$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92f1d447-3df8-3d57-bb51-f15d27193a93.roa File: 92f1d447-3df8-3d57-bb51-f15d27193a93.roa (raw, json) Hash identifier: jMKv2skGFuH39wQmbi124sZOO/OZ5SWArYXDR3Ug7UM= Subject key identifier: 07:AE:13:1C:A4:C8:43:78:6E:0A:B7:8F:85:7E:74:E6:35:C5:8F:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7DA3C8FFA3B1E4D0FB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92f1d447-3df8-3d57-bb51-f15d27193a93.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 72.25.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7d:a3:c8:ff:a3:b1:e4:d0:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=7acd3717-1363-4015-a700-5ae591e4e355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:54:d9:21:a3:e9:0b:75:ad:48:7c:d7:b5: c4:15:80:a5:82:04:09:c5:ec:5b:04:bb:bc:d7:51: 6f:3c:e8:99:50:23:2d:d1:1e:00:6b:37:04:c1:dc: 32:09:ee:10:a4:af:f2:b5:69:11:e5:37:46:23:21: 86:58:ed:fc:0b:ff:5d:c6:64:18:2e:ca:8d:64:cb: b7:7e:53:a0:e8:0f:65:cd:f5:74:36:36:e2:68:cd: a7:78:6c:49:80:c0:58:c5:c6:43:ff:67:a9:fe:ef: 1b:71:a7:ca:4d:86:ff:d7:13:c4:cf:34:c1:29:2d: 9a:64:c9:6a:7f:6c:b8:65:a9:53:db:29:5a:9a:0c: 2c:45:ac:43:0f:af:f9:f1:d4:69:09:d9:2c:0d:a0: 33:56:27:61:8e:45:86:2e:94:4a:89:c7:5a:d2:76: 11:b4:70:23:95:41:81:ee:a0:68:0a:34:71:47:e3: 9e:67:c8:df:b3:97:a7:eb:b8:91:25:0f:4c:d0:af: 0b:01:37:91:3e:14:c0:2a:57:fc:d8:8c:27:93:3f: d3:95:89:18:ce:22:a4:00:8f:6c:55:cb:25:87:83: 0a:6d:dc:50:17:02:53:ff:d2:bc:2f:a7:8c:7f:21: 2d:78:09:5e:05:fd:9b:58:de:0e:aa:b9:9d:cd:f4: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AE:13:1C:A4:C8:43:78:6E:0A:B7:8F:85:7E:74:E6:35:C5:8F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92f1d447-3df8-3d57-bb51-f15d27193a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:26:b3:45:ee:54:a8:a5:77:f8:cf:e0:bd:77:42:42:1c:73: 27:70:cd:1f:92:1c:3e:c6:b8:ad:35:0b:41:4c:e4:3e:c2:00: 62:4c:5a:04:f7:ea:0e:27:e4:9c:0d:36:99:53:11:94:aa:f6: f9:1e:76:7f:6e:a0:d1:00:70:e8:55:0d:d1:0a:0e:45:12:41: 1a:f1:8b:5c:f7:38:33:71:94:a4:97:b5:9d:74:b4:a8:cf:a8: dc:10:f2:9f:21:3d:03:2a:e0:69:10:35:ba:b6:2f:7b:5c:af: 1c:f2:93:60:31:a3:0a:19:02:d8:cd:bd:ee:0c:b0:56:b9:8c: 28:81:a6:70:2a:79:98:61:8c:ce:4c:8f:b4:e6:23:03:b0:72: 4a:1e:c4:05:de:de:09:58:ab:18:9c:f6:3f:ff:0d:26:15:8e: 61:f7:84:24:ff:c6:4f:95:7d:2d:9c:7c:07:7f:76:70:06:ae: 93:91:ee:07:a1:01:cd:0c:86:f4:d6:70:b2:9f:a2:ee:a9:2b: 46:36:3a:99:43:85:5b:c4:7e:f5:bb:be:7f:1b:10:45:69:e8: ae:75:eb:38:33:9e:97:26:ac:ea:14:d3:48:cb:0b:29:78:6b: 09:21:33:5f:b5:a7:6e:f2:39:47:b5:30:f5:9b:7e:06:a9:54: f2:35:39:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCn2jyP+jseTQ+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk N2FjZDM3MTctMTM2My00MDE1LWE3MDAtNWFlNTkxZTRlMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLNU2SGj6Qt1rUh817XEFYClggQJxexbBLu8 11FvPOiZUCMt0R4AazcEwdwyCe4QpK/ytWkR5TdGIyGGWO38C/9dxmQYLsqNZMu3 flOg6A9lzfV0NjbiaM2neGxJgMBYxcZD/2ep/u8bcafKTYb/1xPEzzTBKS2aZMlq f2y4ZalT2ylamgwsRaxDD6/58dRpCdksDaAzVidhjkWGLpRKicda0nYRtHAjlUGB 7qBoCjRxR+OeZ8jfs5en67iRJQ9M0K8LATeRPhTAKlf82Iwnkz/TlYkYziKkAI9s Vcslh4MKbdxQFwJT/9K8L6eMfyEteAleBf2bWN4OqrmdzfQ+4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeuExykyEN4bgq3j4V+dOY1xY/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTJmMWQ0NDctM2RmOC0z ZDU3LWJiNTEtZjE1ZDI3MTkzYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcms0XuVKild/jP4L13QkIccydwzR+SHD7GuK01C0FM5D7CAGJMWgT3 6g4n5JwNNplTEZSq9vkedn9uoNEAcOhVDdEKDkUSQRrxi1z3ODNxlKSXtZ10tKjP qNwQ8p8hPQMq4GkQNbq2L3tcrxzyk2AxowoZAtjNve4MsFa5jCiBpnAqeZhhjM5M j7TmIwOwckoexAXe3glYqxic9j//DSYVjmH3hCT/xk+VfS2cfAd/dnAGrpOR7geh Ac0MhvTWcLKfou6pK0Y2OplDhVvEfvW7vn8bEEVp6K516zgznpcmrOoU00jLCyl4 awkhM1+1p27yOUe1MPWbfgapVPI1OaY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:19 2026 by rpki-client