$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a085d050-8d43-326a-814c-9d1beb3b7df3.roa File: a085d050-8d43-326a-814c-9d1beb3b7df3.roa (raw, json) Hash identifier: 8+mFbl6YLPl/IXrBPxqkmXrafyfQPuhqvCBWP9iYraM= Subject key identifier: 72:7F:72:82:F3:1A:9B:95:0E:66:53:00:96:EF:46:BD:0F:A1:08:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A778F64B2DA56F5E62AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a085d050-8d43-326a-814c-9d1beb3b7df3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 166.102.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:77:8f:64:b2:da:56:f5:e6:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=24b75415-c9b4-477c-b4ed-d193a478fb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:2c:52:42:da:d8:41:42:7e:2e:18:c4:2a: f9:a0:a3:a4:45:4d:73:ae:b2:12:73:e8:a3:c8:87: 79:33:13:60:c7:e2:02:00:d2:f1:c3:81:19:e7:d1: 47:44:fb:b1:19:44:d6:bb:02:e3:32:fd:84:59:55: c1:c4:8e:3a:d5:b9:67:31:9a:ac:5b:8f:f4:3b:bb: e8:60:3f:03:a2:00:42:93:b6:57:10:4a:62:d1:b1: 64:e6:02:ea:a3:c5:d0:51:f0:e3:98:c8:09:d1:b9: c2:17:7f:04:dc:e2:b8:ed:6f:2b:13:9d:7d:3e:fc: 3d:7f:58:3b:dd:bc:2b:fc:33:38:da:34:ff:7e:c5: 5c:22:91:2d:da:0f:f1:f7:a0:ef:01:7e:e9:62:23: 6a:d9:52:e8:8d:34:2a:3a:43:3b:b8:f3:d4:d3:87: 25:ce:46:93:20:97:bc:9f:23:e0:0a:8a:07:eb:7b: 27:05:e1:a5:3e:54:cb:95:14:e2:de:5c:9e:14:84: a9:19:93:ac:90:7b:c8:8c:ac:e9:a8:a2:53:9a:00: b4:6c:49:44:0c:45:88:d5:93:a2:6e:2c:8a:9e:45: cb:37:64:e8:d0:c7:68:65:a4:c6:27:62:fe:fc:34: 43:3e:dc:2e:b4:0f:a2:c8:14:d7:94:c6:52:47:3f: 28:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7F:72:82:F3:1A:9B:95:0E:66:53:00:96:EF:46:BD:0F:A1:08:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a085d050-8d43-326a-814c-9d1beb3b7df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:50:b4:ef:2d:3c:ae:cd:33:19:3d:06:94:47:91:b3:bb:78: d4:34:3c:ef:3e:39:92:6e:ac:3f:1b:b4:2f:87:a7:5d:f1:c0: e0:a9:86:a1:5a:4f:2b:d3:56:14:7d:bc:d5:6b:a2:b5:45:46: c0:dd:d8:07:64:1a:a4:4f:86:7a:a6:3f:01:34:37:10:c2:04: 70:06:9f:cf:6f:53:4e:9e:c7:40:b1:bf:88:c5:5c:49:a6:94: c5:28:b9:2c:af:6e:72:0e:b2:34:8f:74:9c:52:a2:9b:4d:74: 86:e0:d8:a3:d6:83:72:63:18:0a:f6:34:02:eb:c0:43:5b:17: 2d:16:8a:d1:7e:4b:ff:da:e2:f5:05:09:f6:c5:9a:c4:66:b1: 2a:ed:f6:03:04:82:e0:0d:df:a1:6c:73:17:ad:f3:30:ea:34: ca:ef:87:f8:29:47:4f:56:06:2d:1a:c4:b8:4b:7c:55:c7:73: 73:40:40:d8:19:29:3f:b6:62:c7:e2:8e:25:3e:f0:2b:8d:c1: 7b:97:27:63:d6:2a:3f:1e:08:2f:d9:0a:90:e0:ed:57:bf:98: 17:cb:b4:8d:ba:b8:cc:8a:7e:17:00:d9:7b:a4:aa:63:5b:44: 2e:f4:1b:4a:d1:92:a0:c5:1f:56:62:58:9f:06:5c:78:e2:4b: 45:0d:fd:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnePZLLaVvXmKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjRiNzU0MTUtYzliNC00NzdjLWI0ZWQtZDE5M2E0NzhmYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAYsUkLa2EFCfi4YxCr5oKOkRU1zrrISc+ij yId5MxNgx+ICANLxw4EZ59FHRPuxGUTWuwLjMv2EWVXBxI461blnMZqsW4/0O7vo YD8DogBCk7ZXEEpi0bFk5gLqo8XQUfDjmMgJ0bnCF38E3OK47W8rE519Pvw9f1g7 3bwr/DM42jT/fsVcIpEt2g/x96DvAX7pYiNq2VLojTQqOkM7uPPU04clzkaTIJe8 nyPgCooH63snBeGlPlTLlRTi3lyeFISpGZOskHvIjKzpqKJTmgC0bElEDEWI1ZOi biyKnkXLN2To0MdoZaTGJ2L+/DRDPtwutA+iyBTXlMZSRz8oCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ/coLzGpuVDmZTAJbvRr0PoQhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA4NWQwNTAtOGQ0My0z MjZhLTgxNGMtOWQxYmViM2I3ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhQtO8tPK7NMxk9BpRHkbO7eNQ0PO8+OZJurD8btC+Hp13xwOCphqFa TyvTVhR9vNVrorVFRsDd2AdkGqRPhnqmPwE0NxDCBHAGn89vU06ex0Cxv4jFXEmm lMUouSyvbnIOsjSPdJxSoptNdIbg2KPWg3JjGAr2NALrwENbFy0WitF+S//a4vUF CfbFmsRmsSrt9gMEguAN36Fscxet8zDqNMrvh/gpR09WBi0axLhLfFXHc3NAQNgZ KT+2YsfijiU+8CuNwXuXJ2PWKj8eCC/ZCpDg7Ve/mBfLtI26uMyKfhcA2XukqmNb RC70G0rRkqDFH1ZiWJ8GXHjiS0UN/VA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:58 2026 by rpki-client