$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb16d8e2-1dd9-3516-b145-2ca99e11e718.roa File: fb16d8e2-1dd9-3516-b145-2ca99e11e718.roa (raw, json) Hash identifier: IM43cz412bDuApO2cKPjJfWjuLh/NCPbCdAAc5tV8KU= Subject key identifier: 2D:6A:9E:C8:3C:88:DD:20:D4:88:F8:4A:5F:32:CF:81:D4:06:9F:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCC6066C014A3F366A8044600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb16d8e2-1dd9-3516-b145-2ca99e11e718.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 27338 IP address blocks: 74.8.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:66:c0:14:a3:f3:66:a8:04:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=40aff30a-ccac-423a-ab82-7a70060d4d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d1:38:11:e7:62:14:6d:ba:b8:9a:65:b7:44: 7e:63:04:8b:a6:9a:82:02:31:68:a9:3d:40:95:d3: 2b:21:9e:fc:db:16:bc:79:f7:27:44:e5:0f:5f:df: 76:9f:cf:c4:35:06:f8:fa:98:77:eb:d3:8e:bf:24: a0:72:cf:30:3a:4d:4b:f1:48:f8:3d:d6:66:f4:7e: cc:14:1f:91:1e:49:a1:e4:a7:86:80:18:34:3d:69: e9:51:99:d0:40:d6:f9:08:44:59:d0:74:ac:cf:c2: 34:25:ed:5f:df:6d:f4:2d:c7:3f:d7:07:c1:01:89: 3d:e5:f0:8d:74:7d:9e:0c:5d:07:75:90:9b:8d:c3: 4e:cc:34:77:71:2f:f7:4b:1d:90:ac:d0:dd:1a:19: d6:18:1f:de:6d:46:0f:4c:f9:4b:72:ba:de:ea:79: e7:3a:1e:2a:18:cb:b7:05:58:21:82:a6:2e:51:f2: f4:39:b9:92:5a:f5:3f:3c:ea:38:7b:4b:f8:36:98: aa:cb:00:94:4d:91:4f:a8:6e:a1:fe:be:06:db:c2: 19:fc:b0:d2:08:31:22:a5:13:c8:23:ce:5e:1c:a2: 38:e2:1a:b5:2d:a7:e3:f7:c4:0e:93:3e:1e:8b:28: dd:ad:5b:f2:90:cc:f8:99:8c:1f:46:e9:76:cd:4a: 97:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:9E:C8:3C:88:DD:20:D4:88:F8:4A:5F:32:CF:81:D4:06:9F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb16d8e2-1dd9-3516-b145-2ca99e11e718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:72:c7:aa:db:88:9d:cc:9f:b2:20:97:4e:5a:c2:5e:3e:fd: d4:b6:55:db:d7:27:da:9c:7c:a5:23:e7:c6:b4:5a:30:cc:fa: f8:62:a4:d5:d7:ab:eb:ae:b3:aa:74:b7:e5:54:13:9f:9a:73: a5:51:85:c0:58:c2:ac:0b:e7:98:59:82:41:ec:ef:0a:5a:af: d6:59:c7:f0:4f:fe:3a:53:14:0a:02:b7:f2:b9:09:aa:80:e9: 8e:b7:ce:53:96:8e:cf:fd:b4:38:60:41:02:c0:a6:87:2a:a7: 8a:c1:2b:c9:4b:fe:7f:fa:e5:7e:14:12:79:52:bb:a4:24:50: 4f:b9:b8:ee:91:2f:4b:5f:95:dd:f1:e6:87:c8:61:e4:fc:04: 2c:62:7f:86:a8:b4:c0:6e:45:97:ac:97:e7:09:b0:f8:18:b9: 38:dd:0a:42:ad:dc:bf:bc:87:b1:66:f6:29:95:bf:95:24:4d: 1d:97:af:63:4d:bc:e5:af:57:50:f4:14:1c:4e:7f:a4:35:ed: 31:47:c5:95:06:90:09:b9:48:bc:9a:b5:45:42:0c:44:cf:35: 6c:75:3e:cc:14:70:47:e7:b8:7b:4a:2d:f6:25:20:9f:9a:28: b1:15:83:d8:21:5a:8e:78:85:35:c3:a8:38:86:57:4b:78:6c: df:ef:a1:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYGbAFKPzZqgERgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk NDBhZmYzMGEtY2NhYy00MjNhLWFiODItN2E3MDA2MGQ0ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdE4EediFG26uJplt0R+YwSLppqCAjFoqT1A ldMrIZ782xa8efcnROUPX992n8/ENQb4+ph369OOvySgcs8wOk1L8Uj4PdZm9H7M FB+RHkmh5KeGgBg0PWnpUZnQQNb5CERZ0HSsz8I0Je1f3230Lcc/1wfBAYk95fCN dH2eDF0HdZCbjcNOzDR3cS/3Sx2QrNDdGhnWGB/ebUYPTPlLcrre6nnnOh4qGMu3 BVghgqYuUfL0ObmSWvU/POo4e0v4NpiqywCUTZFPqG6h/r4G28IZ/LDSCDEipRPI I85eHKI44hq1Lafj98QOkz4eiyjdrVvykMz4mYwfRul2zUqXfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1qnsg8iN0g1Ij4Sl8yz4HUBp8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmIxNmQ4ZTItMWRkOS0z NTE2LWIxNDUtMmNhOTllMTFlNzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRyx6rbiJ3Mn7Igl05awl4+/dS2VdvXJ9qcfKUj58a0WjDM+vhipNXX q+uus6p0t+VUE5+ac6VRhcBYwqwL55hZgkHs7wpar9ZZx/BP/jpTFAoCt/K5CaqA 6Y63zlOWjs/9tDhgQQLApocqp4rBK8lL/n/65X4UEnlSu6QkUE+5uO6RL0tfld3x 5ofIYeT8BCxif4aotMBuRZesl+cJsPgYuTjdCkKt3L+8h7Fm9imVv5UkTR2Xr2NN vOWvV1D0FBxOf6Q17TFHxZUGkAm5SLyatUVCDETPNWx1PswUcEfnuHtKLfYlIJ+a KLEVg9ghWo54hTXDqDiGV0t4bN/vock= -----END CERTIFICATE-----Generated at Wed May 13 08:44:07 2026 by rpki-client