$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08172ed3-61c1-37a1-afaa-2c5a924b909f.roa File: 08172ed3-61c1-37a1-afaa-2c5a924b909f.roa (raw, json) Hash identifier: M8aqoTDAD6MhZ/vW6KvAsB+6iMTzoeT3nzi/NMjnMuA= Subject key identifier: D6:C5:1B:A1:36:11:8A:8F:13:F8:70:E7:EA:AC:CA:48:16:F1:6B:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BAE82FBC302951A99E9300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08172ed3-61c1-37a1-afaa-2c5a924b909f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 64.24.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:e8:2f:bc:30:29:51:a9:9e:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=a1b69cee-1f14-4c57-8fb2-67bf94bbb30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:6e:52:21:06:08:95:89:1c:ae:b0:66:7a: 3d:39:02:88:b5:8b:00:36:8b:8a:97:08:be:0b:a4: ab:88:44:ff:13:06:9d:3f:3e:ae:8d:56:d1:b3:68: 22:04:94:a4:ac:81:ac:9c:ad:52:ee:49:b9:9d:e3: 96:0b:a9:06:1a:45:d3:65:e4:d6:ad:b8:8e:0a:ef: 29:52:7a:e5:b9:69:e4:37:29:13:da:7e:ca:e7:73: 92:6c:2a:f1:42:8c:a9:a2:7d:d7:51:4a:7d:17:08: 5b:df:69:a7:91:96:93:03:fd:53:f6:08:89:3c:ea: ae:f0:31:90:7c:24:92:45:91:39:85:60:40:f9:a9: 14:47:78:ce:65:a7:9c:3a:89:48:df:e5:6f:82:ca: b0:b2:be:3b:39:6c:f3:a2:2b:cf:04:bf:65:f2:f7: 36:ed:1d:c7:b9:44:49:04:cc:af:b1:a7:52:69:ef: 00:a1:d6:8b:ff:88:b7:16:de:b1:32:33:6a:25:94: de:7a:c1:4e:6d:9c:96:54:b2:18:98:db:ac:00:7b: ef:f9:d0:7b:c2:6a:d1:0c:2a:e8:8b:97:e5:05:ce: 14:87:c3:75:47:ab:bd:a1:cc:e8:78:ad:4e:30:f2: db:d6:d8:27:18:7e:15:32:0c:e9:5d:df:0c:bc:ee: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C5:1B:A1:36:11:8A:8F:13:F8:70:E7:EA:AC:CA:48:16:F1:6B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08172ed3-61c1-37a1-afaa-2c5a924b909f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5f:26:4b:12:94:6c:c6:c6:b8:2c:54:e8:76:cb:1d:a0:e0: 95:79:dd:02:02:0f:b0:6f:a2:ff:c6:d0:0d:5a:91:88:2a:da: 29:95:5d:b1:4e:b2:c4:7a:93:ca:f5:26:b1:f0:4d:1c:38:91: b6:84:45:1f:44:81:c5:62:b4:f7:ba:35:44:f7:bb:e9:00:6c: b1:57:88:71:4d:41:ed:f0:67:e4:91:a7:48:d2:c6:41:1f:e6: 07:fa:9d:86:89:6c:45:5a:0d:89:e2:d0:55:e1:cf:2c:af:bb: 1e:2b:f3:ad:64:e7:ce:12:9b:c2:48:a1:a5:b7:71:7a:ca:cc: e3:78:32:ba:85:01:76:51:7c:91:df:50:14:b2:00:cd:e1:18: 2d:e0:63:87:20:2b:54:28:09:45:56:d0:f1:37:25:2c:45:0c: 52:33:e9:30:83:bf:30:52:7c:db:45:bd:ad:f1:a4:42:7f:88: 0b:bc:ed:02:a2:89:7f:b4:d5:35:69:33:9e:19:5b:9e:13:21: d2:e7:6f:e7:84:d3:4e:b1:6e:c1:a9:9d:94:c2:7e:44:51:22: 32:bd:c0:e9:c3:ff:10:e4:8c:50:a5:a9:df:8d:dc:46:f9:6f: 77:33:10:8a:0f:db:c5:76:ba:dd:9e:b9:01:34:fa:be:b3:0d: bc:92:3a:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuugvvDApUamekwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YTFiNjljZWUtMWYxNC00YzU3LThmYjItNjdiZjk0YmJiMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGduUiEGCJWJHK6wZno9OQKItYsANouKlwi+ C6SriET/EwadPz6ujVbRs2giBJSkrIGsnK1S7km5neOWC6kGGkXTZeTWrbiOCu8p UnrluWnkNykT2n7K53OSbCrxQoypon3XUUp9Fwhb32mnkZaTA/1T9giJPOqu8DGQ fCSSRZE5hWBA+akUR3jOZaecOolI3+Vvgsqwsr47OWzzoivPBL9l8vc27R3HuURJ BMyvsadSae8AodaL/4i3Ft6xMjNqJZTeesFObZyWVLIYmNusAHvv+dB7wmrRDCro i5flBc4Uh8N1R6u9oczoeK1OMPLb1tgnGH4VMgzpXd8MvO44tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbFG6E2EYqPE/hw5+qsykgW8WveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDgxNzJlZDMtNjFjMS0z N2ExLWFmYWEtMmM1YTkyNGI5MDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1fJksSlGzGxrgsVOh2yx2g4JV53QICD7Bvov/G0A1akYgq2imVXbFO ssR6k8r1JrHwTRw4kbaERR9EgcVitPe6NUT3u+kAbLFXiHFNQe3wZ+SRp0jSxkEf 5gf6nYaJbEVaDYni0FXhzyyvux4r861k584Sm8JIoaW3cXrKzON4MrqFAXZRfJHf UBSyAM3hGC3gY4cgK1QoCUVW0PE3JSxFDFIz6TCDvzBSfNtFva3xpEJ/iAu87QKi iX+01TVpM54ZW54TIdLnb+eE006xbsGpnZTCfkRRIjK9wOnD/xDkjFClqd+N3Eb5 b3czEIoP28V2ut2euQE0+r6zDbySOrM= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:34 2026 by rpki-client