$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed909b5a-d146-34b9-9e13-db4b2cd8b738.roa File: ed909b5a-d146-34b9-9e13-db4b2cd8b738.roa (raw, json) Hash identifier: IazHHXLH7rkYYwXkWvP0PNpD02hh934T70YFL34JyhY= Subject key identifier: 47:C3:05:69:B4:7C:6B:8A:3A:A9:03:5D:67:AE:0D:AF:D6:48:FF:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A54C55E35880B29138E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed909b5a-d146-34b9-9e13-db4b2cd8b738.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 174.131.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:54:c5:5e:35:88:0b:29:13:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=5ac20538-85e9-40de-8e53-f8b06f6da687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:20:8d:71:23:32:76:69:50:a7:ba:c1:5f: 74:4f:db:bc:4c:60:0e:bb:3b:a6:2b:42:ad:76:8e: 0c:b0:bd:b6:d2:5a:1e:7b:81:11:09:59:fc:ba:54: d4:3c:bc:18:0f:c9:7f:99:13:da:cb:73:80:ed:f2: 50:f7:6e:a2:09:1b:b5:63:97:06:c4:c6:e7:b2:cd: 9c:d5:6e:dc:be:9d:2a:75:e4:f1:a9:d6:cf:a1:cb: ee:70:6e:11:82:de:b9:ff:7d:8b:96:5f:7b:96:3a: dd:fc:a2:32:3d:ff:d6:8b:8e:7d:b0:c1:a0:d4:40: 43:b2:84:8e:c8:9f:3a:96:a7:74:80:32:f7:c3:e9: 8b:73:df:19:9c:fb:1e:33:53:19:32:cf:e1:74:ae: 6a:2b:7b:58:fa:57:92:6f:f8:16:23:00:56:f9:60: 29:a7:b6:eb:0c:55:5c:e3:04:90:58:3a:ce:a4:0f: 2d:ce:1c:cb:77:e6:a6:a0:0e:8d:60:f5:48:34:d3: e7:dd:27:d5:d4:be:b6:3b:e7:a0:43:e3:0e:d6:17: 70:68:2d:54:d7:1f:9f:d6:63:a6:eb:5e:82:ef:aa: e3:49:35:0b:42:a4:d1:c5:f6:d4:90:56:bc:3d:0d: ca:4e:da:ed:08:3b:f6:d8:42:04:4a:7b:87:a2:b9: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C3:05:69:B4:7C:6B:8A:3A:A9:03:5D:67:AE:0D:AF:D6:48:FF:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed909b5a-d146-34b9-9e13-db4b2cd8b738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7a:aa:50:e1:44:e5:70:ab:8c:21:f6:81:89:4c:32:6a:65: 5c:02:8c:cd:34:70:a0:8d:38:01:10:4b:1d:25:fa:73:0b:d0: 93:d5:30:5d:0d:cf:b1:a7:d3:ee:94:32:8f:11:70:29:f3:94: 6d:97:fc:ea:56:07:94:2b:00:7d:df:fe:8f:0f:5e:60:25:fc: 7e:fc:54:fe:13:49:d2:85:0d:c6:bc:26:90:3d:65:78:74:da: 22:08:1b:93:c7:f1:ad:8a:1b:6b:fe:32:d8:65:55:77:aa:6e: b0:2a:48:fd:3c:0e:04:b4:96:56:21:36:0a:37:34:d6:ef:f0: 90:cb:6e:e2:12:df:99:43:9b:0f:0e:20:fd:dd:7a:c1:63:8f: 4d:c7:56:f1:65:33:26:93:b7:7a:3d:97:98:8c:7c:4b:c1:2a: 8a:ee:55:4b:dc:22:2b:e9:25:90:3f:e5:1a:0b:a0:e8:2c:e3: 1c:d5:0a:1d:80:9c:af:e5:1e:4c:2d:1f:1c:fa:be:31:ef:2a: 75:53:01:e6:27:f1:79:e2:75:e8:7b:17:1e:41:af:d7:96:ff: 1d:a2:26:d8:b6:a2:8f:8b:f3:3f:51:e7:62:42:41:d1:3c:fc: e3:15:31:4c:70:90:01:15:4a:60:87:a8:9c:d3:46:f2:3e:3e: 79:c4:0d:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alTFXjWICykTjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NWFjMjA1MzgtODVlOS00MGRlLThlNTMtZjhiMDZmNmRhNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7sgjXEjMnZpUKe6wV90T9u8TGAOuzumK0Kt do4MsL220loee4ERCVn8ulTUPLwYD8l/mRPay3OA7fJQ926iCRu1Y5cGxMbnss2c 1W7cvp0qdeTxqdbPocvucG4Rgt65/32Lll97ljrd/KIyPf/Wi459sMGg1EBDsoSO yJ86lqd0gDL3w+mLc98ZnPseM1MZMs/hdK5qK3tY+leSb/gWIwBW+WApp7brDFVc 4wSQWDrOpA8tzhzLd+amoA6NYPVINNPn3SfV1L62O+egQ+MO1hdwaC1U1x+f1mOm 616C76rjSTULQqTRxfbUkFa8PQ3KTtrtCDv22EIESnuHorl9oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfDBWm0fGuKOqkDXWeuDa/WSP+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWQ5MDliNWEtZDE0Ni0z NGI5LTllMTMtZGI0YjJjZDhiNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx6qlDhROVwq4wh9oGJTDJqZVwCjM00cKCNOAEQSx0l+nML0JPVMF0N z7Gn0+6UMo8RcCnzlG2X/OpWB5QrAH3f/o8PXmAl/H78VP4TSdKFDca8JpA9ZXh0 2iIIG5PH8a2KG2v+MthlVXeqbrAqSP08DgS0llYhNgo3NNbv8JDLbuIS35lDmw8O IP3desFjj03HVvFlMyaTt3o9l5iMfEvBKoruVUvcIivpJZA/5RoLoOgs4xzVCh2A nK/lHkwtHxz6vjHvKnVTAeYn8Xnideh7Fx5Br9eW/x2iJti2oo+L8z9R52JCQdE8 /OMVMUxwkAEVSmCHqJzTRvI+PnnEDbs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:02:49 2026 by rpki-client