$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa File: db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa (raw, json) Hash identifier: xEEa14podSrHyxDHFhrl0Upp7Vqh5STS3dCERDH5iT0= Subject key identifier: DF:5A:E9:A8:C7:DD:44:14:A5:62:44:DC:35:28:92:8B:E0:F4:3F:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6A3A5C699913A0211500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 69.40.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6a:3a:5c:69:99:13:a0:21:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f2392ec5-34e6-4832-91b6-6885f526ce9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:7b:c2:8f:7d:cd:76:5a:27:1c:24:9b:63: 52:01:65:d8:63:04:25:f5:c2:1d:8f:60:56:0b:e0: 3f:b8:65:28:7b:67:1b:ad:d0:e9:2f:d3:63:12:60: 37:b0:f0:d8:ba:d3:67:2c:77:24:91:03:25:86:e4: 22:ee:22:63:b2:c2:50:92:72:73:90:81:6f:0b:da: 29:c0:5b:56:37:e7:99:e7:7c:e4:7e:17:0d:4d:ba: ce:2d:63:46:fe:a4:14:d7:7a:b1:82:08:74:20:d7: bc:b4:cf:30:ea:46:12:03:c7:58:e4:58:44:fb:36: c6:aa:df:98:cc:b3:62:bb:ee:f4:21:02:cf:26:4f: 16:30:0c:54:e0:ce:37:3b:78:a0:c9:4c:5b:f5:ba: bd:af:63:25:81:8e:8b:3d:2d:60:3e:8c:c8:9a:74: f6:1a:aa:4c:5d:09:8f:31:f9:0d:80:47:1a:30:77: 2b:3f:72:1d:bf:59:9b:2f:69:36:da:01:0a:5a:ec: c4:7e:27:75:bd:2a:52:ff:88:d7:3e:2c:73:92:ac: 3f:a4:f4:4b:29:b0:c1:59:26:a0:2c:fd:e9:1c:37: 6d:89:f4:6d:7f:e9:f3:41:d8:f9:51:86:61:df:c6: d0:a4:85:5a:1c:26:eb:d0:a9:a4:1d:5f:fa:9c:6d: 80:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5A:E9:A8:C7:DD:44:14:A5:62:44:DC:35:28:92:8B:E0:F4:3F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ff:4b:b0:85:41:d5:1e:23:21:a4:9d:88:c4:b9:4a:4f:c7: 42:dd:0f:38:ca:af:af:cf:cf:96:73:ec:b0:9b:cd:83:5f:37: a3:c4:56:d0:fe:6a:16:44:cc:4e:fd:62:84:cd:4e:ff:be:e9: e8:81:39:f2:79:7a:90:6b:6c:e8:5b:fa:65:59:12:56:e0:54: c1:ca:31:88:71:59:da:27:32:0b:cd:4d:b4:96:f3:bc:1d:80: 42:6f:f6:85:c4:84:7b:59:78:b3:38:53:d3:74:a7:d1:e0:f8: 8b:ee:80:a5:cd:01:2f:2f:d5:f2:9c:9c:68:26:64:f2:58:07: c9:0c:1c:f2:a1:9f:10:6e:37:c9:71:e9:17:37:26:b0:bb:a0: 8b:43:3a:16:df:db:68:f7:94:6d:10:93:4b:f1:12:51:4a:dc: 60:b6:5d:53:8d:14:42:ae:c2:2b:a9:2d:ae:ba:39:9b:bc:38: 5d:7a:52:ff:39:14:2b:fb:c2:fa:37:df:d9:d0:83:49:dd:29: ea:96:a3:1b:81:b8:94:db:3f:cd:44:ec:68:8d:56:62:35:95: a9:0d:53:de:f7:25:ae:09:52:59:a5:de:01:ce:5a:db:55:be: d2:fd:20:4b:e5:51:b6:3e:68:d5:b9:0d:ee:75:a3:cf:b4:ef: 44:87:14:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmo6XGmZE6AhFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjIzOTJlYzUtMzRlNi00ODMyLTkxYjYtNjg4NWY1MjZjZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOx7wo99zXZaJxwkm2NSAWXYYwQl9cIdj2BW C+A/uGUoe2cbrdDpL9NjEmA3sPDYutNnLHckkQMlhuQi7iJjssJQknJzkIFvC9op wFtWN+eZ53zkfhcNTbrOLWNG/qQU13qxggh0INe8tM8w6kYSA8dY5FhE+zbGqt+Y zLNiu+70IQLPJk8WMAxU4M43O3igyUxb9bq9r2MlgY6LPS1gPozImnT2GqpMXQmP MfkNgEcaMHcrP3Idv1mbL2k22gEKWuzEfid1vSpS/4jXPixzkqw/pPRLKbDBWSag LP3pHDdtifRtf+nzQdj5UYZh38bQpIVaHCbr0KmkHV/6nG2ATQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9a6ajH3UQUpWJE3DUokovg9D82MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI5ZGY4YWItMmUwZS0z ZWEyLTlhNzktMDg0ODhjYjAwMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3/S7CFQdUeIyGknYjEuUpPx0LdDzjKr6/Pz5Zz7LCbzYNfN6PEVtD+ ahZEzE79YoTNTv++6eiBOfJ5epBrbOhb+mVZElbgVMHKMYhxWdonMgvNTbSW87wd gEJv9oXEhHtZeLM4U9N0p9Hg+IvugKXNAS8v1fKcnGgmZPJYB8kMHPKhnxBuN8lx 6Rc3JrC7oItDOhbf22j3lG0Qk0vxElFK3GC2XVONFEKuwiupLa66OZu8OF16Uv85 FCv7wvo339nQg0ndKeqWoxuBuJTbP81E7GiNVmI1lakNU973Ja4JUlml3gHOWttV vtL9IEvlUbY+aNW5De51o8+070SHFMU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:20:57 2026 by rpki-client