$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa File: d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa (raw, json) Hash identifier: 3C5U6ajbOGIkC+9NVX43HUYrDN/x0xXv/z/XqRhvdQ0= Subject key identifier: F1:AC:0A:2C:05:AD:ED:33:0C:39:92:5B:25:97:C4:0A:A0:77:30:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9446DC2A97A3DD75E400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 64.61.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:94:46:dc:2a:97:a3:dd:75:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ade02ba3-adbd-4fd3-81cb-70cd777cf093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:ac:3a:6f:3b:6d:7e:f0:88:43:94:bf:aa: 64:e1:ce:25:fb:2e:c3:fe:dd:b8:a7:9d:11:b2:66: 8a:f4:15:1f:14:62:98:ba:06:5b:de:f4:62:f8:98: 52:9a:bf:60:7c:70:04:c3:dd:6e:21:42:4a:0d:0a: a5:8f:71:8f:8b:23:7f:1e:ae:cb:42:c4:bc:49:4d: 04:a6:77:62:7a:f2:19:a3:24:9c:7c:f3:e6:a4:1a: 5d:26:b7:37:e5:66:e2:91:0c:d2:c8:d1:fa:a3:2d: 69:be:17:66:ac:40:cf:41:69:a3:9b:af:e2:ca:99: 5a:18:f6:7f:3d:6b:51:4b:8e:c6:80:15:b5:6f:b9: 9e:50:52:2a:a2:d0:56:0c:b3:4a:87:28:d6:8e:20: 11:a0:63:db:9e:5a:6f:89:25:b8:a5:3e:45:92:9e: 54:30:d9:70:a0:66:01:0e:12:66:27:09:d3:64:7b: 63:7e:0c:13:a8:0f:3d:43:9c:d3:9f:ef:42:d4:1c: d2:90:55:29:35:76:c7:96:e6:48:66:3b:88:ab:82: 3a:95:8b:61:4c:23:e2:b9:fc:9f:9f:bf:43:a1:53: 8c:44:e8:ed:43:64:7d:c6:f2:d4:19:9e:24:b3:ed: 47:10:af:25:ca:b0:55:00:ca:56:69:27:41:ed:d4: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AC:0A:2C:05:AD:ED:33:0C:39:92:5B:25:97:C4:0A:A0:77:30:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.61.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:dc:bc:d5:97:d9:0f:05:86:d5:e8:67:c7:9d:82:c6:19:f1: 4a:dd:3c:04:23:02:92:57:4a:f3:e3:17:1c:ec:40:11:c6:a6: c7:3b:d8:70:94:7b:d3:43:aa:26:29:58:6e:59:ea:e1:b4:16: 0e:dd:0c:2b:6e:8a:68:2f:72:8e:8f:e2:05:22:47:94:34:1c: 9b:6d:cd:4b:78:1c:c3:8b:59:a1:df:48:eb:b5:b9:ca:d4:1d: e9:db:5c:49:e0:5f:dc:99:44:78:3d:ae:fe:8b:00:76:c1:a1: 9f:34:22:50:84:1f:7d:e5:01:a7:3a:f4:71:e1:e2:47:b0:af: a1:da:ac:0e:51:78:31:62:8a:00:e1:2f:8b:51:ee:a9:39:ae: 41:66:88:29:5d:6b:0a:5a:cf:1b:5f:ae:3a:04:8c:31:48:24: f4:c7:63:14:05:cb:7f:00:f2:78:31:e6:56:20:de:22:86:8c: ed:a0:6d:8e:f1:17:f9:3e:b4:db:70:68:88:99:f5:54:eb:57: dd:d2:23:b0:f6:94:33:04:e6:62:9b:62:73:81:c0:37:78:f2: d0:c1:b9:35:96:c2:bb:5d:54:53:4c:e4:8f:4d:81:ec:d1:cc: d4:17:23:da:26:91:b9:84:1a:84:44:58:28:cd:6b:ba:19:25: 07:0a:b4:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpRG3CqXo9115AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YWRlMDJiYTMtYWRiZC00ZmQzLTgxY2ItNzBjZDc3N2NmMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfqsOm87bX7wiEOUv6pk4c4l+y7D/t24p50R smaK9BUfFGKYugZb3vRi+JhSmr9gfHAEw91uIUJKDQqlj3GPiyN/Hq7LQsS8SU0E pndievIZoyScfPPmpBpdJrc35WbikQzSyNH6oy1pvhdmrEDPQWmjm6/iyplaGPZ/ PWtRS47GgBW1b7meUFIqotBWDLNKhyjWjiARoGPbnlpviSW4pT5Fkp5UMNlwoGYB DhJmJwnTZHtjfgwTqA89Q5zTn+9C1BzSkFUpNXbHluZIZjuIq4I6lYthTCPiufyf n79DoVOMROjtQ2R9xvLUGZ4ks+1HEK8lyrBVAMpWaSdB7dRwTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGsCiwFre0zDDmSWyWXxAqgdzCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDY4ZTRmOGYtYTU3ZC0z MjU5LWE2ZGUtYTQ3ZGFiM2ZlMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQD2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/cvNWX2Q8FhtXoZ8edgsYZ8UrdPAQjApJXSvPjFxzsQBHGpsc72HCU e9NDqiYpWG5Z6uG0Fg7dDCtuimgvco6P4gUiR5Q0HJttzUt4HMOLWaHfSOu1ucrU HenbXEngX9yZRHg9rv6LAHbBoZ80IlCEH33lAac69HHh4kewr6HarA5ReDFiigDh L4tR7qk5rkFmiCldawpazxtfrjoEjDFIJPTHYxQFy38A8ngx5lYg3iKGjO2gbY7x F/k+tNtwaIiZ9VTrV93SI7D2lDME5mKbYnOBwDd48tDBuTWWwrtdVFNM5I9NgezR zNQXI9omkbmEGoREWCjNa7oZJQcKtEc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:47 2026 by rpki-client