$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa File: b5514b8f-46aa-3af8-998f-2a0964724887.roa (raw, json) Hash identifier: +uA9BUwgYGxHgCrfbcGkUzNDLUesZQHC1YEHXQ/MU6g= Subject key identifier: C8:57:BD:8A:88:5F:E0:80:BF:4D:7C:AE:2A:43:F5:BD:23:11:27:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6FEAF891D686B043D580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 207.222.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6f:ea:f8:91:d6:86:b0:43:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=496509f7-c04f-47ae-a03f-bcd5041f0e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:fd:46:c1:22:6a:57:c6:38:3d:8a:78:b6: ee:86:50:35:9b:2c:1e:88:8f:4f:c6:74:ef:86:3f: ac:c0:40:68:e9:4e:57:46:e2:56:08:df:b6:84:50: cd:27:3a:7e:ea:53:3a:37:4a:1b:57:cb:43:7d:c6: 84:80:61:0f:3c:eb:2a:d3:f0:eb:37:13:c2:b1:0a: d2:9f:0e:8e:dd:ce:61:71:4c:7b:10:63:43:77:79: 26:22:c3:40:7b:1c:60:0e:81:12:8e:ed:49:84:88: f2:c5:f7:c0:72:10:e5:72:7e:80:ae:89:6f:01:43: 5f:7c:0e:2e:76:f6:f2:21:35:60:6b:70:cb:31:34: bc:62:9f:4e:71:b1:99:8f:3f:f3:37:18:88:06:2f: 40:c7:b5:57:c8:6e:76:c9:cf:9f:de:d3:06:82:3d: 78:96:9e:11:84:c3:60:34:5e:c9:e0:ca:e9:cd:25: 54:4e:91:1f:8c:d8:ca:8e:c7:2b:cd:c9:ca:22:46: f0:30:f4:83:91:16:a2:6d:5c:45:0b:91:20:ef:10: 2f:c0:18:15:e4:26:6c:65:67:82:52:9e:af:66:3a: ed:35:6e:4c:e4:1f:09:96:39:70:e2:33:bf:9d:e1: 62:99:ee:de:e3:f8:dd:d4:6f:6a:dd:f8:3b:a5:fd: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:57:BD:8A:88:5F:E0:80:BF:4D:7C:AE:2A:43:F5:BD:23:11:27:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:28:5e:85:8b:a2:51:5e:99:54:04:a3:ec:38:5b:d5:e3:63: bb:7a:a1:31:8c:bc:3d:24:db:2b:de:df:a8:c5:fe:9c:46:73: 8a:3b:bc:ec:2c:67:d7:e7:b7:51:af:9c:d7:08:05:78:9c:bc: 6a:e0:ed:b6:77:b8:8d:65:c0:7f:6e:02:20:b5:16:f4:42:d7: 4e:ff:6f:1a:3c:1d:4e:87:00:00:37:32:3f:8d:c2:60:86:97: 6b:b0:20:d2:54:48:0a:e7:de:30:1d:03:b9:3e:26:02:c7:21: 68:13:ec:f2:a0:44:6d:c1:2c:63:a0:d7:94:a1:f4:64:72:46: d9:39:0b:b9:57:70:c9:2d:96:3f:64:5f:92:a6:12:06:6f:ea: 20:98:0f:be:c8:2f:01:3c:b4:5c:ee:87:aa:72:61:f2:50:7d: dc:68:d1:6a:88:08:6e:0e:25:9a:02:aa:ee:20:37:b2:3f:6b: bf:6c:3a:14:37:69:7d:50:33:23:74:f7:bf:47:e9:aa:92:e9: 9d:58:89:e1:41:bb:9e:d6:3f:b2:8e:7a:8d:da:90:20:04:a4: de:60:57:8e:c2:79:a3:31:8c:50:ae:09:9a:b7:9b:ea:a3:bb: f4:8d:1b:d9:16:4d:7a:79:64:10:05:c5:94:df:c9:49:3c:df: e9:ab:a7:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCm/q+JHWhrBD1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDk2NTA5ZjctYzA0Zi00N2FlLWEwM2YtYmNkNTA0MWYwZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuir9RsEialfGOD2KeLbuhlA1myweiI9PxnTv hj+swEBo6U5XRuJWCN+2hFDNJzp+6lM6N0obV8tDfcaEgGEPPOsq0/DrNxPCsQrS nw6O3c5hcUx7EGNDd3kmIsNAexxgDoESju1JhIjyxffAchDlcn6ArolvAUNffA4u dvbyITVga3DLMTS8Yp9OcbGZjz/zNxiIBi9Ax7VXyG52yc+f3tMGgj14lp4RhMNg NF7J4MrpzSVUTpEfjNjKjscrzcnKIkbwMPSDkRaibVxFC5Eg7xAvwBgV5CZsZWeC Up6vZjrtNW5M5B8Jljlw4jO/neFime7e4/jd1G9q3fg7pf1stwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhXvYqIX+CAv018ripD9b0jESclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjU1MTRiOGYtNDZhYS0z YWY4LTk5OGYtMmEwOTY0NzI0ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz96gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMoXoWLolFemVQEo+w4W9XjY7t6oTGMvD0k2yve36jF/pxGc4o7vOws Z9fnt1GvnNcIBXicvGrg7bZ3uI1lwH9uAiC1FvRC107/bxo8HU6HAAA3Mj+NwmCG l2uwINJUSArn3jAdA7k+JgLHIWgT7PKgRG3BLGOg15Sh9GRyRtk5C7lXcMktlj9k X5KmEgZv6iCYD77ILwE8tFzuh6pyYfJQfdxo0WqICG4OJZoCqu4gN7I/a79sOhQ3 aX1QMyN0979H6aqS6Z1YieFBu57WP7KOeo3akCAEpN5gV47CeaMxjFCuCZq3m+qj u/SNG9kWTXp5ZBAFxZTfyUk83+mrp90= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:47 2026 by rpki-client