$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa File: 6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa (raw, json) Hash identifier: dAMvmgNp9sy5qfTpAEF4FVjE79uBGpb+bvQnoMpmVY4= Subject key identifier: C9:6D:9F:7E:FF:C7:4A:92:E6:63:F7:7C:B1:9E:38:E0:00:F0:73:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A77EED6D869E678C5A880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 25660 IP address blocks: 64.198.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:77:ee:d6:d8:69:e6:78:c5:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=16603bf0-0955-4b16-b879-e04cd6679e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:8e:18:b1:0a:a5:c3:72:a5:dd:8b:d0:49: 8e:59:73:97:c5:24:36:62:aa:02:27:78:53:45:d3: 83:43:a7:2d:f1:c7:16:b0:2d:36:a1:aa:6a:f2:3b: a4:68:95:63:bd:3a:d3:9c:40:47:09:01:32:1f:7f: 3e:64:c3:be:3f:f3:91:4b:43:7a:73:ce:49:d9:9e: 92:93:eb:e1:ea:82:85:b5:ea:b2:62:6a:69:47:b5: 2e:38:27:bc:41:28:75:4c:cb:17:4e:45:ca:54:21: 84:34:b3:19:d2:44:1c:a9:a6:ac:de:b8:b0:c9:82: 73:04:93:49:8f:22:83:49:43:85:dd:fc:e2:21:23: 21:b7:92:5e:a3:e0:f4:70:61:d0:0a:49:cb:e3:5b: 8a:a1:58:6f:fe:df:1c:d5:28:9f:3b:5d:c0:c5:9c: b7:97:bd:b3:4a:86:cc:11:a8:a0:23:60:2f:e5:da: cc:f9:e4:f1:e1:95:61:82:71:02:05:93:f9:8f:e2: 1d:1a:7d:aa:7f:95:2c:20:f1:3d:8f:cd:0d:0f:e8: 5f:32:32:3d:69:88:54:e8:0f:a2:46:67:de:d3:33: 46:bf:1d:ad:42:ec:7d:23:76:15:9a:b4:73:23:0b: 1e:fb:ea:e3:2b:57:9d:5a:68:6e:b6:b0:29:00:7a: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6D:9F:7E:FF:C7:4A:92:E6:63:F7:7C:B1:9E:38:E0:00:F0:73:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.198.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a8:66:30:6b:1c:e9:16:72:a1:e8:e7:55:0f:7f:ce:6e:b3: 0a:c4:74:29:e3:c8:03:26:e4:a4:3a:e5:14:60:8b:79:6a:ee: 3b:f7:0b:72:bb:8b:2f:14:d5:e3:ea:c3:26:48:63:d6:49:b9: 60:9b:ef:88:48:c4:85:ea:ce:37:23:e2:65:d7:24:1e:7c:b9: c5:42:ad:8e:7a:f8:75:f3:54:be:66:66:46:43:b9:34:bb:c1: 24:ad:15:bc:e2:12:55:66:01:f4:71:f6:2f:ea:f6:c4:e5:5f: 21:7d:74:18:0d:03:4a:3d:66:4b:90:41:5d:87:64:27:40:f8: 89:9a:03:51:a5:0a:4d:69:d0:5e:53:90:7a:56:87:63:f4:1d: 6b:3e:10:c7:14:eb:b3:a8:8f:92:be:70:8a:11:30:c8:64:5c: 77:db:a1:d6:0b:d8:1b:23:fe:db:63:63:d1:77:43:e6:46:7c: ee:7f:6d:b2:d4:a7:92:41:19:0c:8b:0c:9c:1f:e8:6c:bc:f6: 99:39:77:e4:2e:ec:de:16:2f:86:92:e2:9e:6a:12:d9:2d:10: e4:4f:29:18:50:67:f4:a1:51:26:8b:9b:2e:b9:09:ea:e2:1b: d5:78:9e:cc:1d:e5:94:3a:5b:62:07:10:aa:a6:82:a1:18:d4: d6:e8:21:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnfu1thp5njFqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTY2MDNiZjAtMDk1NS00YjE2LWI4NzktZTA0Y2Q2Njc5ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1mOGLEKpcNypd2L0EmOWXOXxSQ2YqoCJ3hT RdODQ6ct8ccWsC02oapq8jukaJVjvTrTnEBHCQEyH38+ZMO+P/ORS0N6c85J2Z6S k+vh6oKFteqyYmppR7UuOCe8QSh1TMsXTkXKVCGENLMZ0kQcqaas3riwyYJzBJNJ jyKDSUOF3fziISMht5Jeo+D0cGHQCknL41uKoVhv/t8c1SifO13AxZy3l72zSobM EaigI2Av5drM+eTx4ZVhgnECBZP5j+IdGn2qf5UsIPE9j80ND+hfMjI9aYhU6A+i Rmfe0zNGvx2tQux9I3YVmrRzIwse++rjK1edWmhutrApAHoTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMltn37/x0qS5mP3fLGeOOAA8HMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmVmNmI1ZjAtNGE5NS0z YWM0LWIzZWUtZjVhN2YwNmFiZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuoZjBrHOkWcqHo51UPf85uswrEdCnjyAMm5KQ65RRgi3lq7jv3C3K7 iy8U1ePqwyZIY9ZJuWCb74hIxIXqzjcj4mXXJB58ucVCrY56+HXzVL5mZkZDuTS7 wSStFbziElVmAfRx9i/q9sTlXyF9dBgNA0o9ZkuQQV2HZCdA+ImaA1GlCk1p0F5T kHpWh2P0HWs+EMcU67Ooj5K+cIoRMMhkXHfbodYL2Bsj/ttjY9F3Q+ZGfO5/bbLU p5JBGQyLDJwf6Gy89pk5d+Qu7N4WL4aS4p5qEtktEORPKRhQZ/ShUSaLmy65Ceri G9V4nswd5ZQ6W2IHEKqmgqEY1NboIT0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:12 2026 by rpki-client