$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa File: 814cbe67-9c67-3420-81e6-2b9acdf04041.roa (raw, json) Hash identifier: TbDmApIniI2bKf8rJ/U0jNmN3j0iK6znDzwJbZDtTwY= Subject key identifier: F1:51:0A:82:C5:1C:79:A1:D5:83:31:8E:FE:DF:62:9D:F6:BD:CC:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9E23F79CE649C3820A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 208.101.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9e:23:f7:9c:e6:49:c3:82:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=1ec60b86-5a34-4b1e-963f-d346fdbc1ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:16:6b:6a:69:9b:5f:da:a1:92:7f:08:88: c7:e9:8b:f1:14:1b:26:b7:f4:c5:fd:92:81:a9:3d: 50:25:cd:c7:3f:c6:4a:cf:c3:b7:e2:28:ea:9c:ad: f8:11:98:29:72:b7:be:cd:df:d3:ad:a6:da:d8:55: 02:f3:2d:b6:4c:a4:fc:9a:84:c6:74:c2:3f:e6:ff: e3:24:8a:66:e4:f5:e3:e8:5f:41:59:6c:9f:37:d4: c3:b8:e7:13:fd:72:21:88:0f:98:9f:fe:d3:0a:b9: a2:01:e5:75:68:3f:14:7f:fd:5b:08:25:41:71:d8: 21:f2:f9:05:19:b4:7d:bc:6e:12:24:e8:56:67:24: ab:2a:65:a0:4c:dc:a0:0a:c0:61:b0:35:5b:14:ea: 98:a8:d7:33:55:52:6f:1c:c4:e3:87:83:bb:81:5f: f7:72:9c:a6:74:8c:0c:cb:d6:99:64:dd:1c:f4:60: cf:78:a8:50:06:a4:a0:a7:af:fc:10:35:53:63:c2: 8e:03:15:32:cc:38:17:ef:7f:78:94:a2:f5:9f:a6: e5:f1:23:11:93:5a:9b:6a:34:0e:63:56:c2:f4:65: 53:1e:3a:80:36:41:07:88:a7:f8:9e:b7:c7:40:62: 6e:82:15:a0:47:ce:f3:31:17:3e:46:f4:96:9d:27: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:51:0A:82:C5:1C:79:A1:D5:83:31:8E:FE:DF:62:9D:F6:BD:CC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:0c:a3:df:e7:bb:ec:6d:6a:fd:41:15:63:43:95:5a:65:a6: 29:1d:09:65:07:6f:44:c9:63:2f:d2:5c:1f:84:d5:68:a8:a2: 88:c5:5a:69:55:cc:44:d9:3a:72:cf:dc:c6:4a:02:ef:d3:b2: d2:9d:39:89:56:db:4b:f0:2c:27:27:7f:6a:fb:50:aa:98:be: cf:45:24:85:9b:c8:db:8a:f9:af:a2:62:c3:31:3c:7e:1d:95: d7:c2:6f:c0:12:5b:70:b5:75:33:91:dc:e0:36:d1:1c:9e:9c: 71:ef:2c:c5:70:a8:b8:68:a1:8e:ff:1d:d0:9d:cc:f5:8b:e3: 08:4d:3c:5e:cb:cd:24:bd:a3:57:dd:3b:41:bd:9d:77:ae:6e: 61:21:95:de:50:14:73:9c:a5:c9:27:aa:de:af:9c:6e:b3:fb: 9d:e7:5a:59:f6:3f:a9:22:77:10:9e:cb:16:61:62:eb:35:b0: 41:9a:a1:6d:f6:20:82:87:13:a7:81:66:f4:75:1e:1c:21:54: 33:4d:9e:f6:7e:17:9f:eb:8f:91:bb:5b:be:8c:fc:b7:fb:94: 96:51:70:28:2e:3f:e8:35:21:a2:ef:11:97:39:13:c2:54:07: 1e:57:50:02:39:2a:14:71:50:2f:cb:fa:25:5c:28:83:f8:35: 7f:61:1e:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCp4j95zmScOCCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MWVjNjBiODYtNWEzNC00YjFlLTk2M2YtZDM0NmZkYmMxYWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptMWa2ppm1/aoZJ/CIjH6YvxFBsmt/TF/ZKB qT1QJc3HP8ZKz8O34ijqnK34EZgpcre+zd/Traba2FUC8y22TKT8moTGdMI/5v/j JIpm5PXj6F9BWWyfN9TDuOcT/XIhiA+Yn/7TCrmiAeV1aD8Uf/1bCCVBcdgh8vkF GbR9vG4SJOhWZySrKmWgTNygCsBhsDVbFOqYqNczVVJvHMTjh4O7gV/3cpymdIwM y9aZZN0c9GDPeKhQBqSgp6/8EDVTY8KOAxUyzDgX7394lKL1n6bl8SMRk1qbajQO Y1bC9GVTHjqANkEHiKf4nrfHQGJughWgR87zMRc+RvSWnSdySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFRCoLFHHmh1YMxjv7fYp32vczUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE0Y2JlNjctOWM2Ny0z NDIwLTgxZTYtMmI5YWNkZjA0MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYMo9/nu+xtav1BFWNDlVplpikdCWUHb0TJYy/SXB+E1WiooojFWmlV zETZOnLP3MZKAu/TstKdOYlW20vwLCcnf2r7UKqYvs9FJIWbyNuK+a+iYsMxPH4d ldfCb8ASW3C1dTOR3OA20RyenHHvLMVwqLhooY7/HdCdzPWL4whNPF7LzSS9o1fd O0G9nXeubmEhld5QFHOcpcknqt6vnG6z+53nWln2P6kidxCeyxZhYus1sEGaoW32 IIKHE6eBZvR1HhwhVDNNnvZ+F5/rj5G7W76M/Lf7lJZRcCguP+g1IaLvEZc5E8JU Bx5XUAI5KhRxUC/L+iVcKIP4NX9hHjI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:29 2026 by rpki-client