$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa File: b87596fa-17c1-38ef-93cf-20e32fc601db.roa (raw, json) Hash identifier: NQQYwjRJtJCTiyLIPNaz7PiQV5B+2FcUKgOCEZYkORc= Subject key identifier: 0E:1E:78:B9:D7:6B:38:C9:17:D3:BE:CC:FB:37:2E:E4:DA:6B:89:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6DCF8E109C6D813DA49C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 166.102.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6d:cf:8e:10:9c:6d:81:3d:a4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ebaff4cb-8424-4b19-bde3-f9d2c8f42e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b1:fd:7e:8d:4a:61:0a:99:d5:69:b3:85:0e: 48:1a:f9:94:9b:3b:82:4f:b5:a7:23:40:7a:39:7b: 8c:bb:52:75:e8:e5:06:d8:b4:4d:0f:1d:a9:88:1f: 58:3d:53:7c:3f:06:49:d5:f2:9c:6f:98:ad:36:a8: df:6d:14:63:b9:01:11:7f:ab:2f:0f:6a:56:f3:4d: 3e:83:78:71:f5:30:81:ff:c9:81:37:e6:be:57:56: d8:d6:1a:bc:c8:a8:95:35:c6:8f:a8:ed:68:01:fe: 4c:8e:1f:31:58:97:ed:2d:4b:6e:28:19:6b:87:e2: a4:c9:f7:69:27:01:57:8d:cf:c9:3a:7d:8d:dc:f9: 78:3c:90:c3:99:68:01:19:49:a2:c4:c0:1c:ec:41: bf:05:a0:e7:6d:59:ae:5d:c4:31:8d:96:dc:f7:a8: 17:0a:1b:f8:aa:cb:e4:5b:22:68:6b:5e:22:68:f8: df:7a:e6:af:1e:23:d2:29:2c:6b:c0:34:30:bf:ce: 23:50:3b:8d:ee:48:cf:0d:33:c4:27:ae:8d:cd:87: a8:82:b9:0f:bc:d6:49:78:31:e7:18:78:f6:42:69: b6:24:d2:67:b5:b9:49:b4:ba:88:57:a2:20:72:c7: 15:70:f9:85:9c:ec:a3:c9:a7:25:18:4d:49:17:51: 76:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1E:78:B9:D7:6B:38:C9:17:D3:BE:CC:FB:37:2E:E4:DA:6B:89:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:65:ed:0c:55:8c:40:f7:cf:59:25:32:db:1a:c0:a0:4a:4b: 1e:6b:5d:4a:d5:95:81:8f:0a:f8:43:23:f4:18:d6:c4:25:86: 46:27:f9:d5:c5:2a:3d:45:77:33:7e:20:22:bd:2f:2d:5f:0e: ba:4a:db:1f:f0:cd:94:76:1b:7b:02:48:95:d2:e4:f4:d6:ad: 7c:67:ef:ba:61:56:9f:a9:e8:f0:45:07:03:76:e6:14:95:d1: 55:2b:c8:95:a9:f5:c5:01:1c:e3:31:ea:6f:d8:ad:22:51:4d: 35:e5:ac:ea:06:91:b3:69:73:53:42:8c:dd:8f:e6:33:3d:ed: ec:94:ca:0c:3e:e4:9d:5f:46:22:94:73:61:7b:5a:d5:75:ea: dc:2f:0a:a2:ae:16:6e:e6:3d:7a:e3:39:d1:4a:15:07:9c:6d: 2c:d6:93:c4:d6:3c:e0:46:d5:a1:5d:4d:d4:1f:d1:e8:b2:af: 6e:0b:93:50:a8:87:3f:2c:0e:b1:15:49:25:7e:7d:06:60:98: cf:8c:72:c3:50:e9:6b:0e:5b:19:c1:c3:bb:2f:02:8c:da:bd: b8:f5:70:dc:34:92:f1:46:40:71:3a:50:90:ee:18:d8:e3:7b: b5:34:5e:bf:7d:cb:fc:b6:76:d8:5c:d6:0f:cc:6f:85:66:18: 90:8c:f5:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCm3PjhCcbYE9pJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWJhZmY0Y2ItODQyNC00YjE5LWJkZTMtZjlkMmM4ZjQyZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7H9fo1KYQqZ1WmzhQ5IGvmUmzuCT7WnI0B6 OXuMu1J16OUG2LRNDx2piB9YPVN8PwZJ1fKcb5itNqjfbRRjuQERf6svD2pW800+ g3hx9TCB/8mBN+a+V1bY1hq8yKiVNcaPqO1oAf5Mjh8xWJftLUtuKBlrh+Kkyfdp JwFXjc/JOn2N3Pl4PJDDmWgBGUmixMAc7EG/BaDnbVmuXcQxjZbc96gXChv4qsvk WyJoa14iaPjfeuavHiPSKSxrwDQwv84jUDuN7kjPDTPEJ66NzYeogrkPvNZJeDHn GHj2Qmm2JNJntblJtLqIV6IgcscVcPmFnOyjyaclGE1JF1F2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4eeLnXazjJF9O+zPs3LuTaa4l1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg3NTk2ZmEtMTdjMS0z OGVmLTkzY2YtMjBlMzJmYzYwMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpmbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdl7QxVjED3z1klMtsawKBKSx5rXUrVlYGPCvhDI/QY1sQlhkYn+dXF Kj1FdzN+ICK9Ly1fDrpK2x/wzZR2G3sCSJXS5PTWrXxn77phVp+p6PBFBwN25hSV 0VUryJWp9cUBHOMx6m/YrSJRTTXlrOoGkbNpc1NCjN2P5jM97eyUygw+5J1fRiKU c2F7WtV16twvCqKuFm7mPXrjOdFKFQecbSzWk8TWPOBG1aFdTdQf0eiyr24Lk1Co hz8sDrEVSSV+fQZgmM+McsNQ6WsOWxnBw7svAozavbj1cNw0kvFGQHE6UJDuGNjj e7U0Xr99y/y2dthc1g/Mb4VmGJCM9cI= -----END CERTIFICATE-----Generated at Thu Mar 26 09:10:02 2026 by rpki-client