$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa File: 558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa (raw, json) Hash identifier: VPFB/XbX2IGiG715uQ+Pe4JADCWSe3HyNMtEF+wRiYY= Subject key identifier: 49:E9:E0:A8:E7:36:71:7B:2D:FF:C7:B7:07:94:C6:A2:16:BA:0C:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6FF7FBDB8119A7E3C080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 208.101.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6f:f7:fb:db:81:19:a7:e3:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=07287fc6-550f-4bd1-85c4-3aa48aabcb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:52:cb:ff:07:6c:8d:c9:aa:5a:b4:5e:4f:f7: 3d:ac:df:3c:d7:aa:9e:7f:70:bc:b9:6c:c5:ae:a7: 91:ca:7f:08:98:c7:ff:ca:c2:2e:60:05:44:10:d6: 46:31:07:64:02:c1:b3:4d:b5:22:6c:f5:c7:37:20: 42:4a:cc:d2:ff:81:fc:65:ec:9d:95:a3:a0:f0:87: ac:c8:5f:8e:e4:d5:2e:33:a0:12:51:0b:48:8f:4b: 80:bb:d0:e1:06:fd:bf:6a:03:5b:d6:e6:13:87:5b: fb:b8:35:3b:98:57:55:f3:71:a8:fc:30:97:bb:10: 41:52:eb:66:74:5a:a2:f3:fa:80:9c:7e:9a:20:d5: 77:9c:f1:a6:eb:06:54:ec:81:9e:3b:d3:e2:2d:de: 76:59:8e:2e:62:d1:3a:40:f7:61:a6:4c:54:7a:bb: 57:0b:60:db:76:d3:b9:d3:cd:97:67:e1:2b:e6:f4: c1:d4:50:d3:9c:bd:a7:73:10:e3:ac:79:5b:b3:c9: 61:04:34:d7:b1:95:2b:69:5e:47:9b:a3:92:a6:2a: 99:ef:30:c1:db:0f:d2:57:64:85:dc:0d:23:6c:9b: 4c:5c:4a:cb:3f:db:69:a0:77:b2:fc:99:14:f7:2b: 55:9f:8f:62:ce:4a:58:f6:e7:87:6c:10:e0:74:65: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E9:E0:A8:E7:36:71:7B:2D:FF:C7:B7:07:94:C6:A2:16:BA:0C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:88:a9:80:16:1c:22:d6:82:0e:c3:c6:f0:ed:ff:73:d9:b9: e3:14:c5:e4:5d:5f:c6:df:db:61:21:f1:13:7a:26:4f:9a:06: 00:8f:f3:6b:3c:bd:63:cd:50:dd:16:10:04:f9:03:34:2c:3b: be:32:7f:97:a9:90:94:e8:2c:0e:31:0d:ff:8b:53:6b:3d:f2: cd:a1:ed:b1:9a:69:4a:5e:07:90:fd:96:22:51:db:72:fe:c3: 21:22:51:1f:53:01:70:5a:f8:38:22:8f:9c:3a:32:e3:44:e2: 63:21:e7:39:4f:aa:60:6c:9f:7e:69:81:37:69:67:fe:f6:9d: 7c:10:b9:7b:6d:47:96:a3:b1:27:bf:33:c7:50:0d:97:70:89: fb:92:28:8b:98:be:1d:28:09:39:ad:10:fe:41:e1:38:b0:cc: cf:25:c9:58:6b:f0:35:4b:ee:b6:ab:b6:0e:2a:cb:b4:f8:7d: 96:c5:32:a9:f9:e1:48:8e:7c:e7:9a:c0:7c:c6:21:5f:b2:19: 91:78:0b:8b:dd:dc:d9:7b:6c:26:33:47:83:f7:b3:e5:f8:89: 41:85:fa:6f:09:a0:c9:f4:6f:ca:12:5d:92:92:d1:3a:6c:bd: c9:40:f1:91:45:75:d8:16:df:6a:14:b5:b1:c5:71:a4:16:03: c0:81:69:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCm/3+9uBGafjwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MDcyODdmYzYtNTUwZi00YmQxLTg1YzQtM2FhNDhhYWJjYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlLL/wdsjcmqWrReT/c9rN8816qef3C8uWzF rqeRyn8ImMf/ysIuYAVEENZGMQdkAsGzTbUibPXHNyBCSszS/4H8ZeydlaOg8Ies yF+O5NUuM6ASUQtIj0uAu9DhBv2/agNb1uYTh1v7uDU7mFdV83Go/DCXuxBBUutm dFqi8/qAnH6aINV3nPGm6wZU7IGeO9PiLd52WY4uYtE6QPdhpkxUertXC2DbdtO5 082XZ+Er5vTB1FDTnL2ncxDjrHlbs8lhBDTXsZUraV5Hm6OSpiqZ7zDB2w/SV2SF 3A0jbJtMXErLP9tpoHey/JkU9ytVn49izkpY9ueHbBDgdGWipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnp4KjnNnF7Lf/HtweUxqIWugwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU4YjQ1NTgtZmIzZi0z Yjk5LTgwYTgtOGEzODNhZDZhZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+IqYAWHCLWgg7DxvDt/3PZueMUxeRdX8bf22Eh8RN6Jk+aBgCP82s8 vWPNUN0WEAT5AzQsO74yf5epkJToLA4xDf+LU2s98s2h7bGaaUpeB5D9liJR23L+ wyEiUR9TAXBa+Dgij5w6MuNE4mMh5zlPqmBsn35pgTdpZ/72nXwQuXttR5ajsSe/ M8dQDZdwifuSKIuYvh0oCTmtEP5B4TiwzM8lyVhr8DVL7rartg4qy7T4fZbFMqn5 4UiOfOeawHzGIV+yGZF4C4vd3Nl7bCYzR4P3s+X4iUGF+m8JoMn0b8oSXZKS0Tps vclA8ZFFddgW32oUtbHFcaQWA8CBaVI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:51:51 2026 by rpki-client