$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa File: deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa (raw, json) Hash identifier: 0e+92RhZhBMMsC/tVNsZNDIfkI2XQ4+oueDXIjOlMrE= Subject key identifier: F0:F1:E2:A0:29:3E:77:51:6F:D2:47:B4:D2:86:D1:DC:12:BC:D8:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F91497949F8A98C7A8380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 151.213.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:91:49:79:49:f8:a9:8c:7a:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=3ed44243-72f2-4202-88b9-cfe1c95bfe24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:ca:de:0c:38:77:5f:21:6d:65:70:12:c9: 30:a0:7a:4e:58:0f:0f:b6:f0:4e:ff:6d:8f:d0:8d: da:a8:74:c8:69:20:16:c6:9d:30:6c:ff:fe:39:24: 63:5e:01:3f:90:b8:20:54:04:f7:a4:54:c9:83:95: ed:d7:57:ae:56:6e:74:52:c7:55:83:b4:fe:2a:26: 84:bd:be:2a:6b:d7:a2:cd:2b:24:71:0d:72:aa:b2: 86:26:3e:d6:0c:25:5b:94:65:cb:23:e3:1c:c9:09: f3:10:e8:3c:b4:5d:35:cc:19:f8:86:4d:7b:52:ee: 51:e7:d8:cd:53:ec:36:c9:97:dc:28:f2:97:11:5d: 71:d6:ee:cd:d1:b2:fc:72:47:06:c1:75:45:f3:50: 06:a2:58:b9:7c:ce:b3:31:70:43:12:24:de:62:5b: e5:ab:7c:b7:e9:c4:66:f0:e0:20:97:02:a8:68:b0: ee:24:87:cc:18:b1:f9:ee:d5:06:65:93:53:4c:7d: e5:0e:ed:c8:2c:6e:cc:fa:e5:00:d8:b6:b2:5e:91: 7d:67:45:34:cc:9b:b0:02:ee:02:e7:aa:a6:d8:63: bb:8e:d5:6f:3d:2d:59:68:11:d0:9c:ae:e3:a1:bd: e3:3c:ab:6b:52:1c:27:21:6d:16:69:1b:07:83:fd: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:E2:A0:29:3E:77:51:6F:D2:47:B4:D2:86:D1:DC:12:BC:D8:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8b:fe:f9:b9:a6:49:2e:7e:a3:f3:9b:6b:c9:f5:e7:f1:27: b7:1f:88:d2:b6:6b:4f:56:00:51:0d:17:56:d2:f4:d7:99:d0: d7:48:58:71:e9:f7:b9:a0:7f:c1:14:15:fe:13:50:48:98:9f: e4:64:0c:d6:fa:5a:24:47:0f:12:49:1b:24:22:36:ab:d0:ea: 29:18:c4:eb:cb:97:d8:2d:68:0a:e7:1a:f5:66:91:9c:b4:91: 45:f3:9c:82:79:59:b5:6c:42:38:fb:fe:0e:c4:eb:15:c5:88: a5:99:d1:cb:ac:56:cd:e2:d2:62:31:b8:1b:72:9f:b5:6c:61: 29:b2:d5:d2:7d:fa:34:7f:94:3b:7c:b9:08:c1:48:2b:1b:e0: 4d:e0:b6:c3:24:59:08:54:28:49:02:24:fc:f3:34:e3:2a:a2: 20:40:2d:52:0a:62:16:a2:02:f6:8b:02:6c:00:76:38:03:d1: a5:db:a5:a9:66:28:67:42:94:e8:1d:7d:54:8b:95:eb:09:77: f0:0b:6e:42:f9:ef:71:7c:e2:2b:b2:08:89:e6:04:26:16:3a: ec:a5:92:e4:3a:fd:60:b7:8f:73:05:0c:72:1f:ce:47:13:f0: c4:7a:7e:78:2f:f2:bf:2e:57:ea:e1:d6:3b:58:6e:fa:66:3f: 2b:2c:ae:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5FJeUn4qYx6g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk M2VkNDQyNDMtNzJmMi00MjAyLTg4YjktY2ZlMWM5NWJmZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipfK3gw4d18hbWVwEskwoHpOWA8PtvBO/22P 0I3aqHTIaSAWxp0wbP/+OSRjXgE/kLggVAT3pFTJg5Xt11euVm50UsdVg7T+KiaE vb4qa9eizSskcQ1yqrKGJj7WDCVblGXLI+McyQnzEOg8tF01zBn4hk17Uu5R59jN U+w2yZfcKPKXEV1x1u7N0bL8ckcGwXVF81AGoli5fM6zMXBDEiTeYlvlq3y36cRm 8OAglwKoaLDuJIfMGLH57tUGZZNTTH3lDu3ILG7M+uUA2LayXpF9Z0U0zJuwAu4C 56qm2GO7jtVvPS1ZaBHQnK7job3jPKtrUhwnIW0WaRsHg/04QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDx4qApPndRb9JHtNKG0dwSvNjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGViNWRjNTYtYTRjZC0z ZWZhLTkxYmQtNDk2YzBjZDUwYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWL/vm5pkkufqPzm2vJ9efxJ7cfiNK2a09WAFENF1bS9NeZ0NdIWHHp 97mgf8EUFf4TUEiYn+RkDNb6WiRHDxJJGyQiNqvQ6ikYxOvLl9gtaArnGvVmkZy0 kUXznIJ5WbVsQjj7/g7E6xXFiKWZ0cusVs3i0mIxuBtyn7VsYSmy1dJ9+jR/lDt8 uQjBSCsb4E3gtsMkWQhUKEkCJPzzNOMqoiBALVIKYhaiAvaLAmwAdjgD0aXbpalm KGdClOgdfVSLlesJd/ALbkL573F84iuyCInmBCYWOuylkuQ6/WC3j3MFDHIfzkcT 8MR6fngv8r8uV+rh1jtYbvpmPyssrsI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:34 2026 by rpki-client