$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa File: 601631aa-1788-3e00-8366-1ab7d8df59e3.roa (raw, json) Hash identifier: xCmlder9sO9mZu7IatmZT+gFSTEWlUKPgEECuwj+yj0= Subject key identifier: 50:09:DD:5C:BA:4E:3D:DC:9C:3C:E0:78:FB:F8:04:B5:F1:42:2D:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A95732EF1A59F98350C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 66.32.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:95:73:2e:f1:a5:9f:98:35:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=221dda9e-8e5c-4ba7-91b7-27e8cdf55553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:4e:c3:25:be:e7:1b:87:fd:7b:26:90:46: cd:72:68:48:66:11:b6:40:92:24:b8:96:4d:12:0f: 0c:ae:08:22:f7:47:36:65:22:72:fc:03:8b:2a:85: 93:ff:df:f4:a0:5a:db:ee:e4:51:1d:d8:2a:aa:fd: 6a:c0:6e:5a:0a:46:d3:bb:9c:77:7e:ba:d8:dd:a1: 44:ed:38:4d:6b:9b:ab:14:ca:dc:c0:f0:94:49:07: d3:d4:23:6e:3b:ac:62:b9:a5:39:85:cf:95:7f:fa: 53:ec:cc:7a:63:4d:92:09:f1:a0:ce:68:a4:60:b8: 2b:0d:e0:0e:d4:c8:d1:95:a3:70:f1:91:c7:55:a0: ce:48:f8:94:1e:57:9b:00:a9:6a:c3:9c:14:22:67: a1:41:de:e7:37:2a:5d:3e:fc:38:a0:8b:66:1b:b5: 99:b3:a5:d5:94:9a:4a:c1:76:1b:4c:0e:e1:c9:ca: 56:a3:67:35:31:3a:49:95:51:14:bf:36:89:9c:03: 56:83:5b:65:b8:b6:c0:fb:da:6a:a0:e7:8a:ab:ae: 35:b6:e0:e2:a7:31:4d:58:25:da:d7:71:b4:05:c7: 03:c2:23:25:29:46:ae:ca:f3:5f:15:f3:30:62:5b: 2e:5d:46:e8:8d:61:f6:df:86:25:a2:d8:b4:69:4d: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:09:DD:5C:BA:4E:3D:DC:9C:3C:E0:78:FB:F8:04:B5:F1:42:2D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:11:7c:78:0e:08:d7:cc:b3:ec:02:91:be:08:e3:9b:04:f9: 44:93:85:f1:5f:f3:11:f6:bd:39:cd:02:ad:79:c8:c9:09:43: e6:12:07:02:5d:a8:a8:f7:0d:2f:14:6e:4d:24:e5:e1:03:87: 34:4b:ee:39:ed:e7:95:6e:b1:7f:24:0b:ac:84:b1:c0:78:fa: 35:f1:b9:a0:7a:86:67:87:24:24:0e:fa:fc:42:38:0b:51:b6: c7:e1:fd:9b:36:fd:4b:20:01:1b:32:79:ae:a5:6a:1b:31:92: 44:a6:9c:15:98:dc:8c:24:b3:d0:0e:d0:94:21:79:82:c6:4a: 4b:16:28:c7:02:ae:06:4a:27:0c:59:7c:01:44:0e:23:86:18: 1c:2f:76:5b:3d:6d:52:ba:2b:86:9d:18:98:cc:98:83:c1:52: c2:f8:dd:ee:ea:d3:00:6d:41:40:02:9c:97:eb:1b:1d:84:8a: 7f:66:30:43:fd:d0:45:46:7d:20:57:46:01:fc:72:07:42:c5: c0:02:94:05:43:75:13:d8:7a:28:3e:0e:54:f4:f5:2f:5c:63: eb:f2:fd:3a:84:58:d2:32:87:7b:16:f3:b2:3d:5c:e2:a6:8e: 1a:33:d7:22:07:5e:22:f9:fe:04:b1:ca:50:44:6c:71:5d:f9: 0d:c3:47:61 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCpVzLvGln5g1DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjIxZGRhOWUtOGU1Yy00YmE3LTkxYjctMjdlOGNkZjU1NTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo51OwyW+5xuH/XsmkEbNcmhIZhG2QJIkuJZN Eg8Mrggi90c2ZSJy/AOLKoWT/9/0oFrb7uRRHdgqqv1qwG5aCkbTu5x3frrY3aFE 7ThNa5urFMrcwPCUSQfT1CNuO6xiuaU5hc+Vf/pT7Mx6Y02SCfGgzmikYLgrDeAO 1MjRlaNw8ZHHVaDOSPiUHlebAKlqw5wUImehQd7nNypdPvw4oItmG7WZs6XVlJpK wXYbTA7hycpWo2c1MTpJlVEUvzaJnANWg1tluLbA+9pqoOeKq641tuDipzFNWCXa 13G0BccDwiMlKUauyvNfFfMwYlsuXUbojWH234Yloti0aU2HgQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFAJ3Vy6Tj3cnDzgePv4BLXxQi09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjAxNjMxYWEtMTc4OC0z ZTAwLTgzNjYtMWFiN2Q4ZGY1OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQiAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAehF8eA4I18yz7AKRvgjjmwT5RJOF8V/zEfa9Oc0CrXnIyQlD5hIHAl2o qPcNLxRuTSTl4QOHNEvuOe3nlW6xfyQLrISxwHj6NfG5oHqGZ4ckJA76/EI4C1G2 x+H9mzb9SyABGzJ5rqVqGzGSRKacFZjcjCSz0A7QlCF5gsZKSxYoxwKuBkonDFl8 AUQOI4YYHC92Wz1tUrorhp0YmMyYg8FSwvjd7urTAG1BQAKcl+sbHYSKf2YwQ/3Q RUZ9IFdGAfxyB0LFwAKUBUN1E9h6KD4OVPT1L1xj6/L9OoRY0jKHexbzsj1c4qaO GjPXIgdeIvn+BLHKUERscV35DcNHYQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:42 2026 by rpki-client