$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1a55b-69f2-3aea-b493-cb40144517d7.roa File: 45e1a55b-69f2-3aea-b493-cb40144517d7.roa (raw, json) Hash identifier: mS4Z9vO0wBR0D6VmEQTNr/Yrsb2aUsqftH0iiUy7uiQ= Subject key identifier: 44:A8:8F:4C:56:0F:E6:59:CE:2C:1C:A1:58:F1:4A:BE:BB:23:F2:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6895AB4824BDE99F4B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1a55b-69f2-3aea-b493-cb40144517d7.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 64.196.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:68:95:ab:48:24:bd:e9:9f:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=bdd088c0-3fe8-49d2-b795-bf147b9ec7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:92:e4:39:4e:8e:0c:1c:5c:81:02:cf:b9: 60:d0:35:d6:bf:bb:53:d0:b3:ce:b4:d6:49:76:25: 2c:e4:b3:39:63:b7:89:3b:89:92:6e:df:39:2f:d4: b9:86:8e:30:2d:dc:27:74:c3:55:7d:9a:e5:05:1d: de:d7:4e:08:a4:8e:b8:b7:62:e7:9a:de:73:aa:45: 93:d3:8d:5b:a7:f9:be:9a:d1:53:29:23:36:72:df: 32:56:74:31:65:d4:7d:82:12:6b:08:26:58:f1:bf: 6a:99:94:39:15:75:de:a2:f9:c1:88:9b:49:bd:92: 1b:a9:bd:fd:d3:2a:dd:40:03:c7:f6:d7:5d:4a:8a: 03:ff:a3:8e:bf:5f:da:1e:93:c3:3f:38:40:e0:98: e6:d0:6c:33:d6:08:d5:76:d8:be:6c:5e:33:c5:6e: 18:f2:a9:9d:16:83:06:6a:08:74:15:4e:5b:a4:5f: 44:b0:ff:27:f8:8f:3d:d5:db:57:6f:8c:96:7e:72: 5c:99:f8:51:5c:38:be:12:89:24:eb:98:d1:fe:84: f3:86:79:cc:8e:78:98:38:cd:d6:e1:28:45:70:90: 2d:aa:e0:53:04:8c:98:3e:69:2b:70:e8:7f:c7:ea: b8:9f:52:c0:f9:1a:6e:b1:8a:3a:90:72:55:1d:6f: 65:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A8:8F:4C:56:0F:E6:59:CE:2C:1C:A1:58:F1:4A:BE:BB:23:F2:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1a55b-69f2-3aea-b493-cb40144517d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c4:7d:d6:c2:11:fd:25:4b:40:15:27:a5:89:7c:18:2e:ba: f1:c4:d5:e4:0a:6f:27:57:48:14:36:1d:00:78:48:da:4c:a1: 3e:aa:d5:1a:f9:dd:a2:f1:d1:69:c8:04:bb:f3:03:5d:d7:ee: 73:0e:c5:95:11:5f:12:65:6b:87:72:e2:c4:29:bb:fd:ec:58: ea:75:b4:2e:e1:01:d0:eb:3c:d6:84:ae:9b:23:db:32:c1:83: 03:8b:42:ec:aa:2a:4c:97:f4:fe:7c:91:24:19:c0:42:a3:62: dd:4a:a7:b2:95:c7:3e:51:05:8b:7d:de:4f:2b:a2:64:cd:87: b4:ea:a4:07:65:c4:d0:b1:e8:df:b3:4d:05:4e:6a:19:ba:8b: de:fe:26:d3:52:b3:15:c6:2e:7c:42:6d:66:15:81:de:e0:a0: 74:a9:72:e3:97:27:0c:da:1c:67:0f:62:db:db:dd:a1:8e:cb: 7e:16:9f:19:8c:25:1a:18:28:ff:f7:a3:e0:61:7e:1d:a2:0a: 16:79:57:cc:dd:d8:45:0a:4b:04:b5:b9:f1:30:04:6a:ad:a9: 88:b4:a1:2e:57:cc:d6:c8:f4:81:2f:75:6f:8d:8c:cd:a7:b4: ee:35:9b:6d:b7:9b:71:e6:03:7e:04:f7:6b:0c:ad:7a:22:55: db:67:70:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmiVq0gkvemfSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmRkMDg4YzAtM2ZlOC00OWQyLWI3OTUtYmYxNDdiOWVjN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vWS5DlOjgwcXIECz7lg0DXWv7tT0LPOtNZJ diUs5LM5Y7eJO4mSbt85L9S5ho4wLdwndMNVfZrlBR3e104IpI64t2Lnmt5zqkWT 041bp/m+mtFTKSM2ct8yVnQxZdR9ghJrCCZY8b9qmZQ5FXXeovnBiJtJvZIbqb39 0yrdQAPH9tddSooD/6OOv1/aHpPDPzhA4Jjm0Gwz1gjVdti+bF4zxW4Y8qmdFoMG agh0FU5bpF9EsP8n+I891dtXb4yWfnJcmfhRXDi+Eokk65jR/oTzhnnMjniYOM3W 4ShFcJAtquBTBIyYPmkrcOh/x+q4n1LA+RpusYo6kHJVHW9l3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESoj0xWD+ZZziwcoVjxSr67I/LRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlMWE1NWItNjlmMi0z YWVhLWI0OTMtY2I0MDE0NDUxN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfEfdbCEf0lS0AVJ6WJfBguuvHE1eQKbydXSBQ2HQB4SNpMoT6q1Rr5 3aLx0WnIBLvzA13X7nMOxZURXxJla4dy4sQpu/3sWOp1tC7hAdDrPNaErpsj2zLB gwOLQuyqKkyX9P58kSQZwEKjYt1Kp7KVxz5RBYt93k8romTNh7TqpAdlxNCx6N+z TQVOahm6i97+JtNSsxXGLnxCbWYVgd7goHSpcuOXJwzaHGcPYtvb3aGOy34WnxmM JRoYKP/3o+Bhfh2iChZ5V8zd2EUKSwS1ufEwBGqtqYi0oS5XzNbI9IEvdW+NjM2n tO41m223m3HmA34E92sMrXoiVdtncLc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:48 2026 by rpki-client