$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c34d568-8571-3ff8-a588-bb5e82d5fa88.roa File: 4c34d568-8571-3ff8-a588-bb5e82d5fa88.roa (raw, json) Hash identifier: iaNxpqYSlwteWKnneMjR3q3VEOLP7hRBfht2l8xlKlc= Subject key identifier: 5D:57:B2:17:ED:E6:77:1D:AB:0D:0C:53:79:A2:5B:BE:45:E6:4C:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA6C9E40E465D792E1000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c34d568-8571-3ff8-a588-bb5e82d5fa88.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 36124 IP address blocks: 107.7.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a6:c9:e4:0e:46:5d:79:2e:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=bc29a8df-4ee6-4696-98c8-bde097709281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:4c:75:3c:7d:b9:a9:e5:79:28:b3:c7:91: cc:37:e7:83:29:a2:59:67:89:45:09:96:37:b4:91: 4f:ac:aa:c0:35:39:6d:a8:50:59:79:e7:65:80:20: fc:15:a9:29:31:59:82:c4:04:85:56:15:8a:74:ea: 60:c8:12:3c:b4:f7:d2:ad:18:77:ef:33:7e:b2:3e: 4e:91:3d:98:4c:f9:1d:f3:0c:2d:7d:ca:d6:ef:81: 41:7a:41:6b:42:b7:1f:92:5f:14:8e:50:fb:72:dd: 96:d7:86:92:72:c7:45:84:10:74:fe:e1:dd:9c:31: 16:ef:2e:c4:33:73:f1:9c:4c:38:14:8c:0d:d4:f7: 57:dc:61:74:1c:42:6c:3e:56:2c:39:1b:be:85:db: 4b:05:60:b4:e6:e2:1f:a0:2f:84:99:cc:79:93:f5: 92:75:59:50:ce:20:6f:20:72:09:26:b6:06:c6:ce: 5f:2a:a1:d7:4b:47:ab:82:f7:88:99:68:20:66:46: 67:f2:f4:48:26:c3:8a:49:a9:27:a9:4d:45:4b:32: ff:93:d1:3e:14:be:71:99:b4:fd:a8:6d:79:49:f7: 2d:63:65:2f:42:27:0b:67:86:48:a3:cc:18:da:d9: 4f:5f:54:4a:79:5c:a2:9c:fa:e9:6f:fa:8c:3a:4c: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:57:B2:17:ED:E6:77:1D:AB:0D:0C:53:79:A2:5B:BE:45:E6:4C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c34d568-8571-3ff8-a588-bb5e82d5fa88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 107.7.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:92:21:fb:2d:c4:4c:f8:30:c5:4e:50:81:c3:4a:44:e5:73: 2e:f5:5f:ad:f6:7f:d6:e7:fe:2a:70:30:89:9f:08:41:7e:94: b1:66:ed:a0:80:c9:61:c5:fd:a3:ea:df:7b:42:22:b6:60:aa: d6:13:6a:89:2f:18:4b:5f:a4:5e:db:d2:ef:fc:f8:62:57:28: b8:50:1a:d2:5e:c5:4f:9d:ef:6e:99:e2:de:b2:84:74:cf:21: 7e:cb:5b:d1:0f:ab:32:65:8d:02:4b:f3:b8:db:33:bf:b4:5b: c1:23:02:fa:fb:43:d0:ea:20:34:c1:e2:f4:0d:1b:77:e6:45: fd:67:39:fb:03:e3:08:ff:89:d5:47:2c:56:d3:1b:58:76:73: d1:e1:49:1b:11:e3:f4:2a:db:c2:95:e6:61:46:77:de:63:44: b0:5f:5b:bb:78:da:dd:0b:ca:79:af:ca:90:a6:39:fa:59:28: 0b:80:de:06:45:d9:f1:d1:4d:59:47:4f:50:48:99:23:e2:f6: 5a:84:c7:78:f1:01:07:c0:ec:75:ec:0c:36:91:4c:c3:c3:bb: 57:aa:af:b0:7c:4b:6e:f8:7e:2e:bb:e3:9b:a7:80:96:0e:e4: 8b:83:c5:4a:8e:bb:92:ff:ec:a1:b9:c7:46:18:58:72:1a:0c: b0:f4:5b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqbJ5A5GXXkuEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmMyOWE4ZGYtNGVlNi00Njk2LTk4YzgtYmRlMDk3NzA5MjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3dMdTx9uanleSizx5HMN+eDKaJZZ4lFCZY3 tJFPrKrANTltqFBZeedlgCD8FakpMVmCxASFVhWKdOpgyBI8tPfSrRh37zN+sj5O kT2YTPkd8wwtfcrW74FBekFrQrcfkl8UjlD7ct2W14aScsdFhBB0/uHdnDEW7y7E M3PxnEw4FIwN1PdX3GF0HEJsPlYsORu+hdtLBWC05uIfoC+Emcx5k/WSdVlQziBv IHIJJrYGxs5fKqHXS0ergveImWggZkZn8vRIJsOKSaknqU1FSzL/k9E+FL5xmbT9 qG15SfctY2UvQicLZ4ZIo8wY2tlPX1RKeVyinPrpb/qMOkyVewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1Xshft5ncdqw0MU3miW75F5kwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMzNGQ1NjgtODU3MS0z ZmY4LWE1ODgtYmI1ZTgyZDVmYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6SIfstxEz4MMVOUIHDSkTlcy71X632f9bn/ipwMImfCEF+lLFm7aCA yWHF/aPq33tCIrZgqtYTaokvGEtfpF7b0u/8+GJXKLhQGtJexU+d726Z4t6yhHTP IX7LW9EPqzJljQJL87jbM7+0W8EjAvr7Q9DqIDTB4vQNG3fmRf1nOfsD4wj/idVH LFbTG1h2c9HhSRsR4/Qq28KV5mFGd95jRLBfW7t42t0LynmvypCmOfpZKAuA3gZF 2fHRTVlHT1BImSPi9lqEx3jxAQfA7HXsDDaRTMPDu1eqr7B8S274fi6745ungJYO 5IuDxUqOu5L/7KG5x0YYWHIaDLD0Wxw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:44 2026 by rpki-client