$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa File: 880f3735-f73d-3dab-8ba3-3dc57da7e499.roa (raw, json) Hash identifier: jvQbITgdF5BUfbYYeiLPGQmLeesienNJoC/Okvsc6hA= Subject key identifier: 01:0D:C7:74:52:B2:58:0D:1A:B3:6E:23:9A:3A:9D:B7:0A:92:AB:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A77AFF5089443F2506100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 22904 IP address blocks: 67.217.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:77:af:f5:08:94:43:f2:50:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ec9705f1-a0af-4573-b54f-f08a606166c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:fe:ba:3b:06:0f:d3:fe:39:92:95:ae:3f: 83:14:7d:33:8c:a8:82:20:23:8e:19:e0:31:90:ff: 2b:3b:cc:57:79:7c:57:8c:e3:b5:8c:cf:d7:53:44: a0:e8:6f:a3:4f:8c:db:e5:3a:0b:8c:97:09:03:9c: e4:70:4c:0f:f7:38:19:d2:3e:29:ee:d2:bf:d3:5a: bb:59:cc:87:06:c7:bf:52:5b:99:f4:33:2f:58:56: 2d:d7:2c:79:10:91:12:3e:e9:62:f0:e0:12:90:b8: 36:26:45:87:e4:59:78:5c:21:2e:01:60:f3:0a:7f: 76:24:85:9d:52:e5:76:b5:5d:47:0e:67:98:69:84: 56:c9:d4:04:ca:da:c1:e5:d8:66:98:9a:d9:f6:58: c3:bd:0d:aa:25:98:ac:d4:f7:44:f4:de:ab:40:2c: f8:f4:62:af:29:38:e5:de:9c:c9:39:c8:41:c1:08: 47:77:fa:79:e6:50:26:c2:10:02:2f:89:d3:df:86: 30:f8:95:0a:0c:41:7a:cc:85:9c:bb:98:0e:12:b9: d6:c3:97:fa:3d:04:32:0d:2c:0f:e4:39:5a:52:16: 98:44:21:11:2a:42:e8:cd:ea:cd:88:71:20:f3:49: 63:ac:6b:b0:95:7b:37:46:15:8d:99:f7:29:d0:76: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0D:C7:74:52:B2:58:0D:1A:B3:6E:23:9A:3A:9D:B7:0A:92:AB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5b:28:80:00:88:62:b9:9d:f0:30:dd:12:20:ed:a0:b1:15: fe:f2:bf:77:49:16:86:f5:12:26:25:41:50:43:b8:bf:18:04: 0f:8d:e8:a1:9e:5b:3b:8a:0d:12:ac:c8:54:73:a1:22:c4:ab: 5e:38:95:3e:95:28:d5:16:b3:f9:de:b3:2d:f9:93:f1:96:f3: 98:b5:90:72:48:57:0f:fd:c9:da:60:06:be:72:9d:72:5a:55: 9b:46:dc:fb:81:c7:48:ac:ff:f8:e2:fe:ff:38:a0:fe:41:c7: a5:61:c1:9e:31:89:64:2a:8b:6b:5a:66:15:97:39:fd:8e:f0: 8c:bf:40:65:0a:89:e7:89:bc:1c:c5:91:4b:e8:a3:ff:30:50: 09:5c:cc:69:6f:fd:d1:5f:f0:7e:57:54:15:d7:ca:92:59:47: 54:17:0e:d5:9b:f6:f4:3b:dd:6b:14:b0:99:31:78:c0:20:6b: b7:40:5b:5e:86:f8:ea:73:23:12:8e:77:bb:a6:1b:b6:0a:ea: 13:55:98:97:26:2f:d7:92:1a:c5:11:e5:09:c7:3e:d2:f1:ea: d9:3e:16:82:1f:58:9d:04:e1:89:75:ce:1b:76:18:12:5b:f1: a4:ac:06:c7:59:48:f5:8f:a9:51:e6:4d:43:a1:cd:14:8b:32: 8f:cd:c7:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnev9QiUQ/JQYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWM5NzA1ZjEtYTBhZi00NTczLWI1NGYtZjA4YTYwNjE2NmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUP+ujsGD9P+OZKVrj+DFH0zjKiCICOOGeAx kP8rO8xXeXxXjOO1jM/XU0Sg6G+jT4zb5ToLjJcJA5zkcEwP9zgZ0j4p7tK/01q7 WcyHBse/UluZ9DMvWFYt1yx5EJESPuli8OASkLg2JkWH5Fl4XCEuAWDzCn92JIWd UuV2tV1HDmeYaYRWydQEytrB5dhmmJrZ9ljDvQ2qJZis1PdE9N6rQCz49GKvKTjl 3pzJOchBwQhHd/p55lAmwhACL4nT34Yw+JUKDEF6zIWcu5gOErnWw5f6PQQyDSwP 5DlaUhaYRCERKkLozerNiHEg80ljrGuwlXs3RhWNmfcp0HZPBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAENx3RSslgNGrNuI5o6nbcKkqsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODgwZjM3MzUtZjczZC0z ZGFiLThiYTMtM2RjNTdkYTdlNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9mNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNbKIAAiGK5nfAw3RIg7aCxFf7yv3dJFob1EiYlQVBDuL8YBA+N6KGe WzuKDRKsyFRzoSLEq144lT6VKNUWs/nesy35k/GW85i1kHJIVw/9ydpgBr5ynXJa VZtG3PuBx0is//ji/v84oP5Bx6VhwZ4xiWQqi2taZhWXOf2O8Iy/QGUKieeJvBzF kUvoo/8wUAlczGlv/dFf8H5XVBXXypJZR1QXDtWb9vQ73WsUsJkxeMAga7dAW16G +OpzIxKOd7umG7YK6hNVmJcmL9eSGsUR5QnHPtLx6tk+FoIfWJ0E4Yl1zht2GBJb 8aSsBsdZSPWPqVHmTUOhzRSLMo/Nx+g= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:52 2026 by rpki-client