$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5ffed84-8b22-3446-ac6d-e348f116e5cf.roa File: f5ffed84-8b22-3446-ac6d-e348f116e5cf.roa (raw, json) Hash identifier: wYM3zE1zM1NJwEntH/Xt3kDEVqD6RvgcK0BwDRDvaa0= Subject key identifier: 7A:27:2F:63:7F:E2:7A:AE:D8:4F:BD:1B:FC:7B:42:BB:CA:D2:E9:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3E000B51EEA79168E83DA270 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5ffed84-8b22-3446-ac6d-e348f116e5cf.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 67.141.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0b:51:ee:a7:91:68:e8:3d:a2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=5f961c0d-75a9-4c0c-8b17-ac038343283b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:83:f6:01:7b:63:2b:e3:2c:e0:84:57:b8: a1:f8:84:85:2e:4d:41:bc:3b:6f:67:e8:36:97:11: 31:85:ac:50:cc:85:8d:c5:71:6b:5f:17:35:47:4d: ba:b2:d0:d7:c1:54:b9:82:05:fb:1f:26:53:c7:5f: 05:46:4f:98:7f:09:d0:4e:f3:a5:79:10:5c:e1:ba: 36:2d:72:1e:b8:86:05:b6:3b:19:fd:c3:02:99:13: 28:5f:0c:6d:e6:79:e3:3b:ba:e2:92:fe:ff:fa:e4: 5e:ce:9a:44:cb:b5:2f:b8:41:ff:44:69:62:a8:46: 20:83:13:2c:77:8d:e2:de:fe:37:bd:94:59:ca:6c: 27:d4:74:53:4f:9b:77:47:81:c3:60:4d:af:5d:dc: 37:f6:d5:69:19:07:16:8b:d8:e3:b0:85:b1:db:56: 6a:94:ed:2e:fb:74:ed:ae:90:87:83:50:2b:d2:30: ee:61:7b:5b:0e:53:b5:22:6f:92:37:92:33:98:ab: ad:5d:4d:3a:d4:35:29:4a:d9:8e:4a:c4:83:cc:83: 48:da:89:1a:de:bd:31:b9:2f:0a:d6:07:24:f5:ed: 3d:3e:16:b2:59:e2:5f:c0:24:48:ae:e8:a0:47:5e: 25:64:06:56:ab:58:19:a0:d0:4a:6c:a5:6c:3a:a0: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:27:2F:63:7F:E2:7A:AE:D8:4F:BD:1B:FC:7B:42:BB:CA:D2:E9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5ffed84-8b22-3446-ac6d-e348f116e5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:83:30:4b:d5:16:4c:7f:ed:0a:74:75:82:e1:7a:64:ca:6d: c4:c4:85:81:47:49:8c:f4:ca:2b:3e:7e:23:ef:e9:6b:43:95: 7a:fa:2a:64:9b:39:03:2f:52:5e:40:60:14:ff:b8:d5:27:65: 87:f8:84:f5:4d:7f:98:57:d5:cf:26:90:06:83:30:eb:c6:0b: c9:15:85:41:26:11:fd:27:68:26:08:a2:4d:cc:32:00:d6:cb: ec:b1:c7:d9:a7:e9:db:97:fa:2d:51:3e:c2:fe:78:6f:14:f9: 23:1a:3b:b1:d4:1b:a6:00:3d:f5:be:55:29:ec:e1:40:d4:53: 8c:ae:32:d9:1b:16:10:35:23:25:5d:c0:47:7d:c7:b0:b6:ab: 03:b0:3e:31:58:0e:59:a7:fa:46:d5:58:d8:80:b4:01:87:80: 80:2a:fa:22:03:dc:c6:89:3f:46:6a:5c:54:2e:48:3f:b3:ed: 81:55:ea:a3:03:9a:70:9f:5c:46:48:62:5c:27:e2:b4:af:c2: ec:4d:5c:35:16:f9:29:8a:86:2c:a8:b0:c5:77:73:08:75:34: 0c:90:1b:6e:09:f2:c5:13:d5:44:9c:69:08:54:cd:f0:8c:0e: ff:85:f6:e1:11:f3:f9:f1:7a:9c:36:a8:80:f5:6e:78:01:f0: b9:1e:96:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAtR7qeRaOg9onAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NWY5NjFjMGQtNzVhOS00YzBjLThiMTctYWMwMzgzNDMyODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgraD9gF7YyvjLOCEV7ih+ISFLk1BvDtvZ+g2 lxExhaxQzIWNxXFrXxc1R026stDXwVS5ggX7HyZTx18FRk+YfwnQTvOleRBc4bo2 LXIeuIYFtjsZ/cMCmRMoXwxt5nnjO7rikv7/+uRezppEy7UvuEH/RGliqEYggxMs d43i3v43vZRZymwn1HRTT5t3R4HDYE2vXdw39tVpGQcWi9jjsIWx21ZqlO0u+3Tt rpCHg1Ar0jDuYXtbDlO1Im+SN5IzmKutXU061DUpStmOSsSDzINI2oka3r0xuS8K 1gck9e09PhayWeJfwCRIruigR14lZAZWq1gZoNBKbKVsOqBiIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHonL2N/4nqu2E+9G/x7QrvK0unjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjVmZmVkODQtOGIyMi0z NDQ2LWFjNmQtZTM0OGYxMTZlNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ434MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCDMEvVFkx/7Qp0dYLhemTKbcTEhYFHSYz0yis+fiPv6WtDlXr6KmSb OQMvUl5AYBT/uNUnZYf4hPVNf5hX1c8mkAaDMOvGC8kVhUEmEf0naCYIok3MMgDW y+yxx9mn6duX+i1RPsL+eG8U+SMaO7HUG6YAPfW+VSns4UDUU4yuMtkbFhA1IyVd wEd9x7C2qwOwPjFYDlmn+kbVWNiAtAGHgIAq+iID3MaJP0ZqXFQuSD+z7YFV6qMD mnCfXEZIYlwn4rSvwuxNXDUW+SmKhiyosMV3cwh1NAyQG24J8sUT1UScaQhUzfCM Dv+F9uER8/nxepw2qID1bngB8Lkelg8= -----END CERTIFICATE-----Generated at Thu Mar 26 19:07:15 2026 by rpki-client