$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd3f7730-9306-3d36-9fd7-79ecad815958.roa File: cd3f7730-9306-3d36-9fd7-79ecad815958.roa (raw, json) Hash identifier: 4J0E3w84ruP4SZ8l8jD9XFBajsTz4gsqfvh/zMshcD8= Subject key identifier: 44:EE:C5:F1:79:04:E7:A8:81:50:81:E0:A7:D8:FF:47:5B:05:14:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A69724C97B9EAF79E9040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd3f7730-9306-3d36-9fd7-79ecad815958.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 66.255.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:69:72:4c:97:b9:ea:f7:9e:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fe8180c5-7155-4f04-abd4-3b6313935aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5b:09:0f:c1:e4:12:dc:24:7d:6e:d8:06:78: 26:ba:f7:06:16:00:50:83:bd:fe:ad:ff:fa:9d:14: 9d:f5:81:8a:35:53:dc:ee:af:16:8e:d0:06:a6:ba: 39:ac:45:fc:f8:57:ae:9c:e2:f0:a6:6d:44:91:1e: d2:9a:a4:49:e8:be:7a:a1:c5:9c:87:13:0f:bc:83: a5:ea:d8:69:ef:98:32:a6:7b:b3:6d:a2:ed:95:7a: 3f:a5:a3:af:d0:08:6a:a7:50:74:54:4c:f5:6b:63: f8:43:8d:13:40:88:6f:ee:c6:12:1f:04:8b:bf:41: 4e:e9:fe:f3:88:f9:9b:99:3a:af:9a:a9:31:dd:fe: ac:c6:ec:e7:fc:9f:27:ac:31:d4:e3:ba:75:90:2e: 92:ee:ca:8e:02:1f:e6:98:65:dc:8c:55:2f:f9:91: 05:9f:3d:1f:b3:ed:46:9b:2a:d6:97:66:76:42:1f: c7:35:e7:2e:20:0f:4b:24:19:f3:c7:d2:49:05:f6: 44:5a:95:a2:e0:36:86:de:9e:62:e0:ab:28:54:64: 16:85:aa:f4:52:e6:ec:31:12:82:7b:98:1f:a9:f8: 94:d4:52:f0:06:d5:6d:91:94:a4:27:5d:65:d6:63: 8b:cc:bf:2a:16:31:ad:33:d0:d4:d5:3d:16:d1:16: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EE:C5:F1:79:04:E7:A8:81:50:81:E0:A7:D8:FF:47:5B:05:14:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd3f7730-9306-3d36-9fd7-79ecad815958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.255.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:dc:49:23:ea:81:39:8f:e1:48:77:4d:63:ff:34:f2:1a:55: 4e:a8:a3:db:e2:93:af:14:b1:a1:0a:66:e0:bb:fe:c6:80:48: 69:98:75:9b:fb:74:65:8a:eb:fa:bf:8f:28:4f:a3:69:c2:e7: ae:85:9f:5d:dd:58:35:90:67:c3:8c:cc:29:fa:0c:11:05:59: 91:ea:97:1f:41:ec:e0:da:06:c3:f5:4e:0e:b5:39:00:88:ba: c3:ea:7b:0c:5a:ff:2a:e3:8a:5c:98:fd:1f:ec:cd:8f:cd:eb: 5c:ca:ba:3a:95:ec:f1:de:69:ab:b8:7e:ea:a2:bc:fa:ab:39: ad:5b:0b:e1:65:bf:56:49:9c:93:27:94:fe:6d:48:9e:5f:49: b3:ae:51:a7:dc:5e:8c:46:77:24:b8:fe:7c:6b:ce:b1:58:fc: 01:a6:94:75:3f:00:f6:61:26:ec:ff:32:2a:a4:4c:3e:31:40: 7d:0c:4e:af:e9:21:c9:cf:00:76:98:cf:1c:7b:3c:83:8f:e8: 2b:7d:f9:4f:a4:f2:ff:79:f0:15:a5:25:72:41:a1:b5:0e:2d: 90:00:31:b5:4b:f5:ce:d4:34:ac:39:6d:b8:21:5a:10:29:3d: ec:48:e3:df:91:16:b3:42:55:12:b7:9c:e0:cd:2b:35:6b:56: 98:ff:23:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmlyTJe56veekEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmU4MTgwYzUtNzE1NS00ZjA0LWFiZDQtM2I2MzEzOTM1YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFsJD8HkEtwkfW7YBngmuvcGFgBQg73+rf/6 nRSd9YGKNVPc7q8WjtAGpro5rEX8+FeunOLwpm1EkR7SmqRJ6L56ocWchxMPvIOl 6thp75gypnuzbaLtlXo/paOv0Ahqp1B0VEz1a2P4Q40TQIhv7sYSHwSLv0FO6f7z iPmbmTqvmqkx3f6sxuzn/J8nrDHU47p1kC6S7sqOAh/mmGXcjFUv+ZEFnz0fs+1G myrWl2Z2Qh/HNecuIA9LJBnzx9JJBfZEWpWi4DaG3p5i4KsoVGQWhar0UubsMRKC e5gfqfiU1FLwBtVtkZSkJ11l1mOLzL8qFjGtM9DU1T0W0RZTGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETuxfF5BOeogVCB4KfY/0dbBRS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2QzZjc3MzAtOTMwNi0z ZDM2LTlmZDctNzllY2FkODE1OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQv+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDcSSPqgTmP4Uh3TWP/NPIaVU6oo9vik68UsaEKZuC7/saASGmYdZv7 dGWK6/q/jyhPo2nC566Fn13dWDWQZ8OMzCn6DBEFWZHqlx9B7ODaBsP1Tg61OQCI usPqewxa/yrjilyY/R/szY/N61zKujqV7PHeaau4fuqivPqrOa1bC+Flv1ZJnJMn lP5tSJ5fSbOuUafcXoxGdyS4/nxrzrFY/AGmlHU/APZhJuz/MiqkTD4xQH0MTq/p IcnPAHaYzxx7PIOP6Ct9+U+k8v958BWlJXJBobUOLZAAMbVL9c7UNKw5bbghWhAp PexI49+RFrNCVRK3nODNKzVrVpj/I0E= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:35 2026 by rpki-client