$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff40cb68-1ebc-3822-8ca6-f22a53a60dce.roa File: ff40cb68-1ebc-3822-8ca6-f22a53a60dce.roa (raw, json) Hash identifier: mqUkYtj++HEZMhRMk8ybHJdYfqLMKkT7Rd2LcMoB1EM= Subject key identifier: B6:A4:1E:8B:E5:AA:C4:77:29:E0:D3:9E:E7:CC:25:BB:C2:4B:71:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A71326471BAA05EF662C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff40cb68-1ebc-3822-8ca6-f22a53a60dce.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.47.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:71:32:64:71:ba:a0:5e:f6:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=284a697a-25c8-4c5a-9ec6-d1294d69ff6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7b:0a:73:4c:04:f3:b7:e4:63:75:53:a0:dd: 15:7e:d5:84:99:23:61:bc:cb:f3:1a:79:83:9f:cd: 10:94:6f:67:ec:06:3c:3a:9b:05:5a:5c:ea:14:8f: 72:49:92:ee:e9:74:3e:fb:a7:e1:36:6f:03:be:40: f6:ee:7c:b6:51:e8:f4:0e:6e:43:dc:82:d2:34:b2: 63:8d:4d:d8:4c:13:4d:1a:b4:51:3e:eb:c0:45:7f: 4d:74:91:f5:9a:e1:78:4d:cd:01:a2:42:e4:08:a6: 0c:3e:4d:8d:3d:8b:4c:d2:74:72:a9:97:64:32:fd: d0:e6:33:c0:0f:60:48:0b:e4:62:40:62:1d:46:f7: df:0f:b5:64:87:68:57:f1:9a:7f:6c:8d:94:91:83: 13:a8:da:e4:b4:3b:10:83:02:4b:9b:05:f7:f3:6d: 99:88:ad:bb:97:e3:06:b2:bf:fa:19:1a:9e:4a:ba: d1:7d:19:b4:50:91:47:f8:6b:1e:4b:19:6c:bd:ae: 9b:c5:d5:6e:b1:5e:0f:38:21:ed:4c:f5:2d:ac:3d: a2:f3:4d:49:42:cd:c2:c8:ab:20:fa:4f:b2:a1:f9: ee:e6:d5:a0:8b:81:4f:ee:65:32:e2:00:bc:e8:ae: a4:d1:49:d4:78:01:1c:05:76:81:0d:9d:8b:a9:4f: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:1E:8B:E5:AA:C4:77:29:E0:D3:9E:E7:CC:25:BB:C2:4B:71:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff40cb68-1ebc-3822-8ca6-f22a53a60dce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.47.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ed:d7:49:01:2c:71:9b:31:5b:df:c0:7f:08:00:7d:2a:42: 1f:d3:d5:b7:31:7c:88:e9:3c:03:90:d2:54:6d:58:43:5e:04: c5:83:a6:6d:67:a7:6a:fe:f5:5c:f4:62:3a:67:29:3b:b7:2e: bd:ae:71:a9:f4:fd:2a:5a:50:b4:31:00:cf:b2:5d:98:a2:f9: fe:5e:3b:d1:2f:cc:07:1f:06:eb:b5:f8:90:05:cd:24:d5:bd: c2:7f:eb:25:63:96:c6:f6:6b:cc:79:08:2b:b8:4e:dd:18:69: 3e:0e:cc:7c:25:18:fb:72:c5:03:a4:17:a8:df:d9:a9:f0:ca: 68:93:e5:a5:5a:f7:74:25:16:7f:d0:ad:7f:f5:8d:02:7f:09: ac:52:a6:b9:92:b1:8f:9e:99:f8:01:5e:1b:35:53:ba:8a:82: 61:38:dd:b8:05:25:a2:05:3e:7d:45:8e:a0:7e:08:10:54:fd: 36:b9:0d:d3:55:5e:e0:6e:04:d4:32:a0:5b:1e:e6:61:4d:80: a4:50:54:8f:08:ea:b9:94:04:90:a0:6d:50:b2:54:6c:12:da: 20:99:47:4e:8c:48:c9:08:84:bc:d8:34:f6:e4:93:cb:55:7c: 78:92:a0:af:02:40:81:98:3d:bf:32:53:ec:03:91:4d:bf:21: 78:be:c1:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnEyZHG6oF72YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Mjg0YTY5N2EtMjVjOC00YzVhLTllYzYtZDEyOTRkNjlmZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHsKc0wE87fkY3VToN0VftWEmSNhvMvzGnmD n80QlG9n7AY8OpsFWlzqFI9ySZLu6XQ++6fhNm8DvkD27ny2Uej0Dm5D3ILSNLJj jU3YTBNNGrRRPuvARX9NdJH1muF4Tc0BokLkCKYMPk2NPYtM0nRyqZdkMv3Q5jPA D2BIC+RiQGIdRvffD7Vkh2hX8Zp/bI2UkYMTqNrktDsQgwJLmwX3822ZiK27l+MG sr/6GRqeSrrRfRm0UJFH+GseSxlsva6bxdVusV4POCHtTPUtrD2i801JQs3CyKsg +k+yofnu5tWgi4FP7mUy4gC86K6k0UnUeAEcBXaBDZ2LqU+5PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLakHovlqsR3KeDTnufMJbvCS3HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY0MGNiNjgtMWViYy0z ODIyLThjYTYtZjIyYTUzYTYwZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2C/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLt10kBLHGbMVvfwH8IAH0qQh/T1bcxfIjpPAOQ0lRtWENeBMWDpm1n p2r+9Vz0YjpnKTu3Lr2ucan0/SpaULQxAM+yXZii+f5eO9EvzAcfBuu1+JAFzSTV vcJ/6yVjlsb2a8x5CCu4Tt0YaT4OzHwlGPtyxQOkF6jf2anwymiT5aVa93QlFn/Q rX/1jQJ/CaxSprmSsY+emfgBXhs1U7qKgmE43bgFJaIFPn1FjqB+CBBU/Ta5DdNV XuBuBNQyoFse5mFNgKRQVI8I6rmUBJCgbVCyVGwS2iCZR06MSMkIhLzYNPbkk8tV fHiSoK8CQIGYPb8yU+wDkU2/IXi+wW4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:50 2026 by rpki-client