$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa File: 3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa (raw, json) Hash identifier: WF3FJsqXLHGv9oP+fwb0Q7WFFdmaU1cIaZPfrqKi1bA= Subject key identifier: F7:03:70:65:4A:92:01:F0:20:67:81:7B:E7:97:19:33:63:23:DD:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D32D4D94ABFEF6E233108D580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 69.40.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:d9:4a:bf:ef:6e:23:31:08:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=d0b5a9da-ec38-4b92-84a7-8cdf8de66c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:5b:15:11:77:13:d3:ad:16:7b:4a:a7:8b: d6:fa:92:9f:2b:c4:56:70:80:ac:93:06:d7:32:fa: 4e:c7:2d:8e:e0:f9:5b:58:56:d2:00:4d:d5:92:63: 3e:46:1b:d9:8b:1e:9d:ef:4e:a0:f1:58:2c:b7:d9: a6:a8:67:a5:d8:2c:0a:74:31:51:ff:e1:41:25:c9: 82:28:47:c9:0e:e8:e8:9e:5d:df:4a:28:6e:25:77: c9:c7:8e:ab:54:d3:f0:65:09:79:29:43:e8:bb:59: 98:0f:3e:74:c8:47:95:75:5a:ad:b2:22:32:0f:33: 7a:e2:ba:26:f9:96:ea:4e:46:de:78:4c:07:af:10: 15:db:57:5f:5a:4b:ba:66:70:63:11:f7:8d:cf:e8: 64:17:aa:c1:21:33:bc:7e:f0:ec:54:58:3b:66:da: 2d:b2:a2:94:6d:cf:b9:6f:54:6a:83:0a:df:a7:54: d7:c9:e4:a2:60:ce:05:a9:4d:22:78:58:20:b2:25: 33:26:e9:d5:fb:39:35:9e:22:2f:f0:10:fe:ae:cc: 0b:b5:bc:cd:89:13:8d:9a:fb:39:32:f7:e1:cc:d1: 6f:78:c3:3e:b2:bb:c9:2c:6f:6f:f3:73:df:23:78: 26:40:93:90:06:eb:51:61:67:b2:37:04:56:14:63: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:03:70:65:4A:92:01:F0:20:67:81:7B:E7:97:19:33:63:23:DD:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:63:7b:ab:c4:58:08:1f:0e:90:72:9d:65:db:d9:e0:2e:b2: 26:05:2b:7e:60:e7:07:59:32:66:4d:45:53:6f:c8:8e:18:b7: 3f:29:0e:61:41:33:bc:ac:a8:dd:21:08:95:fa:34:06:8c:ee: 57:5b:e5:33:03:70:67:ce:51:22:b1:71:98:18:9f:35:a0:82: 26:b7:83:ae:fa:8b:c4:5a:19:0c:70:f1:02:08:0d:56:85:f2: 8e:c5:5f:73:ba:9c:d5:cc:48:0a:4d:3d:a0:ad:f4:e8:70:9f: 3f:c7:8a:94:ca:de:0c:2d:fe:0b:28:b2:95:2b:33:e2:68:50: e1:99:b9:47:b7:40:31:67:3f:1f:e9:91:2a:9b:8d:9d:ca:fb: 1c:80:cc:22:c2:9d:db:0f:f5:68:a9:b4:82:89:3c:e4:e7:37: 3e:9f:b8:aa:90:43:59:bd:7a:fd:34:cf:75:9b:8a:fd:f1:8b: ac:3d:4e:3d:09:00:0e:a3:d1:3f:43:fc:92:26:77:88:50:50: 8c:2d:69:55:9a:5a:c1:a7:f5:e2:5c:8a:c9:66:37:d3:9c:55: 8c:ac:a1:32:e0:ad:26:0e:48:e5:ec:39:d8:ec:46:9a:34:34: f5:ad:ba:74:a3:7e:bc:ce:72:ab:15:73:6e:80:c8:6f:ab:d0: d9:d9:ac:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1NlKv+9uIzEI1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk ZDBiNWE5ZGEtZWMzOC00YjkyLTg0YTctOGNkZjhkZTY2YzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqNbFRF3E9OtFntKp4vW+pKfK8RWcICskwbX MvpOxy2O4PlbWFbSAE3VkmM+RhvZix6d706g8Vgst9mmqGel2CwKdDFR/+FBJcmC KEfJDujonl3fSihuJXfJx46rVNPwZQl5KUPou1mYDz50yEeVdVqtsiIyDzN64rom +ZbqTkbeeEwHrxAV21dfWku6ZnBjEfeNz+hkF6rBITO8fvDsVFg7ZtotsqKUbc+5 b1Rqgwrfp1TXyeSiYM4FqU0ieFggsiUzJunV+zk1niIv8BD+rswLtbzNiRONmvs5 MvfhzNFveMM+srvJLG9v83PfI3gmQJOQButRYWeyNwRWFGMcpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcDcGVKkgHwIGeBe+eXGTNjI91IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2EyMTRjM2MtN2Y4MC0z ZTJiLThhMWItNmQ0N2VkYjIyOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBje6vEWAgfDpBynWXb2eAusiYFK35g5wdZMmZNRVNvyI4Ytz8pDmFB M7ysqN0hCJX6NAaM7ldb5TMDcGfOUSKxcZgYnzWggia3g676i8RaGQxw8QIIDVaF 8o7FX3O6nNXMSApNPaCt9Ohwnz/HipTK3gwt/gsospUrM+JoUOGZuUe3QDFnPx/p kSqbjZ3K+xyAzCLCndsP9WiptIKJPOTnNz6fuKqQQ1m9ev00z3Wbiv3xi6w9Tj0J AA6j0T9D/JImd4hQUIwtaVWaWsGn9eJcislmN9OcVYysoTLgrSYOSOXsOdjsRpo0 NPWtunSjfrzOcqsVc26AyG+r0NnZrHU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:01 2026 by rpki-client