$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa File: c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa (raw, json) Hash identifier: ONn6QqRtgQFZDVc7bUVhdx29lT3un2aUwkOpnlzhaKs= Subject key identifier: 94:94:48:E4:6D:09:A8:76:26:B9:64:04:CA:2C:88:B9:C8:FF:C6:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A39F5D9BC763E76012580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 151.213.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:39:f5:d9:bc:76:3e:76:01:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=71acdb46-bb85-42dd-8375-bac798d91552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:cf:a6:65:e5:29:ad:d8:e0:0a:68:e9:fc: 30:74:94:58:47:fa:84:8e:16:e3:d9:8d:68:1d:1a: a2:25:73:da:6e:57:e1:40:80:d3:7d:8a:41:db:cb: 8d:2d:6f:ac:59:d9:0a:60:82:bd:29:21:53:f8:45: eb:a3:eb:a1:9f:84:b5:df:fa:89:12:d9:70:b6:76: c0:ba:29:09:82:7d:c8:db:35:3d:23:b4:04:df:89: 43:8b:20:d7:8b:85:ef:e1:18:60:5d:bd:88:0e:d6: f3:df:79:10:2b:23:5c:e5:27:c4:b5:ee:af:50:41: 31:0f:a5:87:c7:13:82:e8:4d:23:cf:85:6a:ab:5c: 19:8b:cb:ed:bd:e8:11:7e:c2:9f:8c:c6:a9:af:a1: 7f:09:0c:a7:ad:bc:49:bc:09:b0:78:0c:5e:6a:87: dd:e2:60:d1:c7:d0:e9:76:cf:f4:72:6e:73:ae:58: f7:04:cd:ad:32:32:e1:9d:6a:67:9a:94:4e:1e:f4: 94:3c:2e:ef:ab:f4:6c:da:0a:9b:b5:c7:52:9a:5b: 34:44:ed:03:0b:75:db:a5:2d:2b:7c:c4:25:b3:21: f2:9e:9e:31:3b:23:bd:1d:ad:2d:74:f1:65:e7:8e: 55:a3:07:68:73:22:30:77:39:29:06:2e:7c:2f:60: c6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:94:48:E4:6D:09:A8:76:26:B9:64:04:CA:2C:88:B9:C8:FF:C6:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5c84ef7-1b9a-3132-a3a6-742a0ac581c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f4:c6:06:28:f7:a7:ac:e7:f4:5c:d2:24:c0:b6:49:b0:5e: c2:60:92:33:83:40:7d:bf:58:72:71:6d:b9:90:7d:42:b8:04: eb:7f:16:83:d2:a9:57:14:80:03:17:7f:f0:be:1c:0a:8a:c8: 78:f4:e8:7a:50:fb:87:11:9a:89:0b:9a:bb:14:60:32:89:0d: 5e:48:f5:e7:09:4b:b2:2e:15:6d:1a:6b:3a:15:b8:bc:c1:4c: 0a:a1:6e:9b:32:c0:5d:db:9d:be:80:15:63:1b:03:ca:1f:f6: 02:23:4b:46:c1:9d:0e:e5:50:93:cb:ca:0d:ef:96:54:25:61: bf:94:ee:b5:38:c3:56:12:5a:f3:4f:b2:af:a6:91:05:fb:04: cb:6b:af:33:73:82:e0:2f:e7:0d:68:f7:83:ab:4b:b4:df:45: fd:36:ca:98:09:ce:da:08:e8:b4:cd:7e:a8:00:eb:43:7c:a0: 2a:b4:50:be:0f:d1:47:3d:ed:68:c5:4b:fd:c7:ca:76:48:32: f2:57:92:de:6b:a6:a4:d5:1e:8a:93:a6:a0:6d:bb:d6:f1:d5: 75:9c:d8:34:aa:6b:a5:24:60:1e:d4:01:a2:f2:d0:4a:3e:3b: 68:60:53:f1:65:d5:5c:43:39:f4:9a:7a:52:28:8b:12:c7:50: 7e:08:86:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajn12bx2PnYBJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NzFhY2RiNDYtYmI4NS00MmRkLTgzNzUtYmFjNzk4ZDkxNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyTPpmXlKa3Y4Apo6fwwdJRYR/qEjhbj2Y1o HRqiJXPablfhQIDTfYpB28uNLW+sWdkKYIK9KSFT+EXro+uhn4S13/qJEtlwtnbA uikJgn3I2zU9I7QE34lDiyDXi4Xv4RhgXb2IDtbz33kQKyNc5SfEte6vUEExD6WH xxOC6E0jz4Vqq1wZi8vtvegRfsKfjMapr6F/CQynrbxJvAmweAxeaofd4mDRx9Dp ds/0cm5zrlj3BM2tMjLhnWpnmpROHvSUPC7vq/Rs2gqbtcdSmls0RO0DC3XbpS0r fMQlsyHynp4xOyO9Ha0tdPFl545VowdocyIwdzkpBi58L2DGmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSUSORtCah2JrlkBMosiLnI/8bwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzVjODRlZjctMWI5YS0z MTMyLWEzYTYtNzQyYTBhYzU4MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl9VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj0xgYo96es5/Rc0iTAtkmwXsJgkjODQH2/WHJxbbmQfUK4BOt/FoPS qVcUgAMXf/C+HAqKyHj06HpQ+4cRmokLmrsUYDKJDV5I9ecJS7IuFW0aazoVuLzB TAqhbpsywF3bnb6AFWMbA8of9gIjS0bBnQ7lUJPLyg3vllQlYb+U7rU4w1YSWvNP sq+mkQX7BMtrrzNzguAv5w1o94OrS7TfRf02ypgJztoI6LTNfqgA60N8oCq0UL4P 0Uc97WjFS/3HynZIMvJXkt5rpqTVHoqTpqBtu9bx1XWc2DSqa6UkYB7UAaLy0Eo+ O2hgU/Fl1VxDOfSaelIoixLHUH4IhnQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:35 2026 by rpki-client