$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/422bd644-0dc9-389f-aca4-f88aec64e25a.roa File: 422bd644-0dc9-389f-aca4-f88aec64e25a.roa (raw, json) Hash identifier: hCZhS/MXYJkq7rSy3IKf2JsD4dFeJRnUNueM0HM75qU= Subject key identifier: E5:21:65:B8:23:5D:A2:22:ED:1D:14:0D:25:86:E2:BF:64:BE:FA:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA676F0F19B52F3110220 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/422bd644-0dc9-389f-aca4-f88aec64e25a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 31759 IP address blocks: 199.195.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a6:76:f0:f1:9b:52:f3:11:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e20d0f4f-9710-449b-9dbe-1d65e961d4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:5b:43:ff:2d:b5:6b:1d:5d:30:ef:e5:7a: 58:df:48:bb:cf:29:dd:72:d1:5e:1e:58:03:e9:7b: e9:a3:71:99:37:dc:65:3f:54:92:99:72:f8:48:1a: 25:85:77:fe:66:28:d6:39:7c:dd:23:05:54:ca:9e: e5:a6:dd:bd:3c:47:87:fc:96:e5:a0:42:bd:8b:c8: 53:91:b8:28:61:9e:7d:f0:1c:f4:e8:fe:ac:bd:0f: 98:07:db:29:62:45:a5:6b:9a:80:c8:8d:a8:24:4b: 0a:dd:90:fc:ef:89:b0:a8:eb:e6:83:6f:14:a7:f0: 52:9e:40:05:19:33:59:38:9f:e7:f3:9c:91:5a:cb: 85:46:c0:fa:32:48:ea:e5:b3:01:64:9e:a1:95:3d: d4:27:7a:0f:b7:d9:3f:ea:ce:e9:6f:de:0a:31:f7: 99:ff:72:c1:f0:bf:e3:c7:6a:b9:cf:2b:e1:40:8f: 40:97:fc:62:7a:2b:e2:a0:e0:44:fa:b0:f9:5e:1a: eb:b3:b2:b2:f0:93:95:77:83:87:3a:a2:94:58:22: 3f:1b:1e:a6:1b:e3:43:66:ef:96:9e:87:43:7e:9e: 8b:c3:d7:ff:5c:8c:f5:5d:a5:d1:7e:5f:3a:6d:49: 77:b9:70:f6:80:93:d5:bd:55:fe:6a:eb:d1:6d:9a: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:65:B8:23:5D:A2:22:ED:1D:14:0D:25:86:E2:BF:64:BE:FA:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/422bd644-0dc9-389f-aca4-f88aec64e25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:55:5a:d6:69:d2:cc:06:23:62:84:8f:de:d9:ab:d6:a7:57: 3b:de:3e:45:f2:c9:20:56:e6:2a:35:b1:81:ba:7b:64:ec:45: 73:45:88:31:07:c1:85:73:71:56:e6:83:42:a8:2e:2c:94:6f: 91:be:3e:d4:e1:55:41:02:b2:67:c1:c5:52:ad:10:c7:45:0c: d3:55:9a:39:56:13:3d:73:d6:84:7f:de:62:38:47:e0:47:7e: 6f:e2:18:3b:da:a7:61:cc:37:95:af:0f:de:40:20:5d:8d:3b: 4e:35:b4:83:bb:b3:ed:04:bc:ed:26:cc:4d:8a:0e:35:c4:3b: c9:a4:3f:d6:89:59:2f:5a:a2:72:14:8d:01:52:42:e8:73:a6: 10:85:ae:47:38:dc:eb:94:b0:0b:6c:86:0f:d0:f3:15:35:f2: 2e:79:f8:69:a4:f5:25:bc:b0:a6:47:bb:c0:ef:36:d8:1f:0b: c2:22:cd:6d:c7:58:8b:14:9e:46:47:03:b6:ac:c9:af:49:e1: 93:36:1a:72:3b:34:2f:f1:89:1b:df:7c:1d:0c:bd:cd:52:46: 9f:6e:58:5b:0f:42:1e:ca:83:97:53:4a:1d:3b:c5:c0:7c:e2: c9:f1:9b:8f:55:38:00:c2:d8:2a:13:5f:d4:f6:aa:4f:b2:59: 17:7e:6f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqZ28PGbUvMRAiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTIwZDBmNGYtOTcxMC00NDliLTlkYmUtMWQ2NWU5NjFkNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRVbQ/8ttWsdXTDv5XpY30i7zyndctFeHlgD 6Xvpo3GZN9xlP1SSmXL4SBolhXf+ZijWOXzdIwVUyp7lpt29PEeH/JbloEK9i8hT kbgoYZ598Bz06P6svQ+YB9spYkWla5qAyI2oJEsK3ZD874mwqOvmg28Up/BSnkAF GTNZOJ/n85yRWsuFRsD6Mkjq5bMBZJ6hlT3UJ3oPt9k/6s7pb94KMfeZ/3LB8L/j x2q5zyvhQI9Al/xieivioOBE+rD5Xhrrs7Ky8JOVd4OHOqKUWCI/Gx6mG+NDZu+W nodDfp6Lw9f/XIz1XaXRfl86bUl3uXD2gJPVvVX+auvRbZqFhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUhZbgjXaIi7R0UDSWG4r9kvvqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDIyYmQ2NDQtMGRjOS0z ODlmLWFjYTQtZjg4YWVjNjRlMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8PxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlVWtZp0swGI2KEj97Zq9anVzvePkXyySBW5io1sYG6e2TsRXNFiDEH wYVzcVbmg0KoLiyUb5G+PtThVUECsmfBxVKtEMdFDNNVmjlWEz1z1oR/3mI4R+BH fm/iGDvap2HMN5WvD95AIF2NO041tIO7s+0EvO0mzE2KDjXEO8mkP9aJWS9aonIU jQFSQuhzphCFrkc43OuUsAtshg/Q8xU18i55+Gmk9SW8sKZHu8DvNtgfC8IizW3H WIsUnkZHA7asya9J4ZM2GnI7NC/xiRvffB0Mvc1SRp9uWFsPQh7Kg5dTSh07xcB8 4snxm49VOADC2CoTX9T2qk+yWRd+b1w= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:46 2026 by rpki-client