$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/516cc248-81bd-33c0-bf40-213c6b40e73b.roa File: 516cc248-81bd-33c0-bf40-213c6b40e73b.roa (raw, json) Hash identifier: dAZC8bx6jLGk8A53prvPj4Qm2Cxz3ZYxutEJWTzLero= Subject key identifier: 69:17:60:46:6B:9C:66:6C:32:A6:32:FB:C5:3A:A4:97:45:B9:AA:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A71B8D1D0B35460EF65B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/516cc248-81bd-33c0-bf40-213c6b40e73b.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.224.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:71:b8:d1:d0:b3:54:60:ef:65:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=853e8a48-0376-4c6e-8b4c-17c580c52e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:a5:40:b9:71:d5:1a:f5:0d:91:15:98:ac: 4f:e0:80:a7:a9:24:ce:c8:e5:af:c8:e5:bd:62:8d: 1d:e3:f8:39:46:bb:cc:32:f3:9f:cf:08:87:23:3e: 63:a1:0a:df:03:de:a5:c9:fc:51:24:41:5c:b2:96: bb:ff:93:12:41:6a:a0:eb:9c:3b:2e:eb:76:e6:59: 35:62:8b:b9:5a:49:0b:db:5d:93:42:93:b3:e2:df: 79:2b:11:73:1a:2f:d5:f3:10:a9:a3:69:01:40:86: 70:43:03:05:d7:fc:33:ce:4d:9f:d4:2d:9c:b0:0c: 66:f6:ac:79:2e:17:e6:0f:4f:51:39:6e:93:67:7b: 65:bd:4f:47:6c:cc:11:f8:40:57:69:c7:54:a7:d6: 44:d6:27:ea:09:e6:35:7c:21:5b:9d:bf:60:67:19: 4d:59:7b:a7:a7:97:6d:72:97:49:f3:37:39:90:4e: 7a:5f:f3:07:61:00:55:14:d2:98:dc:d5:e3:53:45: 4e:31:10:32:5b:21:99:1a:19:d2:39:3b:57:29:e9: bc:8b:3c:65:7b:f8:3f:98:d2:fe:5a:7b:e4:7c:5e: 94:92:c4:bc:25:03:75:3d:36:82:9d:dd:6f:48:8f: 28:02:a1:31:b1:2a:6f:0b:66:38:de:7d:3f:ef:21: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:17:60:46:6B:9C:66:6C:32:A6:32:FB:C5:3A:A4:97:45:B9:AA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/516cc248-81bd-33c0-bf40-213c6b40e73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.224.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f8:51:b4:ee:4f:ab:d2:7d:64:a9:e7:86:f8:c9:c5:12:b3: 12:77:42:ff:c7:85:3f:33:9a:b2:54:ef:85:fc:b9:fb:28:c4: 91:99:2d:0d:50:1c:ba:e8:c9:9e:21:4d:c9:68:b1:df:37:f1: 69:cf:bd:1c:f8:56:23:55:da:b6:1c:ad:51:a8:6d:36:51:ed: e3:61:97:40:fa:b5:17:ab:da:6a:d3:8b:96:12:99:4f:55:2d: 43:87:d8:90:13:be:19:87:44:6b:95:db:32:de:38:27:88:3f: 52:28:1d:bc:03:7a:7c:8e:e0:09:fb:69:0e:40:16:6f:05:24: 2f:2d:27:c6:d4:27:2a:18:21:b9:d9:6d:0e:1f:d3:8c:dd:e4: b3:a7:49:11:5a:c6:cd:53:91:42:a6:4c:32:64:19:21:4f:b9: d8:e6:4f:b5:81:f2:fc:29:55:b8:d1:4e:b3:35:11:93:75:af: 0f:df:d4:28:95:78:f6:9a:b8:2e:04:db:9a:8b:68:02:65:6d: bb:14:dd:38:cd:dc:e6:27:a3:c8:0c:bf:58:ed:94:c4:3d:d6: 61:4a:a9:d8:18:ed:e6:6e:d3:1d:b8:38:43:76:e4:62:41:3b: e8:0b:8d:f0:ab:c9:3b:a2:ee:f5:55:30:6f:00:e8:fd:f4:df: 67:75:fe:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnG40dCzVGDvZbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODUzZThhNDgtMDM3Ni00YzZlLThiNGMtMTdjNTgwYzUyZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOKlQLlx1Rr1DZEVmKxP4ICnqSTOyOWvyOW9 Yo0d4/g5RrvMMvOfzwiHIz5joQrfA96lyfxRJEFcspa7/5MSQWqg65w7Lut25lk1 You5WkkL212TQpOz4t95KxFzGi/V8xCpo2kBQIZwQwMF1/wzzk2f1C2csAxm9qx5 LhfmD09ROW6TZ3tlvU9HbMwR+EBXacdUp9ZE1ifqCeY1fCFbnb9gZxlNWXunp5dt cpdJ8zc5kE56X/MHYQBVFNKY3NXjU0VOMRAyWyGZGhnSOTtXKem8izxle/g/mNL+ WnvkfF6UksS8JQN1PTaCnd1vSI8oAqExsSpvC2Y43n0/7yETbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkXYEZrnGZsMqYy+8U6pJdFuaqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTE2Y2MyNDgtODFiZC0z M2MwLWJmNDAtMjEzYzZiNDBlNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2OCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj4UbTuT6vSfWSp54b4ycUSsxJ3Qv/HhT8zmrJU74X8ufsoxJGZLQ1Q HLroyZ4hTclosd838WnPvRz4ViNV2rYcrVGobTZR7eNhl0D6tRer2mrTi5YSmU9V LUOH2JATvhmHRGuV2zLeOCeIP1IoHbwDenyO4An7aQ5AFm8FJC8tJ8bUJyoYIbnZ bQ4f04zd5LOnSRFaxs1TkUKmTDJkGSFPudjmT7WB8vwpVbjRTrM1EZN1rw/f1CiV ePaauC4E25qLaAJlbbsU3TjN3OYno8gMv1jtlMQ91mFKqdgY7eZu0x24OEN25GJB O+gLjfCryTui7vVVMG8A6P3032d1/kU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:41 2026 by rpki-client