$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa File: a15dd1fc-a5e6-3111-ac70-b3161353326b.roa (raw, json) Hash identifier: T0wv+93VgPQcdMYSkJ13DX/q5B8ID5dVNJ19J3Jmcog= Subject key identifier: 13:1F:25:18:2E:72:B2:C9:AF:2F:A4:FB:FE:80:75:FA:4A:28:21:AD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3DFFE45CF08A561163357080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 67.141.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e4:5c:f0:8a:56:11:63:35:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=442e8e6e-8479-4040-91e6-5b3202b3447a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:8d:42:78:fb:99:f2:be:29:cc:47:a8:43: 75:de:8b:7d:f5:1b:7c:7b:ea:43:05:10:e9:46:c6: 1a:00:02:b6:44:c8:0c:5c:88:39:3d:ae:33:f8:e4: ab:53:f6:b7:7b:68:78:51:15:6f:9c:92:b3:fc:bf: 4f:49:fd:84:8e:53:3e:65:45:42:be:a1:42:d8:db: 9d:31:28:03:15:d9:82:32:c4:49:7d:81:0f:5d:8b: d1:6d:d1:e7:17:44:c7:28:f8:07:82:8b:47:50:c7: c4:9f:25:1d:40:74:d7:08:b6:0d:8d:42:96:3a:4c: 7c:17:82:6f:bb:c8:38:3b:e2:7d:27:3f:be:61:0f: 4e:7f:e2:ee:99:06:c8:8f:56:fc:6a:00:5d:4a:97: 4b:66:e3:cb:6b:a5:ab:c4:07:25:ac:74:f7:01:fd: 81:08:de:e4:03:08:03:41:5f:b2:0d:18:0f:1a:1e: e8:d7:03:9b:4a:af:e4:25:58:87:49:a5:94:66:29: c6:1f:87:9d:ba:24:70:e3:c4:63:5f:ba:55:cf:60: f1:6d:ac:86:71:95:5c:23:0c:6b:7a:62:c9:65:47: af:37:3f:8a:6f:58:a0:27:79:c4:18:eb:e3:41:80: cf:93:c6:a8:67:79:31:38:e2:08:9f:1f:1c:2b:58: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1F:25:18:2E:72:B2:C9:AF:2F:A4:FB:FE:80:75:FA:4A:28:21:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:42:31:56:04:0d:ba:72:0c:00:b0:51:6a:93:64:f2:cc:5e: 2e:dd:fd:16:9a:dc:eb:40:52:b7:f6:bf:f3:7f:15:1e:8b:e6: 38:0d:58:35:44:f2:3c:62:7c:98:5c:18:7b:7f:f9:47:04:f6: ed:ed:c5:d8:6d:70:61:fe:33:60:9e:d6:ba:bb:38:06:03:85: 97:d8:f1:42:32:c1:e0:e9:12:7c:63:e9:3f:e0:a1:d3:1e:23: 69:80:f0:1b:0f:81:1b:13:3f:1c:53:b1:cd:65:a0:08:8e:bf: 32:4f:f0:82:9a:fa:ad:f7:fb:c0:8d:80:f3:bc:9a:b8:9c:7a: 21:fd:82:a7:84:a5:40:a2:3a:1f:4e:f2:e7:46:4d:d1:2a:94: 68:e9:d3:8a:8b:49:de:5b:60:d3:7c:3a:95:b2:5e:93:52:da: 8e:1c:7a:52:b3:38:b5:da:63:cd:e1:91:72:88:54:6d:e8:65: 74:2f:9c:e0:2b:dc:fc:33:29:d2:69:ec:40:71:1b:80:a2:63: 22:fb:08:b9:56:fe:98:3f:41:86:d1:be:83:c7:ad:61:bb:47: 3b:f3:98:de:58:6e:51:c8:4b:b2:db:e7:b9:34:f1:7e:2c:3b: 1f:34:25:3d:4f:43:51:0a:ba:99:de:02:b0:a6:77:b8:6c:5a: 42:c9:9a:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+Rc8IpWEWM1cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDQyZThlNmUtODQ3OS00MDQwLTkxZTYtNWIzMjAyYjM0NDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgSNQnj7mfK+KcxHqEN13ot99Rt8e+pDBRDp RsYaAAK2RMgMXIg5Pa4z+OSrU/a3e2h4URVvnJKz/L9PSf2EjlM+ZUVCvqFC2Nud MSgDFdmCMsRJfYEPXYvRbdHnF0THKPgHgotHUMfEnyUdQHTXCLYNjUKWOkx8F4Jv u8g4O+J9Jz++YQ9Of+LumQbIj1b8agBdSpdLZuPLa6WrxAclrHT3Af2BCN7kAwgD QV+yDRgPGh7o1wObSq/kJViHSaWUZinGH4eduiRw48RjX7pVz2DxbayGcZVcIwxr emLJZUevNz+Kb1igJ3nEGOvjQYDPk8aoZ3kxOOIInx8cK1hZMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMfJRgucrLJry+k+/6AdfpKKCGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE1ZGQxZmMtYTVlNi0z MTExLWFjNzAtYjMxNjEzNTMzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ436MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdCMVYEDbpyDACwUWqTZPLMXi7d/Raa3OtAUrf2v/N/FR6L5jgNWDVE 8jxifJhcGHt/+UcE9u3txdhtcGH+M2Ce1rq7OAYDhZfY8UIyweDpEnxj6T/godMe I2mA8BsPgRsTPxxTsc1loAiOvzJP8IKa+q33+8CNgPO8mriceiH9gqeEpUCiOh9O 8udGTdEqlGjp04qLSd5bYNN8OpWyXpNS2o4celKzOLXaY83hkXKIVG3oZXQvnOAr 3PwzKdJp7EBxG4CiYyL7CLlW/pg/QYbRvoPHrWG7RzvzmN5YblHIS7Lb57k08X4s Ox80JT1PQ1EKupneArCmd7hsWkLJmms= -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:36 2026 by rpki-client