c5:fa:18:0c:33:13:9a:eb:9c:a1:7b:e5:02:92:94: 75:6d:f3:3e:ff:ad:9f:d5:86:60:33:42:9b:df:d9:d2:4d:23: 1a:68:c7:4c:5b:97:3f:f7:66:41:8f:a0:3d:4b:ea:79:e4:87: 36:92:34:7f:f2:57:4f:cc:65:e7:1c:1a:4a:46:39:ac:d5:4f: 21:e0:ca:ab:71:f9:d3:89:1b:3f:22:01:cb:2b:1c:c1:21:59: 4f:5d:47:57:13:d6:1b:ea:e9:6a:c6:93:19:c6:61:bd:e9:7e: 9e:90:fa:e0:c3:46:e7:03:d4:55:e9:9a:9b:3e:41:b2:de:f9: a1:a3:60:5b:41:19:de:35:02:59:5f:d1:54:96:0b:ee:c9:f8: dd:4e:74:14:75:55:de:f0:d9:56:c9:05:54:87:55:fe:b1:d7: be:d5:05:af:94:cb:32:30:35:62:96:d6:14:e4:3c:1e:bb:6d: 49:8f:c5:95:a3:44:d8:2a:bd:ab:55:98:2d:c2:92:fb:3f:f1: f9:63:2b:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpXzqKS/LHlMeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTQxYjFkOWEtOWI1Ny00YWJjLTkwMzUtMWE0NGU3NTE3YzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIpeegkBJeP3xMH5/dY9ON9wNaojX3mhJpO0 4wXDq5y+9W+TC2j7Xip6qsyXLaFSPYxE4vqSQU7zWl1j5WuE39/UWnt+nBGnCe7l PiC6MrooXQl3RP8bOYLtuSwPIpVc8zffZcMiSc4Nf0Vus0qalR5YDkfzlwuOSRpi hL1ADLZxUX+6s57YLf/pD5Xo5JOSpx0gRo7ir4+9nvSSrPBsMKyiXmdtxnf18UwR b8rMG+S2Fay1+e2oAfTdWADSM1zOi7oteBWW/Qj0jMUKiqNV0ehPleGiTCo5yNGD u5ujK0PrnEilv9JLKdTD5LEQuoIinOjLGmsDP910YIfMmSAsBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJebDPZTbpqbuNUSBbAHNNwjJnj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzZhZTA1Y2EtMTY4NS0z YjA0LTg3N2ItNzY1YTY3YzhiMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQpSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+jg0go+N5aCRqxezVUChIRauLAwpq62nihqInlXePGbu7T7vJKmBPa cGIbitI9CA+cGcNJl5vabsX6GAwzE5rrnKF75QKSlHVt8z7/rZ/VhmAzQpvf2dJN Ixpox0xblz/3ZkGPoD1L6nnkhzaSNH/yV0/MZeccGkpGOazVTyHgyqtx+dOJGz8i AcsrHMEhWU9dR1cT1hvq6WrGkxnGYb3pfp6Q+uDDRucD1FXpmps+QbLe+aGjYFtB Gd41Allf0VSWC+7J+N1OdBR1Vd7w2VbJBVSHVf6x177VBa+UyzIwNWKW1hTkPB67 bUmPxZWjRNgqvatVmC3Ckvs/8fljK54= -----END CERTIFICATE-----Generated at Thu Mar 26 07:04:50 2026 by rpki-client