$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa File: ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa (raw, json) Hash identifier: wVi0tYppGokB07TSfLLbPwdauMMjadxRiMGj9Tsw2FE= Subject key identifier: 5A:9A:BD:D2:14:D6:53:BE:EA:C5:40:FB:01:9A:28:C6:86:94:CA:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9F90C4DFA95F9B884000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.236.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9f:90:c4:df:a9:5f:9b:88:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=90d3d635-509b-4e75-8921-24560b0e8d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:29:a1:cb:ee:d0:03:db:6f:43:9b:32:8d:a8: b5:40:7a:94:ec:0a:82:de:36:6e:fc:13:b7:dd:af: cc:e9:c7:65:0a:29:46:f9:77:72:44:bd:af:21:6a: 74:54:ec:0b:9b:43:74:93:5f:21:b5:56:f3:cf:c6: a0:6e:8b:55:be:e5:28:15:72:cc:90:1e:0b:09:4e: 43:29:c2:76:b0:71:5e:89:4e:30:21:8e:3b:f9:fc: cd:6a:64:07:67:ed:1e:3b:23:14:6d:a8:e6:16:b3: fc:c6:b3:5c:ae:91:77:74:5c:7d:ff:6b:a9:99:c3: 82:03:d1:3a:da:5b:a6:c1:ba:a6:f8:82:94:30:2b: ea:f5:53:e8:61:e9:ba:22:8e:8a:50:e6:9f:b9:8f: 86:93:a4:a2:9c:2c:74:89:f1:12:22:f7:a1:fd:31: 6e:d5:0e:99:29:7d:b4:ed:82:0e:2c:ae:ee:8c:56: 95:c9:ed:99:e2:05:08:f3:ad:0f:cc:4d:07:d3:ce: 00:78:35:6a:2a:0f:12:1b:97:2f:dc:f4:16:3d:35: e0:9a:04:78:3a:21:07:0e:ff:48:b0:17:50:07:16: bd:a3:c7:f1:87:ed:6b:6e:c7:1c:63:2c:f3:65:b9: bf:d7:74:db:2c:6b:6d:77:35:37:62:8c:df:16:fa: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9A:BD:D2:14:D6:53:BE:EA:C5:40:FB:01:9A:28:C6:86:94:CA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.236.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d2:91:cd:4a:e2:69:8b:ef:47:6f:be:2b:5c:31:3b:a3:03: f9:b5:76:b8:64:52:e9:1d:b1:4d:36:c4:4f:00:52:a0:d8:3d: c8:37:96:05:e6:e2:c1:b8:f4:e2:81:ef:83:fb:23:dd:94:75: 8f:a8:77:fd:c0:17:07:73:a1:5c:f3:d7:9c:49:04:16:24:55: b9:20:cc:92:c0:4f:52:6d:2e:23:d8:6c:ec:b6:55:72:23:c8: b3:0f:50:bd:05:04:37:ec:28:1d:0e:8c:29:19:bc:a6:23:aa: 4b:28:dd:fd:a1:c7:85:10:fb:d0:da:ac:5c:8e:7f:0e:8b:74: 1a:a9:97:89:d3:83:7a:a7:a0:3f:cc:1a:80:71:ea:83:76:5f: 8a:bb:35:13:16:ff:b3:bc:b7:c3:05:bd:19:c9:5b:b2:cd:18: 00:a8:b5:32:7d:ac:45:81:3c:58:f4:74:e4:26:4b:11:6b:f7: 84:c7:f8:14:6e:ba:22:19:02:ce:96:ab:38:66:d3:c5:ce:4f: f7:d6:70:62:ac:29:ea:24:66:96:4d:f6:b5:91:61:7c:5d:18: 08:9e:84:bf:e8:29:16:8b:80:86:3a:f9:8a:48:7f:01:48:2d: b1:da:17:76:6a:d0:e4:b7:54:76:2e:ff:ef:73:74:67:13:9d: 77:b2:48:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCp+QxN+pX5uIQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTBkM2Q2MzUtNTA5Yi00ZTc1LTg5MjEtMjQ1NjBiMGU4ZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkimhy+7QA9tvQ5syjai1QHqU7AqC3jZu/BO3 3a/M6cdlCilG+XdyRL2vIWp0VOwLm0N0k18htVbzz8agbotVvuUoFXLMkB4LCU5D KcJ2sHFeiU4wIY47+fzNamQHZ+0eOyMUbajmFrP8xrNcrpF3dFx9/2upmcOCA9E6 2lumwbqm+IKUMCvq9VPoYem6Io6KUOafuY+Gk6SinCx0ifESIveh/TFu1Q6ZKX20 7YIOLK7ujFaVye2Z4gUI860PzE0H084AeDVqKg8SG5cv3PQWPTXgmgR4OiEHDv9I sBdQBxa9o8fxh+1rbsccYyzzZbm/13TbLGttdzU3YozfFvoJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqavdIU1lO+6sVA+wGaKMaGlMp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E1YmY1YjEtNjE3Yy0z ZGM2LWIzYTgtZDQ5M2M0YTA3MzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OxVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDSkc1K4mmL70dvvitcMTujA/m1drhkUukdsU02xE8AUqDYPcg3lgXm 4sG49OKB74P7I92UdY+od/3AFwdzoVzz15xJBBYkVbkgzJLAT1JtLiPYbOy2VXIj yLMPUL0FBDfsKB0OjCkZvKYjqkso3f2hx4UQ+9DarFyOfw6LdBqpl4nTg3qnoD/M GoBx6oN2X4q7NRMW/7O8t8MFvRnJW7LNGACotTJ9rEWBPFj0dOQmSxFr94TH+BRu uiIZAs6Wqzhm08XOT/fWcGKsKeokZpZN9rWRYXxdGAiehL/oKRaLgIY6+YpIfwFI LbHaF3Zq0OS3VHYu/+9zdGcTnXeySA8= -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:01 2026 by rpki-client