$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa File: f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa (raw, json) Hash identifier: vrKYvsDUKDkWXzvh+pQKLdRn5yVhDYU83VXQf2u023Y= Subject key identifier: C9:F2:BA:CE:F3:32:D4:E4:10:EF:6D:DC:37:9E:77:1C:83:08:9B:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7185DB7535655BC1871E Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.153.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:71:85:db:75:35:65:5b:c1:87:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9005f985-13de-4789-8309-d0ace5e205e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:96:93:73:c3:23:99:f0:0c:e3:2e:9a:4b: 65:00:9a:79:07:7d:c8:99:bd:75:92:50:09:a1:ce: 35:8e:2f:23:fe:28:a8:18:41:71:e8:4c:12:56:de: 28:23:ca:5c:bf:54:d9:79:7b:fe:d0:5d:cd:93:4a: cb:79:a6:12:81:af:0c:40:a2:d2:0d:a1:17:75:a2: 6b:ea:1f:fc:a0:5a:fa:58:04:0e:cf:9e:52:4d:5a: ba:13:89:b8:6f:16:77:9b:c8:75:db:10:ae:6e:18: 58:12:26:1c:0a:94:77:19:8c:ad:e0:93:25:e6:c5: 80:dc:b8:01:4f:20:e6:25:52:18:51:6a:f0:71:05: 94:d3:35:a5:08:eb:c5:7c:eb:e7:fb:ae:91:e1:18: 6a:91:44:2b:33:ab:e1:a4:a1:0a:68:68:2d:b9:fa: 99:d6:25:a9:62:0f:63:ac:94:ca:bb:d1:0e:2d:a7: 45:79:cb:12:f6:e4:07:01:28:9f:0e:5e:99:3f:59: d8:43:46:b1:c8:32:e2:c6:b0:2e:4c:7b:c1:cd:e3: 20:16:53:97:53:63:30:99:3c:f8:9d:d3:2c:0a:c8: 7e:2d:7f:c2:60:7a:e7:c5:58:92:1c:20:b5:9a:f7: 53:94:d4:4b:0a:d9:71:48:69:e0:b6:11:dd:0d:59: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F2:BA:CE:F3:32:D4:E4:10:EF:6D:DC:37:9E:77:1C:83:08:9B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.153.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:58:e7:32:48:e2:a1:c4:c7:f9:da:73:bd:8c:fd:c7:5a:23: 16:65:5f:9d:f1:f6:e9:6e:67:63:37:04:0a:96:0d:10:52:82: 80:07:a5:e2:78:7c:f4:df:e0:f2:90:53:47:89:2c:a5:25:b7: c7:d2:52:14:68:3e:09:41:56:a9:d9:93:b5:79:c3:38:e3:0a: cc:54:48:05:4f:68:2a:f5:25:de:d4:e2:19:a1:a7:33:66:94: 1b:91:90:57:07:05:78:8b:79:cd:ea:af:33:35:61:12:08:27: 2b:40:54:d6:1d:03:7f:7c:fa:94:2b:5e:66:ae:88:58:20:77: 8a:53:80:36:b6:2e:b5:b5:bf:cf:18:c7:ca:ac:48:44:72:7f: e5:43:51:12:ec:32:ae:83:e4:60:55:25:60:ed:cb:cd:40:59: 66:84:5b:63:4b:62:42:12:ef:52:74:ca:64:0f:99:f0:11:db: 8a:57:b1:87:9d:ea:ac:7d:c8:d3:1e:ad:8f:f1:27:80:c5:c0: 4a:9f:a6:f9:88:40:17:4d:83:50:b6:26:6e:5d:f3:f0:6d:8d: 55:b3:b5:e2:f3:1a:c1:cd:19:ec:f1:9a:82:19:ab:73:00:ea: d4:1f:e5:c0:20:2b:e0:29:54:bc:9b:cc:67:5c:d2:a4:f9:33: 5f:4b:ef:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnGF23U1ZVvBhx4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTAwNWY5ODUtMTNkZS00Nzg5LTgzMDktZDBhY2U1ZTIwNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS2Wk3PDI5nwDOMumktlAJp5B33Imb11klAJ oc41ji8j/iioGEFx6EwSVt4oI8pcv1TZeXv+0F3Nk0rLeaYSga8MQKLSDaEXdaJr 6h/8oFr6WAQOz55STVq6E4m4bxZ3m8h12xCubhhYEiYcCpR3GYyt4JMl5sWA3LgB TyDmJVIYUWrwcQWU0zWlCOvFfOvn+66R4RhqkUQrM6vhpKEKaGgtufqZ1iWpYg9j rJTKu9EOLadFecsS9uQHASifDl6ZP1nYQ0axyDLixrAuTHvBzeMgFlOXU2MwmTz4 ndMsCsh+LX/CYHrnxViSHCC1mvdTlNRLCtlxSGngthHdDVkxrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnyus7zMtTkEO9t3DeedxyDCJt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjA0ZGYzZDEtOTRmZC0z ZTg2LWFiMDMtOGIwZGY3NGQwZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2JmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItY5zJI4qHEx/nac72M/cdaIxZlX53x9uluZ2M3BAqWDRBSgoAHpeJ4 fPTf4PKQU0eJLKUlt8fSUhRoPglBVqnZk7V5wzjjCsxUSAVPaCr1Jd7U4hmhpzNm lBuRkFcHBXiLec3qrzM1YRIIJytAVNYdA398+pQrXmauiFggd4pTgDa2LrW1v88Y x8qsSERyf+VDURLsMq6D5GBVJWDty81AWWaEW2NLYkIS71J0ymQPmfAR24pXsYed 6qx9yNMerY/xJ4DFwEqfpvmIQBdNg1C2Jm5d8/BtjVWzteLzGsHNGezxmoIZq3MA 6tQf5cAgK+ApVLybzGdc0qT5M19L78s= -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:52 2026 by rpki-client