$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa File: 5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa (raw, json) Hash identifier: nlPPuEfxYsih6bZIF97ejQI2S42ailSpUd1Km53XW18= Subject key identifier: DF:CD:25:F4:A6:A2:46:9F:4D:5B:DE:DA:84:4C:13:0A:6A:29:19:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A992D47CE1E2F06A3A400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 97.66.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:99:2d:47:ce:1e:2f:06:a3:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0df4eb82-18de-4191-ae38-426fc78680ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:20:94:2d:8f:81:94:14:7e:9e:6e:dd:b6: 0c:ee:69:c4:8a:98:67:60:d8:b8:d2:34:73:6b:5e: d2:b1:32:1f:aa:9c:a9:a3:f0:8d:b6:1e:93:35:0d: 4d:d7:6e:6b:5e:fe:0f:47:79:2b:cd:b3:6d:25:9c: 70:c8:c6:47:3b:f8:5e:4b:f6:a0:7a:1b:f9:6a:3e: 0f:8d:57:78:30:cb:ef:05:db:d2:c3:c5:97:a0:44: 34:5a:37:29:10:03:1e:ee:7f:6d:07:ac:52:d1:a1: c0:5b:94:6c:90:8f:14:f1:19:65:14:93:76:17:af: a2:d4:4d:67:66:dc:21:61:b1:78:b6:87:57:eb:87: 5f:80:6e:63:21:50:b9:ad:6d:71:2c:ac:72:74:f6: d3:bf:8e:fd:c5:a2:eb:7e:55:47:2d:6c:7d:d9:ee: 06:9b:86:3f:d4:35:17:21:a8:0b:01:be:19:7b:bb: 46:f9:94:2e:6d:9f:42:1e:95:2d:bf:72:52:61:1b: d6:2b:17:4f:2c:3e:7c:75:d4:11:aa:b6:5e:9b:f8: 03:c1:be:6d:04:e7:8d:79:48:7a:de:8c:49:22:69: 3e:3e:70:20:66:0a:a6:15:21:38:84:1b:29:bf:15: c0:0c:bd:a8:eb:7c:0b:b4:fd:b0:29:78:66:97:a8: 46:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CD:25:F4:A6:A2:46:9F:4D:5B:DE:DA:84:4C:13:0A:6A:29:19:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:23:f6:cd:db:d5:56:5a:3d:b4:f9:10:97:6c:81:1e:f9:5d: 46:e0:f1:43:6e:56:53:12:67:d6:b9:2a:7a:be:40:3c:53:af: f0:25:38:a1:8c:af:8d:96:e8:35:30:b8:91:5d:5c:f7:0f:df: 41:ed:9e:2b:7b:42:7c:26:2f:05:9d:53:76:b3:e8:74:2c:37: 18:56:49:88:81:65:31:3b:9e:7a:da:24:08:f1:da:f4:3c:ef: 9d:37:aa:a9:ce:87:0a:b0:ff:6b:d5:76:55:df:01:b1:e8:8a: 50:af:0c:45:45:81:90:cb:84:a1:79:f1:d6:74:ad:21:d0:67: b3:74:d2:2d:5f:17:4f:5b:c1:b7:e2:e2:81:4f:cb:c9:1d:b5: e3:e0:db:db:45:c7:3e:8e:0c:47:c9:b6:16:ac:b6:b3:b5:7f: c2:21:5f:db:a1:3a:6d:16:06:04:9f:59:73:c2:1f:7f:fb:0a: 42:f7:5c:d9:e7:ec:ea:b3:5f:f7:fc:c3:3d:95:7e:22:99:a4: 2d:71:8e:00:c5:9e:e7:08:9a:3e:ab:15:d9:c9:27:78:51:16: 16:91:91:4c:b1:a1:f6:d3:fb:63:91:13:13:01:a1:f3:41:3c: 00:40:12:d3:78:ca:da:df:c1:7f:60:15:ad:db:aa:cd:be:04: 29:9a:c3:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpktR84eLwajpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MGRmNGViODItMThkZS00MTkxLWFlMzgtNDI2ZmM3ODY4MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8kglC2PgZQUfp5u3bYM7mnEiphnYNi40jRz a17SsTIfqpypo/CNth6TNQ1N125rXv4PR3krzbNtJZxwyMZHO/heS/agehv5aj4P jVd4MMvvBdvSw8WXoEQ0WjcpEAMe7n9tB6xS0aHAW5RskI8U8RllFJN2F6+i1E1n ZtwhYbF4todX64dfgG5jIVC5rW1xLKxydPbTv479xaLrflVHLWx92e4Gm4Y/1DUX IagLAb4Ze7tG+ZQubZ9CHpUtv3JSYRvWKxdPLD58ddQRqrZem/gDwb5tBOeNeUh6 3oxJImk+PnAgZgqmFSE4hBspvxXADL2o63wLtP2wKXhml6hG4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/NJfSmokafTVve2oRMEwpqKRnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4NmQyNzUtNzY1NS0z YzA5LTlhYzEtYjg3ZTdmMWMyYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUL/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUj9s3b1VZaPbT5EJdsgR75XUbg8UNuVlMSZ9a5Knq+QDxTr/AlOKGM r42W6DUwuJFdXPcP30Htnit7QnwmLwWdU3az6HQsNxhWSYiBZTE7nnraJAjx2vQ8 7503qqnOhwqw/2vVdlXfAbHoilCvDEVFgZDLhKF58dZ0rSHQZ7N00i1fF09bwbfi 4oFPy8kdtePg29tFxz6ODEfJthastrO1f8IhX9uhOm0WBgSfWXPCH3/7CkL3XNnn 7OqzX/f8wz2VfiKZpC1xjgDFnucImj6rFdnJJ3hRFhaRkUyxofbT+2ORExMBofNB PABAEtN4ytrfwX9gFa3bqs2+BCmaw3o= -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:30 2026 by rpki-client