$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa File: d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa (raw, json) Hash identifier: 1TPM6OQjDXBwTpctBFN2Ix+6M/uSRCJ9ejxJpYQ1FnM= Subject key identifier: 7C:A8:B7:E4:AA:DE:47:72:6D:56:F9:2C:AB:1A:91:C1:FD:F2:DE:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F9283DC40A6CA4F5EE4A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 174.131.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:92:83:dc:40:a6:ca:4f:5e:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=f04a23a3-c7d2-48b1-8dbe-fb19fc155f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fd:50:b0:83:95:de:1f:b6:64:17:b0:4a:94: bc:f1:dc:db:95:2a:9e:d7:83:7e:f2:f1:fb:74:b4: 53:1f:8d:38:eb:1e:9e:6d:d9:87:8c:da:cd:f9:b9: d1:bb:42:19:6b:ff:ce:f4:bd:86:cb:be:7a:e2:53: 86:9a:fd:94:28:5c:6e:a8:bd:98:50:62:08:39:bd: ba:d9:ed:f4:71:98:2a:f5:30:50:2a:f6:16:5f:b3: 7b:bd:16:9e:23:5d:8e:2a:0a:8d:d0:65:7d:04:10: a4:31:2c:98:91:75:f6:42:05:ef:55:c4:03:2f:d4: 1a:b0:7c:66:72:e8:fb:c5:8e:d6:88:c4:07:99:9f: 02:28:a1:88:66:e1:7e:40:fa:9a:30:5e:17:ed:4b: 26:42:f8:80:69:1e:59:5c:25:b1:11:b7:6a:0a:bc: 1a:c3:b2:07:0e:53:c3:ee:61:19:d2:fe:95:82:f3: aa:97:8e:b7:36:44:19:ec:1f:a5:2b:a9:a2:8a:8a: 19:ea:6d:ff:52:69:96:df:65:61:b1:b9:77:11:16: f1:26:70:42:4b:48:9e:6a:e6:ad:24:69:d5:a2:c9: f6:4c:1f:43:ec:f9:1c:7c:0d:1e:49:4a:2d:ce:93: 5c:17:94:77:04:c0:4a:2d:04:b3:75:2a:16:24:9c: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A8:B7:E4:AA:DE:47:72:6D:56:F9:2C:AB:1A:91:C1:FD:F2:DE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a7:97:d8:f6:90:71:d6:43:39:04:72:ac:9e:93:28:cc:6a: 7f:2b:ef:c6:80:52:25:0f:88:c0:15:86:0a:5d:ca:bf:31:14: f2:61:a8:24:f6:64:a2:5b:08:89:50:2c:b6:45:33:b6:70:5a: 61:db:53:56:2d:e4:d5:57:96:14:67:7a:e5:e9:ad:13:10:a9: 36:6a:7f:ca:c2:9a:e0:9e:1f:07:95:f9:3b:dd:3e:a7:1e:00: 3b:fa:c2:20:44:7c:19:df:6d:56:36:b3:0d:d6:2d:e9:1b:14: 25:e7:26:ec:98:c6:5b:a2:ec:47:50:eb:be:a7:05:c1:48:b2: 6c:c9:14:8a:02:a1:53:cb:3a:2f:41:07:05:e8:7b:0b:35:b2: 72:07:dc:fc:f7:35:47:23:22:7c:04:85:da:78:be:ba:f7:b2: 77:17:77:56:14:61:4e:e1:18:08:3d:aa:1f:fa:6c:66:6f:34: 5a:e3:27:db:2d:79:ee:4b:8d:bc:63:73:d4:7b:a5:72:ca:9c: 3d:ff:48:31:da:62:4e:e0:55:67:b3:ed:51:8d:26:01:fa:a0: 9d:d3:69:d1:a0:aa:10:a7:c8:1f:4e:4e:21:7a:fd:f9:15:19: df:78:ab:dc:ef:51:1a:d2:f4:a0:ce:60:f4:94:a8:4f:b1:a3: 0c:64:ff:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5KD3ECmyk9e5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZjA0YTIzYTMtYzdkMi00OGIxLThkYmUtZmIxOWZjMTU1ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/1QsIOV3h+2ZBewSpS88dzblSqe14N+8vH7 dLRTH4046x6ebdmHjNrN+bnRu0IZa//O9L2Gy7564lOGmv2UKFxuqL2YUGIIOb26 2e30cZgq9TBQKvYWX7N7vRaeI12OKgqN0GV9BBCkMSyYkXX2QgXvVcQDL9QasHxm cuj7xY7WiMQHmZ8CKKGIZuF+QPqaMF4X7UsmQviAaR5ZXCWxEbdqCrwaw7IHDlPD 7mEZ0v6VgvOql463NkQZ7B+lK6miiooZ6m3/UmmW32Vhsbl3ERbxJnBCS0ieauat JGnVosn2TB9D7PkcfA0eSUotzpNcF5R3BMBKLQSzdSoWJJx2TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyot+Sq3kdybVb5LKsakcH98t5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVmN2EzNjYtZWNmOS0z ZTBhLWFhNmQtNDU0MWJhODllMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOnl9j2kHHWQzkEcqyekyjMan8r78aAUiUPiMAVhgpdyr8xFPJhqCT2 ZKJbCIlQLLZFM7ZwWmHbU1Yt5NVXlhRneuXprRMQqTZqf8rCmuCeHweV+TvdPqce ADv6wiBEfBnfbVY2sw3WLekbFCXnJuyYxlui7EdQ676nBcFIsmzJFIoCoVPLOi9B BwXoews1snIH3Pz3NUcjInwEhdp4vrr3sncXd1YUYU7hGAg9qh/6bGZvNFrjJ9st ee5Ljbxjc9R7pXLKnD3/SDHaYk7gVWez7VGNJgH6oJ3TadGgqhCnyB9OTiF6/fkV Gd94q9zvURrS9KDOYPSUqE+xowxk/4M= -----END CERTIFICATE-----Generated at Thu Mar 26 12:18:46 2026 by rpki-client