$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa File: 43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa (raw, json) Hash identifier: XErZRAC6rLOI5pMARQZY7ms+ooVM+SB0/PK245llZ4k= Subject key identifier: D3:26:86:88:1E:A7:DF:60:47:98:90:79:19:51:D1:A0:43:78:86:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A68A67BB2B800700BC500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 64.206.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:68:a6:7b:b2:b8:00:70:0b:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=650d32f7-f656-4e60-9afb-b55c1f3e0f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:a0:ca:c6:25:0b:60:3e:bb:8c:46:d7:e8: 8d:d8:fd:9b:4f:be:e7:6c:5f:f6:af:a5:5d:cd:8e: fd:31:42:80:e8:57:e5:c8:47:96:bd:78:87:74:a1: 07:f4:bd:d4:06:02:96:55:78:2a:65:1c:4d:8e:bd: b0:3e:b9:fc:de:7e:2b:1a:7e:d9:9f:89:87:51:92: 2f:de:6f:e3:1a:e5:ec:f3:57:d5:61:76:ed:3c:33: d4:9f:82:06:70:39:5b:26:cf:ef:88:b5:f1:7b:c5: 32:89:4d:7b:cf:ee:55:67:45:a4:b3:3f:88:fe:dc: 00:65:33:84:18:ee:5e:42:c7:b7:6c:6f:12:d7:ef: 94:98:b0:ae:06:cb:fb:94:da:63:1f:63:85:a6:7e: e3:1f:23:3a:c9:74:ee:2e:98:03:af:8f:cb:74:6d: 16:46:78:de:bb:f6:c9:0d:c2:19:d2:8d:93:a6:41: e6:d1:41:01:26:64:32:f9:46:39:ec:a7:d8:51:27: 3b:17:a5:12:86:eb:b4:ef:5e:76:76:36:99:f2:63: 03:c1:6f:55:7e:d8:b2:e1:fa:b4:94:68:eb:63:5e: 9e:5d:63:50:ec:ac:7d:c7:dd:10:b1:75:ce:3e:fc: 1f:66:5c:93:ba:19:b6:de:1f:9b:18:33:ee:f0:23: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:26:86:88:1E:A7:DF:60:47:98:90:79:19:51:D1:A0:43:78:86:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:75:7d:87:34:bc:1c:af:c7:96:89:98:e1:3d:0b:c1:54:bf: ac:22:54:e1:84:5c:04:4b:ca:19:c0:9c:cc:40:6d:28:01:a2: 55:a7:dc:6d:1b:0d:73:d0:20:b8:47:aa:3c:da:df:83:ea:16: 0e:2f:45:5d:69:5b:a4:80:10:ed:2a:e4:b6:ea:ad:7f:25:af: 6d:83:1c:52:ff:38:e8:5d:71:f3:f7:1b:cb:dc:96:8f:45:15: 2d:59:9c:05:e1:51:24:20:c0:08:bb:18:d4:13:8c:ed:a4:22: 5c:45:ea:a3:a5:55:52:58:43:63:62:74:33:89:43:89:ea:22: 33:89:34:48:14:20:23:bf:ba:fd:ea:2f:b4:4d:d7:f9:e5:cb: 31:f3:7d:bf:77:33:cc:9d:d2:03:17:a6:66:37:0a:4c:22:91: 97:16:38:ce:e3:b9:a0:69:d9:89:a5:ba:b3:6c:25:18:5a:dd: 6a:16:9c:ae:fb:ea:44:42:52:d1:18:6d:79:60:31:b2:c1:63: 52:52:12:b0:d7:df:e8:51:64:fb:58:4f:f4:76:fb:fe:60:f1: cd:22:4f:58:e5:99:c6:db:8f:89:8b:47:c5:d8:7c:b9:50:4a: a9:4b:8d:88:d7:79:3c:ec:79:67:67:b7:48:a8:1a:18:ec:06: 76:e6:31:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmime7K4AHALxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjUwZDMyZjctZjY1Ni00ZTYwLTlhZmItYjU1YzFmM2UwZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUCgysYlC2A+u4xG1+iN2P2bT77nbF/2r6Vd zY79MUKA6FflyEeWvXiHdKEH9L3UBgKWVXgqZRxNjr2wPrn83n4rGn7Zn4mHUZIv 3m/jGuXs81fVYXbtPDPUn4IGcDlbJs/viLXxe8UyiU17z+5VZ0Wksz+I/twAZTOE GO5eQse3bG8S1++UmLCuBsv7lNpjH2OFpn7jHyM6yXTuLpgDr4/LdG0WRnjeu/bJ DcIZ0o2TpkHm0UEBJmQy+UY57KfYUSc7F6UShuu07152djaZ8mMDwW9Vftiy4fq0 lGjrY16eXWNQ7Kx9x90QsXXOPvwfZlyTuhm23h+bGDPu8CN29wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMmhogep99gR5iQeRlR0aBDeIZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNmOGNiM2YtNjJlMC0z Mjk4LTg3NWUtZWI5NWQ3YmU0ZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx1fYc0vByvx5aJmOE9C8FUv6wiVOGEXARLyhnAnMxAbSgBolWn3G0b DXPQILhHqjza34PqFg4vRV1pW6SAEO0q5LbqrX8lr22DHFL/OOhdcfP3G8vclo9F FS1ZnAXhUSQgwAi7GNQTjO2kIlxF6qOlVVJYQ2NidDOJQ4nqIjOJNEgUICO/uv3q L7RN1/nlyzHzfb93M8yd0gMXpmY3CkwikZcWOM7juaBp2YmlurNsJRha3WoWnK77 6kRCUtEYbXlgMbLBY1JSErDX3+hRZPtYT/R2+/5g8c0iT1jlmcbbj4mLR8XYfLlQ SqlLjYjXeTzseWdnt0ioGhjsBnbmMaU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:41 2026 by rpki-client