$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a91177d-9b51-35ce-a8ab-be7377237223.roa File: 8a91177d-9b51-35ce-a8ab-be7377237223.roa (raw, json) Hash identifier: WCK8mdD2zz7dZIShJ6QbH7Ag4s8ZnBRr2+LxLGCWFzI= Subject key identifier: 28:53:CC:AF:2B:22:33:A9:1A:63:4C:ED:EA:2C:D8:18:A8:53:BF:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA8C54724A1F302293BB8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a91177d-9b51-35ce-a8ab-be7377237223.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 393775 IP address blocks: 64.199.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a8:c5:47:24:a1:f3:02:29:3b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=580e63de-3230-4102-8ccb-96af7014834d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:30:ad:16:d5:d8:a9:43:71:40:9c:d7:12: ac:45:e3:01:0d:0f:8e:96:82:a2:0f:95:96:cc:9b: 05:e8:a4:66:c3:fc:de:1e:d5:30:d1:0f:73:e9:3d: 6f:4f:50:34:17:fe:9c:91:2c:e2:ca:8c:5c:63:19: e6:37:3a:e1:97:bb:8e:9e:f7:0d:06:cc:41:7d:6a: bc:35:5e:09:d6:32:95:a1:0b:31:aa:8d:19:60:c0: b2:12:ea:db:87:e6:24:aa:02:ad:dc:fa:8e:c3:4e: 1a:09:9c:bf:0a:72:62:7d:61:6b:87:31:cb:68:84: 23:95:41:86:0a:e1:00:22:57:48:71:ea:8f:fb:a1: ce:5e:df:3e:26:4b:1c:71:2e:56:a9:6f:ad:17:0b: d4:f6:02:11:02:f0:3c:11:ed:dc:b1:d7:e4:38:97: 0e:e7:39:dd:46:8f:bd:06:3f:ea:d1:23:9c:bc:2a: 38:2a:a6:6b:87:49:1e:6e:d1:17:64:2a:3a:39:53: 67:9f:73:9c:fc:e7:0d:56:4d:55:f7:f3:3e:e2:c7: 07:cb:e3:1d:50:98:f2:e7:b2:73:fc:0e:b2:ab:bf: b7:51:52:d7:ba:fc:87:ed:5e:8b:b4:8c:30:c5:6b: d9:a8:29:15:23:20:46:13:d7:93:ef:6a:71:16:b6: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:53:CC:AF:2B:22:33:A9:1A:63:4C:ED:EA:2C:D8:18:A8:53:BF:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a91177d-9b51-35ce-a8ab-be7377237223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.199.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:8a:8a:c5:9a:23:12:d3:cb:79:d4:35:6a:b2:e0:19:f0:6f: 3e:b2:90:ed:8d:d0:35:08:0a:da:98:0a:77:2f:3f:98:77:ea: 59:a0:d9:cd:f2:f2:1a:f7:0a:93:2a:0f:a4:82:00:d9:13:0e: d5:7b:17:30:67:0d:e6:4c:e6:63:e8:ae:26:74:de:c6:f1:b9: 81:95:3e:1a:8a:43:db:37:b1:cf:54:70:1d:f8:50:ab:dc:a1: 5f:8b:b0:a7:0c:eb:c1:0a:3a:57:d7:b6:dc:c7:57:ea:78:18: 94:a4:50:5f:24:a7:a2:f9:58:ef:8c:00:88:77:b8:fe:4f:15: e9:9c:5f:90:7e:a7:b6:bc:f0:e8:b3:82:d3:0a:bb:f2:2b:9b: 7e:21:eb:cd:40:3b:7d:1a:76:ea:f5:ed:e2:bc:c1:8f:52:26: 5e:ba:6f:c1:1e:0d:1b:8b:e1:46:5c:1f:a2:7e:e3:d4:93:00: d0:98:2e:a1:7f:85:15:b7:2f:c4:a3:76:b8:b1:bd:a2:7d:8d: 47:59:08:4e:42:30:47:5d:4e:8e:4b:c8:12:37:79:89:c1:1e: 88:8c:3c:22:16:d6:61:ea:82:1a:63:a9:df:2e:81:c3:64:83: 79:df:5d:0b:1f:5a:a0:b4:45:c9:51:03:93:26:dc:5e:dc:65: 5b:3a:28:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqjFRySh8wIpO7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTgwZTYzZGUtMzIzMC00MTAyLThjY2ItOTZhZjcwMTQ4MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndIwrRbV2KlDcUCc1xKsReMBDQ+OloKiD5WW zJsF6KRmw/zeHtUw0Q9z6T1vT1A0F/6ckSziyoxcYxnmNzrhl7uOnvcNBsxBfWq8 NV4J1jKVoQsxqo0ZYMCyEurbh+YkqgKt3PqOw04aCZy/CnJifWFrhzHLaIQjlUGG CuEAIldIceqP+6HOXt8+JksccS5WqW+tFwvU9gIRAvA8Ee3csdfkOJcO5zndRo+9 Bj/q0SOcvCo4KqZrh0kebtEXZCo6OVNnn3Oc/OcNVk1V9/M+4scHy+MdUJjy57Jz /A6yq7+3UVLXuvyH7V6LtIwwxWvZqCkVIyBGE9eT72pxFrZCBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChTzK8rIjOpGmNM7eos2BioU7+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGE5MTE3N2QtOWI1MS0z NWNlLWE4YWItYmU3Mzc3MjM3MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOKisWaIxLTy3nUNWqy4Bnwbz6ykO2N0DUICtqYCncvP5h36lmg2c3y 8hr3CpMqD6SCANkTDtV7FzBnDeZM5mPoriZ03sbxuYGVPhqKQ9s3sc9UcB34UKvc oV+LsKcM68EKOlfXttzHV+p4GJSkUF8kp6L5WO+MAIh3uP5PFemcX5B+p7a88Oiz gtMKu/Irm34h681AO30adur17eK8wY9SJl66b8EeDRuL4UZcH6J+49STANCYLqF/ hRW3L8SjdrixvaJ9jUdZCE5CMEddTo5LyBI3eYnBHoiMPCIW1mHqghpjqd8ugcNk g3nfXQsfWqC0RclRA5Mm3F7cZVs6KIY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:33 2026 by rpki-client