$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa File: d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa (raw, json) Hash identifier: ItNnyVEv1fyqz3dxf9j0UyrzSyvz/gxnh0Fv9/a0U94= Subject key identifier: 89:A0:31:6C:A7:E3:1A:C6:3B:CB:12:EC:4B:C5:51:7E:42:B0:26:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C5086969DAB1237BA53200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 207.10.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:08:69:69:da:b1:23:7b:a5:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=504e0039-5ef5-4f03-bb2f-04622297857c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:83:94:75:47:ee:8b:ed:ba:e0:27:0f:f0:a8: 95:d7:9c:cc:81:18:ee:db:0a:48:cc:b8:88:34:dd: e7:2e:4a:f9:60:13:12:a0:7d:21:5a:ce:df:27:4f: 99:77:b1:83:85:2b:e2:8b:8a:24:1f:9d:ee:74:76: 15:8e:9c:2c:c7:3f:1d:94:f3:4c:60:4f:02:6c:15: 58:a5:c0:82:20:af:8b:0b:92:94:10:48:24:fa:ec: d2:74:cf:a0:dd:e0:e7:66:f2:1c:ad:74:54:aa:da: 6b:81:eb:cb:8b:39:4e:25:8a:82:e6:1e:9c:47:ce: 9a:ec:55:5c:fb:56:38:dc:df:6b:23:2c:38:2c:cf: 43:0d:f4:f0:ce:c4:8f:e3:6b:7a:4c:0d:63:3b:d1: 37:d0:c5:87:8e:2e:17:43:ad:76:c5:67:d9:e5:c1: e3:78:e7:b0:0e:41:95:2b:06:e5:41:ea:00:7c:22: cf:6c:76:65:9d:1f:5a:eb:cc:50:37:3b:ba:ec:e3: 4e:d2:8b:8b:30:08:c9:e3:0b:af:01:81:17:6c:ca: 60:83:2f:98:98:b0:f5:80:d2:8f:8e:3e:98:1b:2f: 7c:7c:62:6f:f1:db:2c:34:69:b0:19:ee:f0:23:0d: bf:81:25:df:65:df:80:8a:22:de:67:bf:c8:37:f5: 7b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A0:31:6C:A7:E3:1A:C6:3B:CB:12:EC:4B:C5:51:7E:42:B0:26:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6cb49ca-84d1-32e7-be52-b7eb8af4494d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.10.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:19:46:24:bb:01:f8:56:0b:f7:8a:b0:c6:3b:6e:3f:80:45: 0e:61:c7:7e:45:3e:20:92:1a:b1:a7:29:87:05:9f:32:88:53: 4b:2b:77:f3:cf:44:0b:30:be:e5:8e:af:69:da:7b:11:cf:0c: 43:a5:6d:ff:ab:5b:62:d8:0b:a6:f2:55:2f:60:8c:9d:e9:d7: 29:4b:ab:83:a4:a6:80:fb:25:ae:8c:03:5f:21:d2:fc:f1:da: 94:ee:eb:a2:e4:9f:da:c4:b9:04:f4:ea:38:88:d6:fd:12:25: 5e:40:ce:a4:2f:ec:08:5a:92:11:4d:38:4d:ec:45:a1:07:13: 5a:21:9a:36:9a:1a:57:62:47:f4:82:38:0e:51:16:72:23:5a: 72:17:a9:5e:3e:1a:38:78:ac:1b:4b:15:43:97:0f:25:f9:30: db:4e:e1:d9:a4:a9:b8:e2:fd:b3:58:5e:e1:0d:bf:45:b0:6f: 31:4b:76:88:e5:52:08:91:bc:73:f6:e8:fb:10:79:74:56:b2: fd:03:8c:e4:64:76:0e:ad:b4:cb:d6:4f:f8:31:0a:f0:37:0e: 7e:ae:00:53:ba:7a:ec:af:ae:f5:12:fb:79:66:19:9d:43:c9: 21:27:9c:74:c5:38:13:27:f3:d8:d8:1e:b5:57:65:92:92:3c: 18:72:67:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQhpadqxI3ulMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NTA0ZTAwMzktNWVmNS00ZjAzLWJiMmYtMDQ2MjIyOTc4NTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YOUdUfui+264CcP8KiV15zMgRju2wpIzLiI NN3nLkr5YBMSoH0hWs7fJ0+Zd7GDhSvii4okH53udHYVjpwsxz8dlPNMYE8CbBVY pcCCIK+LC5KUEEgk+uzSdM+g3eDnZvIcrXRUqtprgevLizlOJYqC5h6cR86a7FVc +1Y43N9rIyw4LM9DDfTwzsSP42t6TA1jO9E30MWHji4XQ612xWfZ5cHjeOewDkGV KwblQeoAfCLPbHZlnR9a68xQNzu67ONO0ouLMAjJ4wuvAYEXbMpggy+YmLD1gNKP jj6YGy98fGJv8dssNGmwGe7wIw2/gSXfZd+AiiLeZ7/IN/V72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImgMWyn4xrGO8sS7EvFUX5CsCa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZjYjQ5Y2EtODRkMS0z MmU3LWJlNTItYjdlYjhhZjQ0OTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzwqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsZRiS7AfhWC/eKsMY7bj+ARQ5hx35FPiCSGrGnKYcFnzKIU0srd/PP RAswvuWOr2naexHPDEOlbf+rW2LYC6byVS9gjJ3p1ylLq4OkpoD7Ja6MA18h0vzx 2pTu66Lkn9rEuQT06jiI1v0SJV5AzqQv7AhakhFNOE3sRaEHE1ohmjaaGldiR/SC OA5RFnIjWnIXqV4+Gjh4rBtLFUOXDyX5MNtO4dmkqbji/bNYXuENv0WwbzFLdojl UgiRvHP26PsQeXRWsv0DjORkdg6ttMvWT/gxCvA3Dn6uAFO6euyvrvUS+3lmGZ1D ySEnnHTFOBMn89jYHrVXZZKSPBhyZ14= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:01 2026 by rpki-client