$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa File: 958402c9-3b0d-36b2-be3e-11fd05143ae2.roa (raw, json) Hash identifier: YfSf0m6Gf+ehEuTadYiBQtQebj9zRC+G52tTV1xa1U0= Subject key identifier: 9F:8F:3C:EF:89:39:7C:9F:2E:37:72:16:9A:18:7A:AB:BC:69:F6:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F888F72E7AA9AA445F9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 174.131.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:88:8f:72:e7:aa:9a:a4:45:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=162fe92d-e504-4fdf-b1f0-261469b9d091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:a9:59:d0:9f:b5:7a:00:d3:b7:ff:e0:5b: c1:45:7c:f4:bc:17:c2:5e:f0:3c:f9:f2:5a:83:32: 6d:c3:dc:8a:20:2d:56:ee:ac:23:8b:ec:6d:5b:6b: 3b:10:c1:44:8e:29:e6:5e:38:c3:07:8f:50:f9:2f: 7b:62:31:de:76:a9:5c:bb:7a:84:78:b8:c2:b5:bf: cb:8d:b3:eb:8f:58:04:07:c3:5f:6e:cf:aa:50:9a: 98:db:97:ae:e8:6c:37:03:11:99:bf:62:1e:ba:76: c5:f3:2b:4e:9d:6b:28:e2:ac:62:0e:91:9f:0a:cd: 5e:77:81:33:84:a2:58:6c:ad:14:6a:99:61:a2:df: 4f:26:bb:ea:22:c8:1b:51:8b:3c:90:26:b0:80:0a: d2:5e:1c:63:4c:7d:1e:77:02:03:a1:a6:9e:b8:c6: 33:67:d4:6d:4b:3f:37:ed:f4:35:43:99:32:4f:a8: cf:4a:63:b5:5d:92:d6:95:11:63:fa:de:5c:f4:2d: fb:b3:c2:eb:57:54:9f:2f:fc:08:58:c9:c1:1e:3f: 71:16:bf:d0:84:bd:e5:53:13:2e:c4:59:00:75:e3: b3:2b:4f:db:69:01:7f:4e:b8:df:94:78:ea:5f:c5: a8:8b:28:ce:4d:17:06:cc:b5:27:8f:80:18:27:78: 17:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8F:3C:EF:89:39:7C:9F:2E:37:72:16:9A:18:7A:AB:BC:69:F6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/958402c9-3b0d-36b2-be3e-11fd05143ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4e:53:d1:1b:9e:ab:6e:ea:41:21:be:9e:36:ca:5e:a3:b5: 25:32:d1:48:47:2e:b9:04:f3:0e:6d:04:ac:d7:93:0f:c5:06: 97:31:01:ca:27:59:03:37:a9:04:2b:a8:8c:1b:64:82:46:df: e5:74:d7:0b:eb:c6:35:eb:bf:d7:0c:65:b3:e3:cb:a9:e0:4c: 2a:3f:88:89:1f:27:2c:c6:af:da:33:e8:ad:24:f1:11:58:94: 33:94:67:ef:16:14:32:d2:e7:32:c5:87:90:f4:c5:65:01:c4: 37:21:15:2c:0f:34:1d:14:32:dc:2e:9a:12:58:d6:12:38:c8: 46:2f:ff:d9:c6:4c:74:b1:32:1c:a7:fb:b5:07:a1:ad:b6:94: eb:c1:60:54:86:0e:44:39:81:e7:63:48:1f:a9:f5:66:f0:0f: 97:ef:e2:b5:1b:21:c8:6c:e7:70:7f:fd:f5:7c:9e:c8:0b:23: 17:16:c6:d3:ad:ab:3f:68:3b:f9:5a:10:3e:bf:76:06:0b:21: 62:4a:d2:3d:27:c9:0e:60:e3:b2:29:e4:63:a9:8f:54:2a:4f: 0d:7e:0d:97:e1:19:1f:1e:51:07:46:ae:b3:67:42:4b:c9:11: 24:67:1e:3e:d3:76:38:e2:3b:17:18:02:94:fb:39:f1:36:73: a9:d0:55:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4iPcueqmqRF+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MTYyZmU5MmQtZTUwNC00ZmRmLWIxZjAtMjYxNDY5YjlkMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0mpWdCftXoA07f/4FvBRXz0vBfCXvA8+fJa gzJtw9yKIC1W7qwji+xtW2s7EMFEjinmXjjDB49Q+S97YjHedqlcu3qEeLjCtb/L jbPrj1gEB8Nfbs+qUJqY25eu6Gw3AxGZv2IeunbF8ytOnWso4qxiDpGfCs1ed4Ez hKJYbK0Uaplhot9PJrvqIsgbUYs8kCawgArSXhxjTH0edwIDoaaeuMYzZ9RtSz83 7fQ1Q5kyT6jPSmO1XZLWlRFj+t5c9C37s8LrV1SfL/wIWMnBHj9xFr/QhL3lUxMu xFkAdeOzK0/baQF/TrjflHjqX8WoiyjOTRcGzLUnj4AYJ3gXTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+PPO+JOXyfLjdyFpoYequ8afahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTU4NDAyYzktM2IwZC0z NmIyLWJlM2UtMTFmZDA1MTQzYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExOU9Ebnqtu6kEhvp42yl6jtSUy0UhHLrkE8w5tBKzXkw/FBpcxAcon WQM3qQQrqIwbZIJG3+V01wvrxjXrv9cMZbPjy6ngTCo/iIkfJyzGr9oz6K0k8RFY lDOUZ+8WFDLS5zLFh5D0xWUBxDchFSwPNB0UMtwumhJY1hI4yEYv/9nGTHSxMhyn +7UHoa22lOvBYFSGDkQ5gedjSB+p9WbwD5fv4rUbIchs53B//fV8nsgLIxcWxtOt qz9oO/laED6/dgYLIWJK0j0nyQ5g47Ip5GOpj1QqTw1+DZfhGR8eUQdGrrNnQkvJ ESRnHj7TdjjiOxcYApT7OfE2c6nQVZw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:17 2026 by rpki-client