$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa File: 5453459a-6eb2-3994-9041-412771cabb7c.roa (raw, json) Hash identifier: KmMGiDvpsIFXdhER4CyxY6u/fRIFIBWw+XNy4Lq56/k= Subject key identifier: 83:B5:8E:ED:A6:7F:C4:0A:5B:77:5D:71:CE:7F:0A:8F:CB:56:AA:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A682F3BDFD5018EF1B480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 64.80.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:68:2f:3b:df:d5:01:8e:f1:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=84cff9f9-3e75-4d83-9ade-ce4ce8307477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:b2:55:c2:10:c4:67:15:4e:3a:90:7e:1a: ad:ba:fd:c7:c2:b3:07:c1:da:60:b0:2b:ad:8e:10: 55:44:be:74:0a:6b:3f:60:01:5d:4a:63:3a:e6:81: 6e:49:1f:2f:5d:64:95:2e:a5:e3:5c:2e:45:90:54: f8:75:35:88:c0:59:ad:bb:21:87:29:ce:f6:34:87: 4a:3e:d1:0e:a5:8e:43:30:54:80:3d:d9:a3:00:72: 9d:78:9e:dc:9c:e5:46:d1:66:10:c3:af:ad:ce:94: 0d:55:f0:7d:b9:54:ac:02:17:7b:4c:9d:dd:47:69: a5:2a:db:36:27:33:7b:d8:67:f4:a3:6e:62:28:8e: ae:e7:a3:b8:4a:b1:65:be:c9:cb:b3:20:79:39:09: f8:04:ec:00:ce:31:aa:4a:15:0b:32:e9:5e:2f:22: 2d:87:a8:ec:ea:9b:bf:57:2f:4a:2d:1d:35:16:8b: 23:05:14:32:a9:8d:dc:5d:f5:21:03:3e:75:22:5d: 91:e7:85:ab:ea:87:dd:ed:a6:ec:4c:22:5f:fb:70: 27:d8:51:b6:d1:22:b6:cd:99:0c:c5:ff:04:3e:fe: af:49:42:d1:99:8f:eb:95:e7:05:cd:14:41:b0:84: ef:53:09:e8:71:39:5a:92:d9:dd:65:c6:2f:ce:e1: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B5:8E:ED:A6:7F:C4:0A:5B:77:5D:71:CE:7F:0A:8F:CB:56:AA:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.80.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:3b:cc:87:75:e7:62:6e:84:f7:6f:35:80:e1:9e:e1:c8:f7: c9:39:a7:44:42:ed:f0:9a:21:5a:8d:f2:cb:85:1e:b6:d5:d2: c1:24:4b:24:27:a1:85:bb:3d:a3:15:bd:65:ed:62:49:c0:09: 07:de:e1:76:cb:4e:93:60:b1:44:20:31:11:b0:16:71:74:2d: 83:8f:c0:81:14:62:54:c3:32:03:11:9d:ab:aa:4e:30:d5:29: 96:c2:92:d3:09:f5:72:2d:59:99:3d:df:e9:d4:6e:24:ef:b8: be:07:98:f3:6b:4f:15:cd:20:cd:3f:c0:ca:59:b6:ce:24:c4: d6:63:ed:22:f1:4d:c0:ea:30:9f:ad:4c:13:70:80:40:5e:91: e9:67:2f:2a:3f:f7:d4:80:85:17:1c:9d:7a:29:09:5a:a7:08: 41:55:a4:c2:9f:66:b0:cf:3a:93:4c:c0:44:76:c6:f7:51:fc: e0:00:0d:42:16:92:0c:45:d7:39:eb:6f:4e:45:b1:91:c1:f3: 5f:ff:eb:7f:1f:0a:91:af:15:c1:b6:ea:a8:62:2f:99:8f:60: 71:53:94:2e:7d:1f:f5:4c:c0:63:d4:a6:82:71:73:41:33:b5: 63:14:5b:5d:a4:20:55:ff:a9:f6:24:39:50:97:9e:a9:02:40: cf:66:07:7b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCmgvO9/VAY7xtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODRjZmY5ZjktM2U3NS00ZDgzLTlhZGUtY2U0Y2U4MzA3NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkKyVcIQxGcVTjqQfhqtuv3HwrMHwdpgsCut jhBVRL50Cms/YAFdSmM65oFuSR8vXWSVLqXjXC5FkFT4dTWIwFmtuyGHKc72NIdK PtEOpY5DMFSAPdmjAHKdeJ7cnOVG0WYQw6+tzpQNVfB9uVSsAhd7TJ3dR2mlKts2 JzN72Gf0o25iKI6u56O4SrFlvsnLsyB5OQn4BOwAzjGqShULMuleLyIth6js6pu/ Vy9KLR01FosjBRQyqY3cXfUhAz51Il2R54Wr6ofd7absTCJf+3An2FG20SK2zZkM xf8EPv6vSULRmY/rlecFzRRBsITvUwnocTlaktndZcYvzuHGqwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIO1ju2mf8QKW3ddcc5/Co/LVqp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQ1MzQ1OWEtNmViMi0z OTk0LTkwNDEtNDEyNzcxY2FiYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQFAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkDvMh3XnYm6E9281gOGe4cj3yTmnRELt8JohWo3yy4UettXSwSRLJCeh hbs9oxW9Ze1iScAJB97hdstOk2CxRCAxEbAWcXQtg4/AgRRiVMMyAxGdq6pOMNUp lsKS0wn1ci1ZmT3f6dRuJO+4vgeY82tPFc0gzT/Aylm2ziTE1mPtIvFNwOown61M E3CAQF6R6WcvKj/31ICFFxydeikJWqcIQVWkwp9msM86k0zARHbG91H84AANQhaS DEXXOetvTkWxkcHzX//rfx8Kka8VwbbqqGIvmY9gcVOULn0f9UzAY9SmgnFzQTO1 YxRbXaQgVf+p9iQ5UJeeqQJAz2YHew== -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:46 2026 by rpki-client