$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9354b05e-c3b8-3cd1-9e6b-12b2a6595cc4.roa File: 9354b05e-c3b8-3cd1-9e6b-12b2a6595cc4.roa (raw, json) Hash identifier: k9XXbSou/fYRAOBS/IT8p0BbK/RbO/aj5uJuo39k7J8= Subject key identifier: 3F:F5:80:9D:FE:7C:81:4F:0E:63:65:E3:02:50:5A:5D:28:C4:86:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7A03290EED1371DA2640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9354b05e-c3b8-3cd1-9e6b-12b2a6595cc4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 33480 IP address blocks: 207.106.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7a:03:29:0e:ed:13:71:da:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d3f0a697-1a57-4bab-a35d-88da1266cd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ee:1c:3e:58:43:10:bd:1a:c8:c5:a3:6b:70: 36:24:fa:98:e2:8a:95:c9:0a:33:11:4e:6f:13:cd: 88:95:d7:b2:b9:7f:11:b9:92:1f:1a:3c:38:cb:55: 3e:a4:a5:cd:cf:aa:29:1b:6f:a1:ac:e2:35:32:5a: 8e:62:7d:64:a0:c5:6b:ee:bc:d2:3c:ad:12:77:77: 98:5b:8a:f4:06:ac:8f:ea:50:a8:19:b1:a3:d1:db: ec:30:e0:b2:60:25:59:f0:a7:b5:7e:d4:17:d9:99: b1:69:e1:4a:0a:ab:3d:66:d9:e8:19:64:f2:9e:c7: 44:73:aa:b4:7c:f0:7d:03:1a:58:3c:06:89:43:9e: c6:4d:3b:9e:1d:4c:06:d4:f2:b0:27:34:f2:6c:ce: e8:dd:1f:a6:43:fd:d6:70:24:5d:5b:4c:cd:e1:77: 26:8c:20:9d:45:c0:c0:73:65:07:8a:f3:bd:e8:99: bb:da:cd:a1:c5:b4:f0:62:56:f4:c5:4f:16:b9:71: 99:e4:b3:28:6d:89:04:de:eb:a5:76:63:16:a0:be: e6:8d:df:c8:c9:20:e2:b1:13:43:f1:f2:c5:9b:8e: f8:27:1e:2a:30:f8:1e:02:36:0d:c3:24:95:51:9a: cd:61:a6:c3:8b:98:3f:9d:12:d6:b1:35:a9:0b:99: 1d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:80:9D:FE:7C:81:4F:0E:63:65:E3:02:50:5A:5D:28:C4:86:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9354b05e-c3b8-3cd1-9e6b-12b2a6595cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.106.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ef:df:69:54:53:17:06:21:81:6f:14:74:f8:57:b9:27:86: 05:db:27:bd:7a:0f:cc:31:05:72:e8:09:4c:c3:a0:79:ec:d1: 7f:8b:da:cd:e1:17:ee:e7:98:88:9b:4a:79:a8:bc:6f:67:f8: 7d:83:4b:4c:ce:bd:4d:d8:aa:19:04:3a:31:f0:24:31:ec:33: d8:88:8d:63:b1:29:c4:bd:c3:e4:96:58:68:96:2c:95:69:32: 86:d4:08:7a:cf:98:63:6a:f8:8e:c5:2e:e6:73:53:e6:81:7f: 1b:3b:11:fd:26:26:20:35:77:34:0e:63:ec:4d:1e:a1:ef:28: 15:6c:a3:0a:5d:92:93:11:d8:c3:de:8c:57:aa:8d:1c:a1:75: 52:09:49:a1:f5:93:2f:70:87:79:07:96:90:53:18:46:f1:5a: ad:68:a8:eb:4e:94:cd:9d:2f:ab:a0:07:7a:38:f8:97:c7:ea: 98:51:10:aa:59:57:75:d6:b8:9b:04:41:c9:96:4e:da:6d:e0: e2:b2:ec:63:ae:4e:46:fb:ac:74:86:51:a2:f4:85:79:ec:5d: 98:a0:1f:b0:eb:9a:b9:db:16:a3:1c:cf:87:59:03:71:87:10: 56:eb:ac:18:f1:28:90:db:84:0e:81:03:30:0d:90:54:f4:b3: a5:e5:02:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnoDKQ7tE3HaJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDNmMGE2OTctMWE1Ny00YmFiLWEzNWQtODhkYTEyNjZjZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO4cPlhDEL0ayMWja3A2JPqY4oqVyQozEU5v E82IldeyuX8RuZIfGjw4y1U+pKXNz6opG2+hrOI1MlqOYn1koMVr7rzSPK0Sd3eY W4r0BqyP6lCoGbGj0dvsMOCyYCVZ8Ke1ftQX2ZmxaeFKCqs9ZtnoGWTynsdEc6q0 fPB9AxpYPAaJQ57GTTueHUwG1PKwJzTybM7o3R+mQ/3WcCRdW0zN4XcmjCCdRcDA c2UHivO96Jm72s2hxbTwYlb0xU8WuXGZ5LMobYkE3uuldmMWoL7mjd/IySDisRND 8fLFm474Jx4qMPgeAjYNwySVUZrNYabDi5g/nRLWsTWpC5kd1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/1gJ3+fIFPDmNl4wJQWl0oxIY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTM1NGIwNWUtYzNiOC0z Y2QxLTllNmItMTJiMmE2NTk1Y2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2oWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/v32lUUxcGIYFvFHT4V7knhgXbJ716D8wxBXLoCUzDoHns0X+L2s3h F+7nmIibSnmovG9n+H2DS0zOvU3YqhkEOjHwJDHsM9iIjWOxKcS9w+SWWGiWLJVp MobUCHrPmGNq+I7FLuZzU+aBfxs7Ef0mJiA1dzQOY+xNHqHvKBVsowpdkpMR2MPe jFeqjRyhdVIJSaH1ky9wh3kHlpBTGEbxWq1oqOtOlM2dL6ugB3o4+JfH6phREKpZ V3XWuJsEQcmWTtpt4OKy7GOuTkb7rHSGUaL0hXnsXZigH7DrmrnbFqMcz4dZA3GH EFbrrBjxKJDbhA6BAzANkFT0s6XlAnA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:58:00 2026 by rpki-client