$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c35273ee-a67b-389a-abed-e2f536761270.roa File: c35273ee-a67b-389a-abed-e2f536761270.roa (raw, json) Hash identifier: fVVi7nXJ/7utEiwVvQ4tDItytKVWE2gP4vTt/pEqeGo= Subject key identifier: F6:EA:5D:00:C7:C7:BB:81:F0:75:7F:97:B9:83:69:9F:9A:78:0F:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA5722D80EE7E54DEE880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c35273ee-a67b-389a-abed-e2f536761270.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 26914 IP address blocks: 66.32.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a5:72:2d:80:ee:7e:54:de:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=403beffc-a7fd-4e11-983a-9eb93a4cd81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a5:8c:bd:3b:67:fb:d0:bb:78:c5:7e:81:70: e9:6d:9b:a4:7f:c4:18:64:36:4d:d1:6f:54:14:f2: de:f7:76:ec:ba:46:8e:85:3c:e1:d4:69:f7:0b:63: a6:90:d6:9d:dd:6e:cc:bf:5e:df:08:35:0f:24:71: 1d:25:28:9d:12:06:48:ce:0c:03:8f:a6:d9:03:7b: b0:86:23:b3:0e:b1:34:5e:1c:7a:07:b6:c1:b6:72: 6b:4e:41:24:bd:ad:47:8a:66:2d:9e:5a:5a:5b:52: 0a:29:79:38:65:40:74:34:72:70:c8:56:41:22:a5: ea:72:3e:c5:f7:75:8d:9b:a3:6e:86:38:b9:84:14: 71:0e:0d:35:03:4e:45:01:03:b7:09:7a:36:34:5b: af:0b:5c:ec:e4:30:b1:cb:0e:de:ae:a7:c7:11:21: 26:78:77:bb:1b:9e:9e:70:47:a8:98:9d:fc:a6:a8: 3f:cd:8b:21:c1:f1:93:b8:ad:33:b4:55:39:23:9e: 23:e1:92:94:5e:59:3a:1d:51:a9:9d:d5:14:75:b3: f2:c5:a5:bc:e6:e6:35:59:ec:78:1a:2f:fd:0a:66: 88:31:3a:67:96:0e:b0:96:56:53:80:ad:80:49:35: a6:a8:24:a9:b5:4a:db:7d:1b:1a:98:23:74:00:79: 72:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EA:5D:00:C7:C7:BB:81:F0:75:7F:97:B9:83:69:9F:9A:78:0F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c35273ee-a67b-389a-abed-e2f536761270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e5:ef:32:39:bb:40:51:14:4c:97:f4:1e:ae:45:f5:b5:9c: 1b:8c:f8:dc:3c:99:78:65:b1:fb:40:64:1d:4e:d7:27:cb:68: 25:c6:b7:f3:e6:86:26:4f:3d:8a:5c:7f:94:51:a9:64:d5:81: 1e:5a:19:9f:12:4e:40:09:49:28:9b:6d:c1:cc:1f:20:2c:10: 2d:04:e5:cd:39:b0:b6:7e:86:36:58:7a:30:9c:87:fe:3f:73: 15:55:d5:23:2e:3e:84:68:9e:66:dc:03:eb:85:d2:a1:38:dd: 1b:27:2f:44:26:00:6a:76:fe:5e:e8:cc:58:a7:63:f5:9a:63: e4:c7:2e:e3:7c:b3:df:c7:37:1f:cc:7b:a0:04:15:a8:2a:e3: 3d:bc:7f:ff:f8:6a:92:2e:76:f2:32:70:0c:e0:ec:0f:53:6c: c8:ac:59:af:8b:43:88:c9:06:eb:7a:52:9e:af:1b:3b:cf:b7: 7c:e6:10:c0:40:23:a0:d7:d8:43:57:c6:0a:1c:3c:86:2b:ef: 9b:8f:fa:d9:44:be:ac:32:2a:d8:72:ab:11:f0:e1:9d:85:fe: 12:b4:90:05:2e:26:08:f0:7f:a2:83:f8:7a:4b:70:e0:63:4f: 09:53:5a:24:84:21:f6:30:72:e3:49:4d:00:1c:03:a8:cc:e5: f8:b9:7e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqVyLYDuflTe6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDAzYmVmZmMtYTdmZC00ZTExLTk4M2EtOWViOTNhNGNkODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKWMvTtn+9C7eMV+gXDpbZukf8QYZDZN0W9U FPLe93bsukaOhTzh1Gn3C2OmkNad3W7Mv17fCDUPJHEdJSidEgZIzgwDj6bZA3uw hiOzDrE0Xhx6B7bBtnJrTkEkva1HimYtnlpaW1IKKXk4ZUB0NHJwyFZBIqXqcj7F 93WNm6Nuhji5hBRxDg01A05FAQO3CXo2NFuvC1zs5DCxyw7erqfHESEmeHe7G56e cEeomJ38pqg/zYshwfGTuK0ztFU5I54j4ZKUXlk6HVGpndUUdbPyxaW85uY1Wex4 Gi/9CmaIMTpnlg6wllZTgK2ASTWmqCSptUrbfRsamCN0AHlyjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbqXQDHx7uB8HV/l7mDaZ+aeA/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzM1MjczZWUtYTY3Yi0z ODlhLWFiZWQtZTJmNTM2NzYxMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfl7zI5u0BRFEyX9B6uRfW1nBuM+Nw8mXhlsftAZB1O1yfLaCXGt/Pm hiZPPYpcf5RRqWTVgR5aGZ8STkAJSSibbcHMHyAsEC0E5c05sLZ+hjZYejCch/4/ cxVV1SMuPoRonmbcA+uF0qE43RsnL0QmAGp2/l7ozFinY/WaY+THLuN8s9/HNx/M e6AEFagq4z28f//4apIudvIycAzg7A9TbMisWa+LQ4jJBut6Up6vGzvPt3zmEMBA I6DX2ENXxgocPIYr75uP+tlEvqwyKthyqxHw4Z2F/hK0kAUuJgjwf6KD+HpLcOBj TwlTWiSEIfYwcuNJTQAcA6jM5fi5fqU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:06 2026 by rpki-client