$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa File: a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa (raw, json) Hash identifier: U/v1jUnFnKRFX0LOBkwyM4vhdOCo3XfcsYe3jheg6fY= Subject key identifier: A2:E3:40:5A:C9:7C:5B:E1:AE:BA:CB:30:C0:C3:E7:00:1E:F6:92:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7BD109E5A59662F43440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 53478 IP address blocks: 207.59.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7b:d1:09:e5:a5:96:62:f4:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e47d9399-57f4-44e0-9a20-ad54cd15b5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:31:6c:72:39:b8:5b:0a:10:e7:0b:de:79: 62:d3:1e:7d:2a:35:05:6b:9c:1f:b6:fd:2c:bc:6f: c6:b7:38:2f:cb:e5:16:8d:d5:f0:eb:7a:8a:b9:42: d9:48:3e:04:f0:a7:f9:e9:fe:a6:16:38:11:72:e4: c4:fc:88:1e:da:6b:94:20:5e:e1:72:5a:54:a5:ba: 5b:e5:97:58:98:ea:02:b8:d4:53:63:c3:0d:c4:e5: 3a:5b:41:22:39:64:08:cf:d1:6d:0f:8a:c7:b6:05: 6c:ae:d9:ed:bb:20:3a:2c:53:ac:24:95:e4:03:f9: e4:ba:30:53:a8:07:b1:40:5d:9f:91:bb:a6:3e:0c: 3d:8e:a2:07:58:87:f1:3e:6e:d3:9e:a4:ed:93:10: a3:c3:59:00:33:39:b6:dc:b9:cb:dc:f9:3c:e1:e4: b7:96:9c:2e:9f:97:94:c0:76:cb:ba:f5:8a:34:05: 17:09:1c:6d:c8:fa:d0:e1:99:66:87:75:ff:f0:e9: 87:5c:84:32:23:41:c4:4b:3d:30:be:b6:79:75:a0: 74:6b:23:e3:e3:6e:04:8f:57:b3:41:56:40:86:43: 94:b2:b8:f8:c8:0d:6e:72:19:51:7f:e7:1f:0e:49: 13:33:24:e8:57:5f:73:60:56:fe:e1:66:20:af:2b: 8e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E3:40:5A:C9:7C:5B:E1:AE:BA:CB:30:C0:C3:E7:00:1E:F6:92:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.59.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:13:15:55:6a:87:32:12:91:3c:5e:21:df:76:46:78:89:6d: 24:28:fd:76:0b:a6:8b:18:3f:2b:b4:9d:f5:da:d7:2e:6e:36: 05:f6:89:15:aa:bd:8a:eb:b7:19:8e:5d:7b:86:f9:6f:3c:a2: 7f:a3:ad:54:3c:cc:8c:c5:8c:6a:72:b8:b7:2d:41:ba:7b:48: 18:f9:1d:f3:e1:47:f9:f0:77:fe:d8:eb:e5:b0:df:30:d0:15: c1:74:05:65:41:43:5f:63:01:15:53:87:66:13:b2:b6:db:50: 33:1f:a1:cc:d4:77:b5:5b:63:d5:50:6b:68:e2:09:3f:f7:fd: 43:0e:8b:95:84:ae:89:99:b4:02:1b:cb:e4:ce:85:e0:3c:ee: f9:a9:e7:f9:3c:7d:38:88:a5:69:45:5a:34:52:5c:6a:be:56: 13:b2:63:77:1a:01:d4:a9:20:1f:00:f8:a9:e7:a7:ea:57:cf: 48:c9:71:b9:84:4b:d8:c3:a1:e4:29:1b:c9:4d:da:47:11:03: b5:9e:07:fa:94:90:ee:45:0d:0a:34:07:8f:d8:1b:2a:18:d1: 93:ef:87:63:ba:bd:a8:b4:47:4f:1e:b8:a6:6d:d3:0e:e8:47: 83:84:71:83:08:bb:2a:a7:c3:79:b8:13:c5:37:58:12:f7:b8: 84:5b:37:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnvRCeWllmL0NEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTQ3ZDkzOTktNTdmNC00NGUwLTlhMjAtYWQ1NGNkMTViNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrcxbHI5uFsKEOcL3nli0x59KjUFa5wftv0s vG/Gtzgvy+UWjdXw63qKuULZSD4E8Kf56f6mFjgRcuTE/Ige2muUIF7hclpUpbpb 5ZdYmOoCuNRTY8MNxOU6W0EiOWQIz9FtD4rHtgVsrtntuyA6LFOsJJXkA/nkujBT qAexQF2fkbumPgw9jqIHWIfxPm7TnqTtkxCjw1kAMzm23LnL3Pk84eS3lpwun5eU wHbLuvWKNAUXCRxtyPrQ4Zlmh3X/8OmHXIQyI0HESz0wvrZ5daB0ayPj424Ej1ez QVZAhkOUsrj4yA1uchlRf+cfDkkTMyToV19zYFb+4WYgryuOMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLjQFrJfFvhrrrLMMDD5wAe9pJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlhY2FhYTMtN2ViNC0z ZjM4LTkwMjktMTY0YzdkNWI2MjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoTFVVqhzISkTxeId92RniJbSQo/XYLposYPyu0nfXa1y5uNgX2iRWq vYrrtxmOXXuG+W88on+jrVQ8zIzFjGpyuLctQbp7SBj5HfPhR/nwd/7Y6+Ww3zDQ FcF0BWVBQ19jARVTh2YTsrbbUDMfoczUd7VbY9VQa2jiCT/3/UMOi5WEromZtAIb y+TOheA87vmp5/k8fTiIpWlFWjRSXGq+VhOyY3caAdSpIB8A+Knnp+pXz0jJcbmE S9jDoeQpG8lN2kcRA7WeB/qUkO5FDQo0B4/YGyoY0ZPvh2O6vai0R08euKZt0w7o R4OEcYMIuyqnw3m4E8U3WBL3uIRbN4M= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:53 2026 by rpki-client