$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bcc0d9b-2e88-3b4a-8bc5-72a66c617059.roa File: 8bcc0d9b-2e88-3b4a-8bc5-72a66c617059.roa (raw, json) Hash identifier: fuCvLWvIusrrbGmBzEEd4KlFezZH1Qb/Jf1yH+9ekBk= Subject key identifier: 86:31:0C:91:2D:DB:83:78:C3:84:28:77:6F:27:B4:A8:43:35:90:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA5194585E36D9B42B57A Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bcc0d9b-2e88-3b4a-8bc5-72a66c617059.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 151.213.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a5:19:45:85:e3:6d:9b:42:b5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5d67641d-3511-4b08-b834-5933fc0069af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:fc:69:62:b8:97:f2:cc:8a:27:36:0c:c4: aa:1d:80:8e:a8:b1:88:aa:ad:7a:83:d0:43:f0:6d: e9:e9:1c:e2:07:24:0e:72:1e:7a:bb:2b:2b:16:e2: 3a:b3:a9:9b:a9:c2:d1:db:05:2c:a3:b6:f5:a2:f1: a3:cb:05:6c:ac:b1:8e:6f:3d:73:b7:85:8a:1e:81: 99:37:79:70:ec:47:4d:a1:37:b7:0b:85:6f:7a:7d: c8:4e:4e:a7:58:4a:77:a3:95:7a:65:50:78:80:31: dc:8d:11:5c:ce:72:f4:55:74:46:31:92:34:87:0d: 2e:44:60:ac:78:a2:5d:51:c1:18:0c:48:12:aa:6b: 82:d2:f0:b9:b5:a2:03:d5:87:39:9d:45:da:86:51: 33:b7:30:de:b8:c6:2a:6f:dc:79:71:11:df:f0:cf: 74:2d:61:01:cd:f0:d7:4b:01:8a:cf:e1:16:7d:7f: eb:b6:36:0d:8a:8b:90:85:f9:2e:20:ed:10:41:ad: 2e:18:6a:42:b4:36:64:a0:d1:d0:4c:36:6a:47:6c: a2:fd:7f:90:c1:1a:18:05:bb:06:b9:fa:9a:78:cf: 30:b4:03:c1:bf:60:27:f4:a9:f7:62:50:58:32:93: a6:8a:a2:6f:24:b1:8f:ef:be:ff:4d:c8:29:2b:e7: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:0C:91:2D:DB:83:78:C3:84:28:77:6F:27:B4:A8:43:35:90:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bcc0d9b-2e88-3b4a-8bc5-72a66c617059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:34:3a:6c:b0:f5:22:31:0d:4a:11:d3:4d:3f:cb:dc:78:0f: 0b:ae:de:d6:e5:20:14:9a:92:43:a1:e9:3a:50:10:50:11:59: 76:4d:fc:62:ad:7b:c7:a8:cb:90:23:d6:be:b2:71:83:1c:b4: c7:59:a2:a6:3e:f0:01:2d:22:40:f3:37:8a:c6:12:b6:d1:63: 91:d3:b0:44:2d:1e:97:77:3e:1d:71:2d:7c:eb:73:ff:f0:f0: 24:27:2c:9c:d5:c4:2f:cf:d5:17:63:47:e1:c6:e0:21:dd:f6: 04:26:0b:ac:59:b2:dc:fd:44:1c:f9:db:fa:b1:74:6d:5d:c7: f0:04:75:8a:d3:d0:12:1a:af:7f:3c:a9:30:03:0a:1a:61:62: a6:9b:aa:3b:13:52:a2:06:ee:5f:09:d6:3a:43:4f:92:bf:95: f5:d9:9a:cb:3d:04:06:b5:aa:0a:11:40:52:b7:63:50:ca:f8: 35:73:09:05:b4:57:c1:34:e1:91:aa:0c:4f:d3:2f:8a:db:c6: 7c:48:14:64:fa:b4:74:d6:df:ae:68:2a:5c:82:38:d7:cb:b3: 82:10:4f:e2:73:2e:e3:61:be:5f:8b:c8:30:99:e8:b5:e8:f5: be:49:c6:4e:7e:35:36:10:14:00:3c:ed:8e:12:f1:12:f2:d5: 91:20:8d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqUZRYXjbZtCtXowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NWQ2NzY0MWQtMzUxMS00YjA4LWI4MzQtNTkzM2ZjMDA2OWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfH8aWK4l/LMiic2DMSqHYCOqLGIqq16g9BD 8G3p6RziByQOch56uysrFuI6s6mbqcLR2wUso7b1ovGjywVsrLGObz1zt4WKHoGZ N3lw7EdNoTe3C4Vven3ITk6nWEp3o5V6ZVB4gDHcjRFcznL0VXRGMZI0hw0uRGCs eKJdUcEYDEgSqmuC0vC5taID1Yc5nUXahlEztzDeuMYqb9x5cRHf8M90LWEBzfDX SwGKz+EWfX/rtjYNiouQhfkuIO0QQa0uGGpCtDZkoNHQTDZqR2yi/X+QwRoYBbsG ufqaeM8wtAPBv2An9Kn3YlBYMpOmiqJvJLGP777/TcgpK+cDiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYxDJEt24N4w4Qod28ntKhDNZCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJjYzBkOWItMmU4OC0z YjRhLThiYzUtNzJhNjZjNjE3MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY0Omyw9SIxDUoR000/y9x4Dwuu3tblIBSakkOh6TpQEFARWXZN/GKt e8eoy5Aj1r6ycYMctMdZoqY+8AEtIkDzN4rGErbRY5HTsEQtHpd3Ph1xLXzrc//w 8CQnLJzVxC/P1RdjR+HG4CHd9gQmC6xZstz9RBz52/qxdG1dx/AEdYrT0BIar388 qTADChphYqabqjsTUqIG7l8J1jpDT5K/lfXZmss9BAa1qgoRQFK3Y1DK+DVzCQW0 V8E04ZGqDE/TL4rbxnxIFGT6tHTW365oKlyCONfLs4IQT+JzLuNhvl+LyDCZ6LXo 9b5Jxk5+NTYQFAA87Y4S8RLy1ZEgjeM= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:47 2026 by rpki-client