$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68affbff-2776-30f1-a21b-679ec144e22f.roa File: 68affbff-2776-30f1-a21b-679ec144e22f.roa (raw, json) Hash identifier: FqbHiNqvvDmhQ4poY3UbcPnCjR0glHrQqzqFUWXt4v4= Subject key identifier: 75:F3:A3:38:8C:2E:19:60:23:FD:D7:62:57:6D:F2:AE:92:1C:31:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A94F5F4A06400A6730400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68affbff-2776-30f1-a21b-679ec144e22f.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 64.196.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:94:f5:f4:a0:64:00:a6:73:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=59a46209-a0d7-4453-8f7f-21884b4731d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:18:f9:af:57:20:dc:45:05:b5:d3:38:cb: 68:a3:49:78:0e:94:22:20:92:59:77:34:08:3b:ea: 67:e7:4d:39:4c:ff:27:ed:95:30:9c:8e:59:1d:95: 63:48:6b:0e:90:58:f6:0b:bd:ef:05:f6:ff:15:78: 0b:b1:4f:80:5e:09:4a:5b:73:3d:b1:1a:3c:90:3b: 95:2d:0b:c3:eb:a3:b2:56:6f:f3:a9:82:e6:15:b2: 36:34:f2:64:f4:89:98:a0:c2:c4:49:8c:e0:3c:e2: 59:1f:6a:a6:b5:12:e8:56:a3:d7:ff:d2:4e:4a:17: 5a:5f:0d:eb:8e:6d:1f:25:86:50:72:ae:94:3a:bf: fd:47:b0:32:cd:94:d1:a4:77:fc:ec:a8:9c:0e:ec: 3a:14:ea:b2:04:47:26:a1:9b:80:17:29:9d:1b:65: 74:89:98:1a:fe:2c:37:fc:a4:5e:47:15:6c:18:8f: f2:55:f5:7d:14:94:37:80:76:1f:af:93:2b:2b:18: db:e0:73:cf:48:94:7f:4f:40:32:e1:50:93:f8:e2: 4a:29:54:8b:06:1a:9f:86:c0:8a:2f:ad:7e:fd:d6: ed:fa:2f:ce:57:86:29:5c:aa:bb:82:cf:81:c0:75: 83:5c:61:af:62:a5:78:88:b4:02:c5:a6:a1:b6:fe: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:A3:38:8C:2E:19:60:23:FD:D7:62:57:6D:F2:AE:92:1C:31:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68affbff-2776-30f1-a21b-679ec144e22f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fe:27:2c:c4:11:50:1d:ff:2c:06:bb:f7:f2:91:12:02:cb: 46:9c:55:dc:f2:ab:63:b5:c8:cb:ca:f8:b0:5e:61:52:8e:d9: 9f:ea:56:e8:cc:2c:ea:60:13:2c:28:a9:97:15:58:33:91:ea: 9e:db:78:62:42:4a:20:4f:82:65:e6:5a:e3:6c:25:29:02:ec: 5d:77:4e:5e:b7:2b:16:bd:6d:44:f2:16:64:a6:2a:be:d1:0d: 14:75:a0:84:dc:eb:11:0b:87:db:fd:27:73:48:74:43:47:d1: 1d:0c:09:51:46:87:ab:52:cc:db:a7:c5:45:6d:1c:95:de:a8: 8a:11:8a:51:e8:ac:33:5b:41:52:b3:0a:26:a8:84:97:34:fd: 26:6c:b7:d3:81:ce:2e:5b:1f:ec:dc:d2:bc:ac:43:2d:2a:8f: 59:f6:ed:25:ce:cc:8c:c6:3f:1c:9d:94:97:b9:e9:56:e5:4c: 0c:95:7d:a3:09:29:86:c4:88:ff:14:79:e3:05:35:f4:bb:b1: d2:1c:fb:cf:b5:85:52:98:b1:53:ec:60:51:19:c6:d3:ab:9b: dc:90:f8:84:35:ef:db:d6:b3:42:c8:de:c1:a3:fe:d8:69:01: 14:ae:d5:bb:9c:75:cc:6c:99:e5:bb:f4:a7:0f:10:ae:bc:33: a8:b0:eb:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpT19KBkAKZzBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTlhNDYyMDktYTBkNy00NDUzLThmN2YtMjE4ODRiNDczMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr50Y+a9XINxFBbXTOMtoo0l4DpQiIJJZdzQI O+pn5005TP8n7ZUwnI5ZHZVjSGsOkFj2C73vBfb/FXgLsU+AXglKW3M9sRo8kDuV LQvD66OyVm/zqYLmFbI2NPJk9ImYoMLESYzgPOJZH2qmtRLoVqPX/9JOShdaXw3r jm0fJYZQcq6UOr/9R7AyzZTRpHf87KicDuw6FOqyBEcmoZuAFymdG2V0iZga/iw3 /KReRxVsGI/yVfV9FJQ3gHYfr5MrKxjb4HPPSJR/T0Ay4VCT+OJKKVSLBhqfhsCK L61+/dbt+i/OV4YpXKq7gs+BwHWDXGGvYqV4iLQCxaahtv6SowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXzoziMLhlgI/3XYldt8q6SHDE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjhhZmZiZmYtMjc3Ni0z MGYxLWEyMWItNjc5ZWMxNDRlMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMTKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz+JyzEEVAd/ywGu/fykRICy0acVdzyq2O1yMvK+LBeYVKO2Z/qVujM LOpgEywoqZcVWDOR6p7beGJCSiBPgmXmWuNsJSkC7F13Tl63Kxa9bUTyFmSmKr7R DRR1oITc6xELh9v9J3NIdENH0R0MCVFGh6tSzNunxUVtHJXeqIoRilHorDNbQVKz CiaohJc0/SZst9OBzi5bH+zc0rysQy0qj1n27SXOzIzGPxydlJe56VblTAyVfaMJ KYbEiP8UeeMFNfS7sdIc+8+1hVKYsVPsYFEZxtOrm9yQ+IQ179vWs0LI3sGj/thp ARSu1bucdcxsmeW79KcPEK68M6iw69M= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:55 2026 by rpki-client