$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa File: 6e646695-998a-3951-a3ca-a84efeb22b5b.roa (raw, json) Hash identifier: RdBvyDuPBNvqrV+1wfGvPxYoLneIlcFuNuWpYGE1EsE= Subject key identifier: CF:A0:CF:7D:4D:A9:1E:05:58:25:92:D5:D6:55:B4:F9:7B:5B:ED:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F919BD56D77C6DB696130 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 162.40.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:91:9b:d5:6d:77:c6:db:69:61:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=c0e211fc-e2f2-49b2-acbc-c4b9d7f48ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:db:7b:14:97:bd:19:ce:ef:90:ef:47:8a: 9a:05:ca:12:3d:5e:76:18:5b:d4:62:ef:75:09:42: a1:78:14:2c:6c:ff:20:1c:70:93:bc:a5:de:41:78: 58:4f:99:99:86:4d:6f:33:8b:ad:c4:24:02:8b:3e: c7:9e:23:de:7b:37:7a:4c:56:8f:db:02:8d:b2:23: 83:22:5a:7e:1f:b8:d6:66:23:f7:9f:27:82:0e:f5: a8:e1:35:e7:4b:c6:3f:e7:24:40:f7:4d:6b:d5:60: d9:05:45:52:26:fa:be:fe:74:33:ae:99:fc:de:5b: 15:e8:e0:51:cb:0f:5d:6a:65:e7:fa:d0:ae:1b:04: 06:f1:77:0d:a8:f0:ed:66:c7:e5:97:97:5e:99:d2: b9:32:d4:7d:3f:dc:cd:b5:0b:7f:e6:e7:fb:e5:ea: 95:c8:a1:31:a6:5e:e8:0f:bd:48:98:c9:44:d4:6e: 9a:bd:cc:af:0f:ba:8c:d1:97:34:bb:a8:d5:48:00: 92:fb:6d:24:e9:4d:78:51:1b:50:67:97:6a:b1:00: 8b:80:a2:4e:12:7a:1e:45:6a:8b:b0:42:19:77:a1: b7:a9:e5:34:f7:f0:d8:c8:bb:2d:63:09:07:af:47: bf:16:be:c2:b7:56:a0:74:1f:70:53:07:44:fe:b9: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A0:CF:7D:4D:A9:1E:05:58:25:92:D5:D6:55:B4:F9:7B:5B:ED:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:58:3e:90:fa:c3:22:a5:85:87:e7:3a:71:34:f3:f2:c6:13: f2:21:96:db:77:86:ed:58:13:31:da:50:d9:4b:7e:a9:89:e5: 09:a0:b8:23:37:d1:37:32:01:60:df:50:53:d5:02:08:23:f9: f2:73:6f:9b:3d:00:3b:a9:16:bb:64:06:f6:e1:8a:e3:67:14: cc:e0:89:1a:9f:b4:57:97:cb:10:27:c7:26:3e:12:a2:04:1e: 7a:be:b1:e2:8a:01:8d:23:11:55:cb:fd:f5:5e:02:66:be:a7: bb:58:12:2f:6d:d4:4e:61:d8:79:54:6d:17:cc:78:51:7f:4d: 5a:df:3b:85:5e:22:29:46:55:03:e4:89:d1:6f:ee:6e:b6:cb: 6a:55:66:4d:5c:23:43:e6:06:85:4c:e6:25:d4:d6:b8:20:48: a6:5f:cf:ba:c2:39:42:27:0b:ec:7f:c4:ff:e5:5d:c5:29:32: 0c:79:39:a4:e8:e2:d2:e4:97:f7:08:14:48:11:6b:0b:c2:d0: 4f:c6:a6:f6:bd:92:e3:e4:cf:d2:83:ea:23:e4:aa:a4:aa:d3: 89:53:ad:e9:71:b0:7b:1d:bc:6e:33:b0:83:22:4f:24:61:8b: 22:c7:62:b0:33:32:9b:53:a1:24:22:0a:fc:a8:9a:8d:77:81: b3:46:06:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5Gb1W13xttpYTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YzBlMjExZmMtZTJmMi00OWIyLWFjYmMtYzRiOWQ3ZjQ4ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmffbexSXvRnO75DvR4qaBcoSPV52GFvUYu91 CUKheBQsbP8gHHCTvKXeQXhYT5mZhk1vM4utxCQCiz7HniPeezd6TFaP2wKNsiOD Ilp+H7jWZiP3nyeCDvWo4TXnS8Y/5yRA901r1WDZBUVSJvq+/nQzrpn83lsV6OBR yw9damXn+tCuGwQG8XcNqPDtZsfll5demdK5MtR9P9zNtQt/5uf75eqVyKExpl7o D71ImMlE1G6avcyvD7qM0Zc0u6jVSACS+20k6U14URtQZ5dqsQCLgKJOEnoeRWqL sEIZd6G3qeU09/DYyLstYwkHr0e/Fr7Ct1agdB9wUwdE/rmabQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+gz31NqR4FWCWS1dZVtPl7W+0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmU2NDY2OTUtOTk4YS0z OTUxLWEzY2EtYTg0ZWZlYjIyYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJYPpD6wyKlhYfnOnE08/LGE/Ihltt3hu1YEzHaUNlLfqmJ5QmguCM3 0TcyAWDfUFPVAggj+fJzb5s9ADupFrtkBvbhiuNnFMzgiRqftFeXyxAnxyY+EqIE Hnq+seKKAY0jEVXL/fVeAma+p7tYEi9t1E5h2HlUbRfMeFF/TVrfO4VeIilGVQPk idFv7m62y2pVZk1cI0PmBoVM5iXU1rggSKZfz7rCOUInC+x/xP/lXcUpMgx5OaTo 4tLkl/cIFEgRawvC0E/Gpva9kuPkz9KD6iPkqqSq04lTrelxsHsdvG4zsIMiTyRh iyLHYrAzMptToSQiCvyomo13gbNGBt0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:41 2026 by rpki-client