$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa File: 5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa (raw, json) Hash identifier: 5dMHqcoBsY8egyKkotlLDyMRzKiheNPpx+mcmrK9M8s= Subject key identifier: 03:35:55:77:57:2D:1F:72:30:D8:1E:51:DA:41:92:B1:5C:53:C9:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9E036A8BE674B88F8780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 208.38.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9e:03:6a:8b:e6:74:b8:8f:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c57c3ce1-3930-44b2-8396-ffbb9d2effb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:9b:e7:4e:bd:a2:03:17:f5:b2:0b:d6:9f: 28:a9:ba:f0:a2:02:5e:cc:15:e4:1c:9b:05:cf:db: 4a:60:34:bf:2c:33:6d:3f:bc:8b:1f:a9:9a:48:c1: 84:3d:c7:24:23:cc:d8:d8:db:f5:00:ac:72:25:4d: 14:a3:d8:36:70:ba:0f:73:44:9a:3d:a5:46:98:2c: f0:9c:8f:b2:3b:5b:51:73:b4:d1:f8:c1:ba:d5:4f: f2:b1:06:c9:65:de:ee:01:8a:66:67:fe:e5:b2:fa: 9a:b4:d4:45:cd:a4:0a:61:dc:18:aa:a2:58:cb:ba: 2b:f7:b3:de:b4:97:9b:00:da:ca:09:ca:b6:92:7f: 0b:c7:71:ae:55:0a:89:8e:81:48:e8:63:b9:33:32: 33:78:69:30:74:f3:75:8e:45:be:8d:c2:e9:94:09: 29:08:23:54:1f:84:38:03:d7:de:78:c3:db:86:f3: 78:da:85:0e:a2:29:83:31:57:50:d6:fe:4b:86:2c: 04:b0:8f:32:43:59:24:3e:2e:3c:bd:33:f4:de:64: 2c:ef:a6:77:58:b2:82:2c:13:5d:3b:05:36:38:46: 6e:1f:7b:6a:0c:f4:40:bd:fd:7d:e5:39:8c:bf:97: 31:07:80:f1:08:de:28:a7:86:4a:55:c2:cc:01:2b: b9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:35:55:77:57:2D:1F:72:30:D8:1E:51:DA:41:92:B1:5C:53:C9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.38.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:98:a7:08:1e:00:a8:5b:77:1a:d7:93:85:37:44:b2:47:f0: fd:57:b9:2e:b3:ed:68:e1:23:2c:9d:a9:17:0b:51:24:92:3a: c6:7c:9c:9d:cf:1a:ef:3b:39:81:96:ba:d1:b3:56:07:aa:46: 36:dc:46:56:a1:66:40:d0:05:f8:48:26:2d:4d:b5:6f:b5:5b: 10:6a:84:3c:c3:ef:88:55:79:77:d3:c2:e8:f9:0b:b3:e5:f2: e0:ed:7b:d2:05:4d:70:74:2d:e8:0e:c3:98:75:02:bf:c4:f1: ad:d0:5b:a7:3a:d1:64:5b:83:b4:64:da:69:c8:84:b9:27:82: f7:04:ae:f3:9e:e6:ea:79:fd:ab:ff:83:a3:79:9c:18:bc:6c: 9e:57:81:97:91:bb:67:05:79:e2:56:7b:a6:a6:88:46:2d:7e: 67:48:81:5c:19:07:a1:fd:75:56:65:f0:98:47:e3:3a:c3:df: 42:aa:54:89:22:33:ed:94:2f:2c:9e:49:ff:2a:82:86:2f:cb: c2:53:a6:f9:e3:59:a9:b5:96:e1:51:2c:fc:b9:ff:ce:bb:2b: 50:85:ad:89:de:2b:bd:54:25:16:b7:2b:a9:6e:fa:b5:f1:4e: d3:96:da:f7:a5:45:5e:c8:86:1a:70:a6:75:50:20:54:6f:52: 18:f2:6a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCp4DaovmdLiPh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzU3YzNjZTEtMzkzMC00NGIyLTgzOTYtZmZiYjlkMmVmZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOGb5069ogMX9bIL1p8oqbrwogJezBXkHJsF z9tKYDS/LDNtP7yLH6maSMGEPcckI8zY2Nv1AKxyJU0Uo9g2cLoPc0SaPaVGmCzw nI+yO1tRc7TR+MG61U/ysQbJZd7uAYpmZ/7lsvqatNRFzaQKYdwYqqJYy7or97Pe tJebANrKCcq2kn8Lx3GuVQqJjoFI6GO5MzIzeGkwdPN1jkW+jcLplAkpCCNUH4Q4 A9feeMPbhvN42oUOoimDMVdQ1v5LhiwEsI8yQ1kkPi48vTP03mQs76Z3WLKCLBNd OwU2OEZuH3tqDPRAvf195TmMv5cxB4DxCN4op4ZKVcLMASu5lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAM1VXdXLR9yMNgeUdpBkrFcU8kDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRmMmY3MDUtZmZlZi0z NzNiLWJlZDYtYzRlYmM4OGU5YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0CZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGYpwgeAKhbdxrXk4U3RLJH8P1XuS6z7WjhIyydqRcLUSSSOsZ8nJ3P Gu87OYGWutGzVgeqRjbcRlahZkDQBfhIJi1NtW+1WxBqhDzD74hVeXfTwuj5C7Pl 8uDte9IFTXB0LegOw5h1Ar/E8a3QW6c60WRbg7Rk2mnIhLkngvcErvOe5up5/av/ g6N5nBi8bJ5XgZeRu2cFeeJWe6amiEYtfmdIgVwZB6H9dVZl8JhH4zrD30KqVIki M+2ULyyeSf8qgoYvy8JTpvnjWam1luFRLPy5/867K1CFrYneK71UJRa3K6lu+rXx TtOW2velRV7IhhpwpnVQIFRvUhjyav8= -----END CERTIFICATE-----Generated at Thu Mar 26 09:08:16 2026 by rpki-client