$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4815f4ff-e242-37c3-88b6-0a9137f15998.roa File: 4815f4ff-e242-37c3-88b6-0a9137f15998.roa (raw, json) Hash identifier: jvdXjEZ9KTxXJD2WNslM5937SovznXtrWOvMPGKrWh8= Subject key identifier: FE:71:AF:5D:16:AD:BF:70:5C:8C:5B:7A:7A:CF:D6:58:9B:A8:E1:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A785318AA83CBF736A860 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4815f4ff-e242-37c3-88b6-0a9137f15998.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 97.67.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:78:53:18:aa:83:cb:f7:36:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=eda3415f-167d-42e6-a0bc-99444e49f62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:94:f2:0a:41:a4:ae:b3:05:80:0c:0f:78:0c: 4c:8f:8e:bc:dc:6d:f1:8c:c9:5b:9e:d3:52:94:62: 68:ea:be:a7:16:0a:22:b3:58:0f:b8:e0:ab:91:73: 8f:26:a7:23:73:ae:d7:63:1e:f8:34:a3:03:a2:4f: 53:48:0a:ef:85:97:bc:f5:e4:cb:56:92:14:be:4d: 96:db:0c:d6:9b:d9:66:08:cf:05:1b:48:fe:d9:56: 69:64:ea:45:5e:45:a1:1e:d3:6d:e9:34:28:5e:41: e3:32:a7:4e:a6:23:34:bb:90:23:76:83:99:dc:4e: 74:af:8d:e3:3f:fb:01:d2:48:02:1e:35:34:58:25: be:99:04:ef:cf:9e:b5:83:57:3e:cc:ab:2d:19:44: 26:55:c5:59:95:96:75:e8:ca:c7:1f:2c:d0:52:6c: 1a:da:e8:8e:6d:0e:e8:05:dd:e7:b8:31:ea:bf:dc: ae:3d:7e:ca:7e:84:e3:2b:06:f6:31:5d:7f:b8:39: 46:6f:31:fb:58:4d:79:7f:52:29:6a:e6:31:c8:0d: 82:d7:51:80:60:92:3a:0c:3a:af:31:ab:98:73:1c: 96:90:48:3a:20:90:51:27:b8:72:f6:23:d6:25:e2: c7:58:f7:5d:d7:21:c8:3d:6d:bc:b0:4a:81:7b:f1: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:AF:5D:16:AD:BF:70:5C:8C:5B:7A:7A:CF:D6:58:9B:A8:E1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4815f4ff-e242-37c3-88b6-0a9137f15998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.67.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:22:bf:83:08:5c:5b:05:8f:b4:c8:e2:a8:f0:8c:34:fe:3e: 2f:8b:ea:b7:ee:7d:cc:2d:36:96:69:24:de:06:3c:78:51:7d: 69:1b:61:37:b6:ef:92:29:c8:dc:19:94:13:f9:c7:eb:f6:67: 7f:e1:c6:e9:09:6b:aa:aa:36:e2:21:5c:17:0b:0c:72:8f:5d: d3:3b:94:74:9c:17:d4:f4:0e:92:ef:2d:91:88:f9:15:4f:69: ca:23:40:47:b4:9c:c9:e9:39:db:9a:2f:c7:49:d2:99:d2:8f: 16:c5:c6:cd:00:6b:57:9b:31:6b:79:70:87:be:cf:43:bc:07: ae:92:48:11:db:2d:77:8a:dc:83:3b:e3:06:69:c7:1e:54:65: 92:a1:a8:34:41:57:73:6b:be:09:4d:61:f0:df:74:6b:eb:3c: 84:00:3e:20:78:44:47:52:e4:99:dd:5c:f3:a6:72:de:8a:01: 41:84:f0:35:49:89:6e:c6:21:c5:0a:32:c5:b3:dd:d4:9f:86: 0a:a8:11:3c:01:fc:40:c6:3c:42:8b:72:d4:13:76:c8:7b:44: 5d:5b:e0:9f:1b:aa:f2:56:2d:7f:36:f9:40:56:22:41:0c:50: 34:c8:19:dd:76:75:14:1c:47:f5:3e:6b:9e:e4:76:04:15:05: a9:71:e5:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnhTGKqDy/c2qGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWRhMzQxNWYtMTY3ZC00MmU2LWEwYmMtOTk0NDRlNDlmNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5TyCkGkrrMFgAwPeAxMj4683G3xjMlbntNS lGJo6r6nFgois1gPuOCrkXOPJqcjc67XYx74NKMDok9TSArvhZe89eTLVpIUvk2W 2wzWm9lmCM8FG0j+2VZpZOpFXkWhHtNt6TQoXkHjMqdOpiM0u5AjdoOZ3E50r43j P/sB0kgCHjU0WCW+mQTvz561g1c+zKstGUQmVcVZlZZ16MrHHyzQUmwa2uiObQ7o Bd3nuDHqv9yuPX7KfoTjKwb2MV1/uDlGbzH7WE15f1IpauYxyA2C11GAYJI6DDqv MauYcxyWkEg6IJBRJ7hy9iPWJeLHWPdd1yHIPW28sEqBe/FQ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5xr10Wrb9wXIxbenrP1libqOFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDgxNWY0ZmYtZTI0Mi0z N2MzLTg4YjYtMGE5MTM3ZjE1OTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYUPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoiv4MIXFsFj7TI4qjwjDT+Pi+L6rfufcwtNpZpJN4GPHhRfWkbYTe2 75IpyNwZlBP5x+v2Z3/hxukJa6qqNuIhXBcLDHKPXdM7lHScF9T0DpLvLZGI+RVP acojQEe0nMnpOduaL8dJ0pnSjxbFxs0Aa1ebMWt5cIe+z0O8B66SSBHbLXeK3IM7 4wZpxx5UZZKhqDRBV3NrvglNYfDfdGvrPIQAPiB4REdS5JndXPOmct6KAUGE8DVJ iW7GIcUKMsWz3dSfhgqoETwB/EDGPEKLctQTdsh7RF1b4J8bqvJWLX82+UBWIkEM UDTIGd12dRQcR/U+a57kdgQVBalx5ew= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:14 2026 by rpki-client