$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5313c1c7-7762-3008-a43b-d619f2ea123f.roa File: 5313c1c7-7762-3008-a43b-d619f2ea123f.roa (raw, json) Hash identifier: MVztJJLwaPlAwXBBamCNpOB0kQU7ds6UWnySjJRlK3M= Subject key identifier: 10:A4:39:C3:C7:CD:64:F6:3F:93:D1:14:F7:11:F5:AB:5D:0D:45:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA3F14E1122F375C48080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5313c1c7-7762-3008-a43b-d619f2ea123f.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 11632 IP address blocks: 216.172.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a3:f1:4e:11:22:f3:75:c4:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=010d9d64-4a24-4980-bbb9-e183148ba0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:27:d6:17:68:16:b4:c6:d0:97:aa:b3:26: df:97:7d:9a:73:0e:e6:ec:d8:93:a2:1e:9b:26:00: 69:9a:84:76:0d:ed:de:f2:c6:c3:17:b6:9f:64:37: db:ff:38:fa:80:a1:9a:b0:d7:ce:39:44:ea:36:43: 86:a3:8f:38:3d:e1:86:7d:0e:d8:f3:0f:f5:ea:80: e9:cf:25:31:c1:cd:43:af:b1:ed:84:cd:ee:f7:34: c5:25:2d:9c:96:e1:b2:4b:82:26:ed:ce:69:4d:e7: 31:27:94:f9:58:63:81:da:e9:f3:41:9a:4b:df:ca: 6d:8a:3a:5a:61:42:55:ec:6e:5d:af:5e:d3:cd:74: 6b:37:10:ea:2b:ef:f4:79:d9:85:9b:b5:12:cf:58: ab:ec:11:b1:ae:76:93:b8:67:2c:b1:80:f1:82:70: a1:27:8a:df:2e:c3:82:1d:fb:0d:8d:61:4f:1b:c2: cb:77:ff:2f:52:53:33:f1:82:ef:a0:c5:4f:1c:ef: ef:3b:68:e3:47:4b:14:2f:ff:88:e3:66:e6:89:32: 82:e8:55:d0:f9:fa:ac:bf:5d:28:6c:32:b4:41:39: 16:d5:7c:2a:be:c2:7a:b0:82:22:ef:e6:33:b8:10: 96:71:0b:47:db:4b:86:0a:f7:07:a2:78:08:c0:1c: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A4:39:C3:C7:CD:64:F6:3F:93:D1:14:F7:11:F5:AB:5D:0D:45:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5313c1c7-7762-3008-a43b-d619f2ea123f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c8:bf:85:70:c3:9c:08:da:48:79:8b:e7:7f:2d:74:c1:11: ac:d2:5d:28:87:86:78:97:0f:49:e6:cc:d2:98:de:5b:42:68: 39:9f:ee:82:82:3a:5b:45:e0:df:09:95:fb:26:ca:31:62:14: 2c:a4:96:8a:15:e5:da:c8:a9:92:b0:31:ad:32:c7:61:d3:57: 5b:e7:cc:64:fc:a7:d2:d1:f8:94:1a:f9:89:b1:36:72:ed:aa: 7a:8e:80:5f:18:84:ef:06:f5:00:25:28:17:c2:17:77:50:d6: 21:8e:08:00:56:ae:16:7d:90:21:60:fa:a6:cd:28:a8:7f:97: bf:4e:ad:56:2d:2c:81:80:c7:36:92:6a:11:29:fa:d1:a9:da: 16:83:ac:3a:23:33:23:c2:31:c4:69:f8:28:44:a1:8c:b4:7c: d5:64:2a:b9:d6:b4:14:63:84:23:b7:ee:39:72:3a:fa:db:9a: 29:75:ce:fb:e7:8c:4b:f3:c2:01:6f:e9:7f:17:a8:48:9e:19: d7:84:ec:5d:b8:d2:cf:62:05:5a:18:a1:84:64:b0:db:b0:96: 80:9d:5a:b8:d2:30:64:c5:d4:94:d9:2b:78:44:d5:ac:68:ec: 5b:ae:c8:c4:16:07:65:98:5d:38:89:1b:a8:0d:97:ee:51:8b: 7e:e8:c0:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqPxThEi83XEgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MDEwZDlkNjQtNGEyNC00OTgwLWJiYjktZTE4MzE0OGJhMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVAn1hdoFrTG0Jeqsybfl32acw7m7NiToh6b JgBpmoR2De3e8sbDF7afZDfb/zj6gKGasNfOOUTqNkOGo484PeGGfQ7Y8w/16oDp zyUxwc1Dr7HthM3u9zTFJS2cluGyS4Im7c5pTecxJ5T5WGOB2unzQZpL38ptijpa YUJV7G5dr17TzXRrNxDqK+/0edmFm7USz1ir7BGxrnaTuGcssYDxgnChJ4rfLsOC HfsNjWFPG8LLd/8vUlMz8YLvoMVPHO/vO2jjR0sUL/+I42bmiTKC6FXQ+fqsv10o bDK0QTkW1XwqvsJ6sIIi7+YzuBCWcQtH20uGCvcHongIwBx3mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCkOcPHzWT2P5PRFPcR9atdDUUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTMxM2MxYzctNzc2Mi0z MDA4LWE0M2ItZDYxOWYyZWExMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPIv4Vww5wI2kh5i+d/LXTBEazSXSiHhniXD0nmzNKY3ltCaDmf7oKC OltF4N8JlfsmyjFiFCyklooV5drIqZKwMa0yx2HTV1vnzGT8p9LR+JQa+YmxNnLt qnqOgF8YhO8G9QAlKBfCF3dQ1iGOCABWrhZ9kCFg+qbNKKh/l79OrVYtLIGAxzaS ahEp+tGp2haDrDojMyPCMcRp+ChEoYy0fNVkKrnWtBRjhCO37jlyOvrbmil1zvvn jEvzwgFv6X8XqEieGdeE7F240s9iBVoYoYRksNuwloCdWrjSMGTF1JTZK3hE1axo 7FuuyMQWB2WYXTiJG6gNl+5Ri37owDQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:14 2026 by rpki-client