$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa File: 4c27ae8a-1fd5-388e-a051-f697661a310c.roa (raw, json) Hash identifier: c0JJbn5uzIbL/YmMTPxrkK0708SidKKwtwuP+DRWnZs= Subject key identifier: BF:F7:52:0C:4F:69:31:22:26:FD:35:D9:93:63:77:AD:93:1E:B8:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9C2293DEB2957D52EDC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 174.131.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9c:22:93:de:b2:95:7d:52:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=df7ffc67-9cb6-4642-8e76-283b71fde2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:fd:e7:6a:76:ff:c8:40:1b:78:15:d7:2a: db:df:7d:26:2f:b5:97:bb:10:e8:a2:9c:a7:c7:72: 81:01:68:01:19:cc:09:63:b4:e8:1d:e4:db:2c:39: ea:d8:f0:96:8a:55:da:60:c3:1d:43:86:6a:f0:aa: cf:5c:c5:dc:78:84:d1:c1:d7:d7:36:8a:f3:d2:60: a4:66:7f:63:b1:32:a8:eb:2c:6a:2d:61:d6:25:3a: e7:6e:39:1f:b1:d6:7a:33:7f:31:4a:9f:85:88:67: 8e:7e:96:b1:0d:15:b5:60:e5:37:b1:00:c9:37:b3: cc:97:47:57:04:7a:ce:01:58:c7:70:24:3b:a3:0f: b7:db:e6:ec:bb:74:b9:a1:08:48:b9:ba:aa:87:ea: bd:e4:9d:a9:f8:e5:1e:4e:f8:69:2b:fe:d4:1c:e3: 83:98:e5:17:93:a1:4d:0f:cb:14:c0:bc:ba:e4:4c: bc:ba:4d:55:fe:21:f8:bd:e7:a1:42:6f:08:32:c9: 46:b7:a8:b1:e7:47:bc:5a:b8:57:ed:4a:61:26:6f: 3e:a5:0a:e2:13:88:39:5b:4c:51:05:f4:78:cd:b0: 65:e9:99:bf:5a:25:3f:c6:38:17:dd:d1:a8:85:ef: ea:06:eb:82:05:37:1d:2f:93:a9:a0:d7:ed:67:66: b9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F7:52:0C:4F:69:31:22:26:FD:35:D9:93:63:77:AD:93:1E:B8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:76:43:29:71:8a:b8:41:48:0d:4d:c8:fb:6a:4d:f4:d9:2d: 7b:d0:b4:4b:8f:14:42:fe:94:ac:8b:0b:3b:71:fb:f4:d7:2a: eb:32:33:ca:47:2d:d0:bd:93:69:92:82:e3:18:56:c7:12:1c: cc:8e:96:7f:79:0b:5e:de:ef:ce:fa:52:8d:4e:65:ce:e0:7f: fe:f0:f4:49:95:48:01:0c:e1:fc:78:ee:24:7b:b1:41:0a:f7: 47:55:5b:cb:c7:8c:39:21:4c:c3:b8:f9:81:da:95:cc:0b:6e: 75:d7:ff:1f:cd:cd:c8:58:90:53:e5:d0:20:56:1b:3e:ed:b7: d7:2a:f2:f1:3b:cc:43:aa:d6:0d:2a:36:d3:90:f7:6f:d7:c1: 9f:b1:78:11:17:9e:d1:c4:6b:db:c5:95:2f:5e:06:b0:bd:37: 69:8f:70:93:af:b9:a7:3c:72:24:2a:ad:64:1b:b8:17:6c:0b: bc:b5:8a:6a:aa:0d:b5:3f:a7:6e:7b:52:d0:ec:6a:8f:8d:06: aa:a1:b3:ae:e1:ca:6a:da:ed:7e:80:c0:d5:d6:18:a7:51:25: ce:3f:01:da:c6:c5:8a:21:a0:03:26:45:e0:53:5f:03:8b:13: 1e:ed:bc:7c:a6:23:84:21:d0:55:46:25:8b:c1:42:6e:b8:85: e7:e0:46:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpwik96ylX1S7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZGY3ZmZjNjctOWNiNi00NjQyLThlNzYtMjgzYjcxZmRlMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYj952p2/8hAG3gV1yrb330mL7WXuxDoopyn x3KBAWgBGcwJY7ToHeTbLDnq2PCWilXaYMMdQ4Zq8KrPXMXceITRwdfXNorz0mCk Zn9jsTKo6yxqLWHWJTrnbjkfsdZ6M38xSp+FiGeOfpaxDRW1YOU3sQDJN7PMl0dX BHrOAVjHcCQ7ow+32+bsu3S5oQhIubqqh+q95J2p+OUeTvhpK/7UHOODmOUXk6FN D8sUwLy65Ey8uk1V/iH4veehQm8IMslGt6ix50e8WrhX7UphJm8+pQriE4g5W0xR BfR4zbBl6Zm/WiU/xjgX3dGohe/qBuuCBTcdL5OpoNftZ2a56wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/3UgxPaTEiJv012ZNjd62THrixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMyN2FlOGEtMWZkNS0z ODhlLWEwNTEtZjY5NzY2MWEzMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd2QylxirhBSA1NyPtqTfTZLXvQtEuPFEL+lKyLCztx+/TXKusyM8pH LdC9k2mSguMYVscSHMyOln95C17e7876Uo1OZc7gf/7w9EmVSAEM4fx47iR7sUEK 90dVW8vHjDkhTMO4+YHalcwLbnXX/x/NzchYkFPl0CBWGz7tt9cq8vE7zEOq1g0q NtOQ92/XwZ+xeBEXntHEa9vFlS9eBrC9N2mPcJOvuac8ciQqrWQbuBdsC7y1imqq DbU/p257UtDsao+NBqqhs67hymra7X6AwNXWGKdRJc4/AdrGxYohoAMmReBTXwOL Ex7tvHymI4Qh0FVGJYvBQm64hefgRrc= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:11 2026 by rpki-client