$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa File: 4daf1a7a-da43-3166-9acd-71ed2a62e445.roa (raw, json) Hash identifier: CX2BVjdsy80SVM+r1ztDNaz/oPHZZwwY5ui1Gou2I7s= Subject key identifier: 2A:E4:40:1E:39:78:1F:F8:4E:20:7B:7A:E8:90:0D:C9:4B:5E:2B:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A717626DE4E997DE3DBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.135.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:71:76:26:de:4e:99:7d:e3:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=21160b30-fb67-4ad1-961e-92a6f30b93cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:25:ae:d2:26:f0:53:43:24:90:e3:e3:c8: 0d:05:0a:53:e5:ab:4f:01:51:7a:41:3f:10:53:73: b5:2b:fd:8d:3c:6a:45:33:1a:6e:27:c4:37:fd:89: 23:1d:d2:b3:bb:74:c0:1e:72:01:e4:a7:25:86:e2: 2c:a2:9d:20:7e:2e:95:08:cd:67:99:65:06:4d:35: 19:0b:10:d6:48:99:cf:d3:00:10:dc:77:ff:b5:0c: 9f:75:cb:0d:41:3d:cf:e6:57:b4:d8:96:21:67:e2: 94:24:55:68:82:94:98:6a:48:cc:71:60:a7:90:22: ab:c4:11:d5:0e:96:f8:5a:2d:81:f2:c5:3f:89:fd: 32:45:ad:1e:a4:c3:5c:6a:55:a6:50:5b:25:28:6b: 48:a9:72:a8:eb:92:14:d6:ca:8c:c2:52:5a:cd:9e: f3:70:ea:f4:ef:d2:e0:87:39:e7:cf:3f:2f:9c:b7: 18:a2:e2:61:d6:e1:cd:3a:66:75:7d:49:58:8d:6f: 1e:0e:70:7e:3a:f3:3c:b5:92:5b:27:db:3c:8f:3e: 99:ce:b0:17:0f:f5:37:75:1b:27:1d:0b:47:a8:d4: 72:05:3a:14:d1:c7:77:a7:ea:63:8c:6e:1d:e1:13: 09:91:98:a5:94:0c:64:c7:04:c2:f1:0f:e7:7d:f6: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:40:1E:39:78:1F:F8:4E:20:7B:7A:E8:90:0D:C9:4B:5E:2B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.135.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:15:5b:f2:94:9b:01:1e:89:c0:86:1a:95:0b:7d:8c:93:bf: f8:23:96:6f:59:f1:4d:77:fc:c3:94:fa:87:43:00:ee:33:2f: 5e:ea:61:fa:f8:31:bb:a8:29:5f:a1:06:c6:73:3b:64:1d:9f: 72:b9:e5:7d:71:6f:cb:c3:30:28:62:d1:ce:04:b7:b8:42:f0: 70:d3:a7:bb:9e:40:3b:06:73:3d:e3:f5:9e:08:58:ef:2b:bd: af:1d:a6:50:86:cf:54:2d:5b:d6:ac:97:9a:31:32:65:a2:4a: 20:74:ae:94:08:a6:bb:f9:b4:aa:f3:af:13:65:68:a4:ac:65: 6f:9b:84:c6:87:86:74:64:13:14:8a:58:2f:28:03:af:ee:05: e4:e2:2e:e3:07:4a:e8:55:d3:43:91:a3:64:62:bb:04:80:c4: d8:2f:af:5f:97:47:8e:17:71:ae:0e:a7:10:3a:9f:a6:13:73: c5:0e:8d:19:2a:2c:7a:55:9d:d4:70:c2:bf:76:c4:1a:77:d0: b5:58:a7:64:1d:47:cd:eb:8a:fe:1c:af:a5:86:57:4d:2c:aa: df:11:cc:5e:c9:a8:50:fa:a3:12:8f:1e:19:27:2d:43:db:d4: c9:0d:90:cc:80:2e:3e:ea:31:01:75:8a:94:74:90:4a:84:0d: 4a:2a:aa:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnF2Jt5OmX3j28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjExNjBiMzAtZmI2Ny00YWQxLTk2MWUtOTJhNmYzMGI5M2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrwlrtIm8FNDJJDj48gNBQpT5atPAVF6QT8Q U3O1K/2NPGpFMxpuJ8Q3/YkjHdKzu3TAHnIB5KclhuIsop0gfi6VCM1nmWUGTTUZ CxDWSJnP0wAQ3Hf/tQyfdcsNQT3P5le02JYhZ+KUJFVogpSYakjMcWCnkCKrxBHV Dpb4Wi2B8sU/if0yRa0epMNcalWmUFslKGtIqXKo65IU1sqMwlJazZ7zcOr079Lg hznnzz8vnLcYouJh1uHNOmZ1fUlYjW8eDnB+OvM8tZJbJ9s8jz6ZzrAXD/U3dRsn HQtHqNRyBToU0cd3p+pjjG4d4RMJkZillAxkxwTC8Q/nffbqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrkQB45eB/4TiB7euiQDclLXivgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRhZjFhN2EtZGE0My0z MTY2LTlhY2QtNzFlZDJhNjJlNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2IcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIVW/KUmwEeicCGGpULfYyTv/gjlm9Z8U13/MOU+odDAO4zL17qYfr4 MbuoKV+hBsZzO2Qdn3K55X1xb8vDMChi0c4Et7hC8HDTp7ueQDsGcz3j9Z4IWO8r va8dplCGz1QtW9asl5oxMmWiSiB0rpQIprv5tKrzrxNlaKSsZW+bhMaHhnRkExSK WC8oA6/uBeTiLuMHSuhV00ORo2RiuwSAxNgvr1+XR44Xca4OpxA6n6YTc8UOjRkq LHpVndRwwr92xBp30LVYp2QdR83riv4cr6WGV00sqt8RzF7JqFD6oxKPHhknLUPb 1MkNkMyALj7qMQF1ipR0kEqEDUoqqv0= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:41 2026 by rpki-client