$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa File: 8439542b-538e-3386-9782-0bb9b565da7c.roa (raw, json) Hash identifier: tScMukoFKqJX2X2fNiuHQT4D/oSixODooKPVq5CVAos= Subject key identifier: 95:DD:84:68:F1:07:15:36:F6:9D:F7:A6:79:92:3E:8D:8D:D5:56:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AAA4D3D1231D2A72FA440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 174.131.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:aa:4d:3d:12:31:d2:a7:2f:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fc678af8-580d-4fff-b9f3-f4df446e96cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:dc:9a:c2:8a:7f:cf:2f:ae:5b:f8:65:c8: b1:1d:72:13:20:5a:9e:e2:fe:2a:4d:53:9d:dc:f7: 3a:50:0f:7d:61:f0:eb:27:2c:b2:c6:14:c2:d1:fb: 6e:ff:6d:9b:c5:ac:fc:39:52:ab:be:c1:e8:e9:13: ba:98:dd:b4:5a:ad:f9:1b:08:23:bd:3f:fa:5c:e8: 0c:67:43:b9:6d:d4:82:78:3c:cb:c7:72:19:37:cf: b9:c2:78:3c:77:00:81:fc:9d:c8:3a:0e:c0:6d:5d: ed:28:6f:38:40:7d:95:f9:b8:3c:e4:f9:24:21:ff: b1:66:c8:8e:fe:d3:1e:b4:bc:89:7d:70:ed:79:98: f3:6e:23:4f:2d:c0:99:2b:ec:02:17:34:fc:f7:cd: 6c:d1:38:aa:09:b8:e8:64:96:89:2d:71:4e:06:cf: ce:54:42:7b:66:93:0c:f9:d6:5d:65:6d:62:39:3e: f2:8b:dc:f3:1b:f5:65:fb:4e:b2:a4:c3:dc:d3:d0: 45:c3:a9:43:42:77:3d:16:e7:31:49:cf:f4:39:b0: 3e:c5:2b:9c:df:7d:34:68:d1:4b:63:0d:e4:0b:86: 3a:c3:54:e7:0c:82:62:b4:b9:1b:eb:96:c3:5a:91: 9e:c7:5d:c8:97:9c:53:ce:fb:32:f4:a8:9c:7b:b3: 68:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DD:84:68:F1:07:15:36:F6:9D:F7:A6:79:92:3E:8D:8D:D5:56:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:02:80:b8:7e:7e:94:d3:28:e0:1f:ed:bc:be:f7:fa:c8:6f: 31:6c:08:ea:6a:02:6d:8f:b5:05:32:ea:fe:8e:fb:30:14:b7: 9c:fd:80:f2:52:c7:1b:af:dd:42:74:14:8d:40:d3:69:85:87: 73:9f:a8:27:d3:aa:6d:7a:cd:96:d4:02:6d:10:3f:52:ac:cd: 8e:ee:54:30:26:91:84:e5:38:6a:75:ee:8a:f7:2b:85:8b:dd: 8d:9c:f7:37:d7:09:b2:8b:c2:4f:1e:f9:98:01:f6:d3:d7:3c: 10:e5:ad:4f:9d:3b:76:df:07:99:d3:20:30:5d:5a:5f:d7:93: eb:e6:4f:03:43:b4:a6:8e:e6:6b:d1:07:12:e2:02:7a:16:8f: 5e:19:0e:6c:bc:18:79:71:ae:35:d4:d5:72:8f:0c:ea:f8:45: b7:a1:cb:f3:61:fc:c3:e4:b9:b1:94:55:19:11:52:17:c0:af: b8:36:72:ce:34:b7:5a:6b:f1:b6:f0:5e:60:8c:7f:b2:3f:b7: 50:ff:0a:c5:3c:7c:a5:05:34:41:e2:d7:6d:da:be:49:dd:af: e3:1d:96:3a:2a:5f:f4:08:87:fd:cc:1a:f1:27:06:01:61:8a: 9b:a2:2f:09:a0:ea:f8:26:a3:13:23:b5:b1:17:cd:c0:69:f3: 7b:91:33:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqpNPRIx0qcvpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmM2NzhhZjgtNTgwZC00ZmZmLWI5ZjMtZjRkZjQ0NmU5NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunncmsKKf88vrlv4ZcixHXITIFqe4v4qTVOd 3Pc6UA99YfDrJyyyxhTC0ftu/22bxaz8OVKrvsHo6RO6mN20Wq35GwgjvT/6XOgM Z0O5bdSCeDzLx3IZN8+5wng8dwCB/J3IOg7AbV3tKG84QH2V+bg85PkkIf+xZsiO /tMetLyJfXDteZjzbiNPLcCZK+wCFzT8981s0TiqCbjoZJaJLXFOBs/OVEJ7ZpMM +dZdZW1iOT7yi9zzG/Vl+06ypMPc09BFw6lDQnc9FucxSc/0ObA+xSuc3300aNFL Yw3kC4Y6w1TnDIJitLkb65bDWpGex13Il5xTzvsy9Kice7NowQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXdhGjxBxU29p33pnmSPo2N1VYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQzOTU0MmItNTM4ZS0z Mzg2LTk3ODItMGJiOWI1NjVkYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYCgLh+fpTTKOAf7by+9/rIbzFsCOpqAm2PtQUy6v6O+zAUt5z9gPJS xxuv3UJ0FI1A02mFh3OfqCfTqm16zZbUAm0QP1KszY7uVDAmkYTlOGp17or3K4WL 3Y2c9zfXCbKLwk8e+ZgB9tPXPBDlrU+dO3bfB5nTIDBdWl/Xk+vmTwNDtKaO5mvR BxLiAnoWj14ZDmy8GHlxrjXU1XKPDOr4Rbehy/Nh/MPkubGUVRkRUhfAr7g2cs40 t1pr8bbwXmCMf7I/t1D/CsU8fKUFNEHi123avkndr+MdljoqX/QIh/3MGvEnBgFh ipuiLwmg6vgmoxMjtbEXzcBp83uRM5U= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:28 2026 by rpki-client