$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c62fa5-f921-37f8-adc7-f46418fe4708.roa File: 85c62fa5-f921-37f8-adc7-f46418fe4708.roa (raw, json) Hash identifier: bU9imtxiae0BYhNPVfhVmKAP8NQBTwWlhbVlccGft9I= Subject key identifier: 5F:7A:99:AA:BF:7E:3B:00:F0:25:5A:4B:8F:77:66:A1:0C:CB:12:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA739052FC5B2CCD27340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c62fa5-f921-37f8-adc7-f46418fe4708.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 40848 IP address blocks: 146.145.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a7:39:05:2f:c5:b2:cc:d2:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=aa62783b-b262-401b-90c1-3336a1d2b7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:44:6a:4b:98:c5:cb:7f:dd:81:2d:6e:26:39: db:f7:71:44:d6:cb:2f:b7:3b:41:34:73:3a:b8:4a: 74:96:51:71:6c:44:58:e0:77:4e:cf:61:85:2c:35: 33:a9:aa:a8:29:55:35:ec:5d:58:f2:63:b4:06:11: dc:dd:48:5f:6b:6b:1b:89:63:3a:b7:ac:9b:ee:1f: f9:0d:15:55:d1:40:f7:d4:a1:86:39:fe:9b:76:91: 1c:56:77:b4:7b:4a:26:47:bb:e5:8f:15:29:a7:65: d5:98:b4:5f:b2:78:55:7b:9f:32:d8:94:f0:00:be: a3:b5:cb:d1:2c:6a:f9:ed:08:b5:a2:87:1a:ca:89: d2:85:74:2c:c6:f4:9a:66:b6:48:f9:4f:e3:09:4c: 2e:7f:41:29:e1:79:96:d4:25:ea:b5:3d:76:ca:d7: 0b:0b:cc:a1:84:08:24:70:09:8b:3c:43:7a:da:c9: 64:45:ae:f0:51:81:c7:e4:0a:a6:fd:09:e5:5d:ad: 80:b3:c6:31:8a:6a:d8:c0:fd:fc:52:00:c8:f2:5d: 2e:21:a5:3f:4a:b7:aa:28:ba:6a:d0:eb:50:27:be: ba:26:86:fd:70:98:03:f5:ff:61:7c:3f:92:75:93: 40:d7:c1:c0:33:11:06:30:a1:41:d2:ed:12:e0:4f: 41:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7A:99:AA:BF:7E:3B:00:F0:25:5A:4B:8F:77:66:A1:0C:CB:12:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c62fa5-f921-37f8-adc7-f46418fe4708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 146.145.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3e:53:0e:54:bf:92:aa:25:5f:76:6d:7b:a6:50:15:ca:b7: 97:0f:b3:d9:16:ae:4f:92:e8:a6:b6:55:8c:b5:fb:d2:4c:1e: 82:bd:ef:71:91:5f:8d:c0:1d:9c:11:70:bf:4f:d4:c2:33:35: 06:90:1f:3b:e6:88:b6:d1:2b:cb:80:94:ee:fa:16:dc:fe:ff: 24:2f:dd:e9:ca:aa:e8:6b:82:f6:05:4b:50:3c:c8:56:87:38: a4:5a:1b:30:c7:b5:e6:85:7d:9c:4d:24:f1:9f:fe:62:12:a5: 9d:86:83:ec:41:b1:72:0a:cf:e6:cd:77:9e:07:2c:ee:e3:89: a8:53:95:20:07:b3:cb:36:93:09:da:83:77:61:82:18:93:b6: b2:44:f4:8c:31:dc:02:81:a8:a5:48:07:c8:c4:91:a2:c4:78: ca:38:ca:27:c3:fc:4d:7b:b3:f7:c2:ce:80:f1:a3:da:d1:3f: 78:05:86:96:43:57:33:50:3e:46:74:86:1a:95:e8:27:aa:41: f0:4f:06:f4:29:df:2e:c6:23:a9:4f:01:76:18:58:fa:49:9a: 1a:f1:d2:5e:84:7e:08:c7:ed:20:cc:e3:26:ea:cd:e6:84:97: a5:a6:8e:7f:a6:06:7a:6d:a4:47:61:da:50:f8:c0:7f:3c:e5: ff:0e:cd:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqc5BS/FsszSc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YWE2Mjc4M2ItYjI2Mi00MDFiLTkwYzEtMzMzNmExZDJiN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50RqS5jFy3/dgS1uJjnb93FE1ssvtztBNHM6 uEp0llFxbERY4HdOz2GFLDUzqaqoKVU17F1Y8mO0BhHc3Uhfa2sbiWM6t6yb7h/5 DRVV0UD31KGGOf6bdpEcVne0e0omR7vljxUpp2XVmLRfsnhVe58y2JTwAL6jtcvR LGr57Qi1oocayonShXQsxvSaZrZI+U/jCUwuf0Ep4XmW1CXqtT12ytcLC8yhhAgk cAmLPEN62slkRa7wUYHH5Aqm/QnlXa2As8YximrYwP38UgDI8l0uIaU/SreqKLpq 0OtQJ766Job9cJgD9f9hfD+SdZNA18HAMxEGMKFB0u0S4E9BlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF96maq/fjsA8CVaS493ZqEMyxJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODVjNjJmYTUtZjkyMS0z N2Y4LWFkYzctZjQ2NDE4ZmU0NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkpGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY+Uw5Uv5KqJV92bXumUBXKt5cPs9kWrk+S6Ka2VYy1+9JMHoK973GR X43AHZwRcL9P1MIzNQaQHzvmiLbRK8uAlO76Ftz+/yQv3enKquhrgvYFS1A8yFaH OKRaGzDHteaFfZxNJPGf/mISpZ2Gg+xBsXIKz+bNd54HLO7jiahTlSAHs8s2kwna g3dhghiTtrJE9Iwx3AKBqKVIB8jEkaLEeMo4yifD/E17s/fCzoDxo9rRP3gFhpZD VzNQPkZ0hhqV6CeqQfBPBvQp3y7GI6lPAXYYWPpJmhrx0l6EfgjH7SDM4ybqzeaE l6Wmjn+mBnptpEdh2lD4wH885f8Ozcg= -----END CERTIFICATE-----Generated at Fri Mar 27 03:06:55 2026 by rpki-client