$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/282bef38-7c98-31f3-9540-44db9761880d.roa File: 282bef38-7c98-31f3-9540-44db9761880d.roa (raw, json) Hash identifier: zMJmYmKj5//7gmLvISwC2tEfDKAa9uXEvB6QZg0ubOI= Subject key identifier: 75:30:00:33:52:90:B2:A9:FC:07:8A:55:08:90:0B:7D:A8:21:22:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BC1E627C8F1961EED2E880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/282bef38-7c98-31f3-9540-44db9761880d.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 64.24.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:1e:62:7c:8f:19:61:ee:d2:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=8b3f9840-bb32-41ae-ae46-3db30b053beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:0d:d7:93:80:d0:b5:99:7c:9b:e4:08:f9: 09:62:9e:4f:cd:53:e0:48:1f:52:ba:da:26:13:98: 02:a2:8e:83:a2:53:3c:8d:6b:d6:de:f8:c9:92:9e: c3:d1:d0:05:22:c4:cb:4e:3c:3d:da:7e:1d:d0:8a: 7e:4b:25:ad:bd:55:f1:54:9c:66:23:c5:88:e9:33: 29:f8:f3:38:f6:a6:be:64:e2:1c:51:12:51:0b:49: c7:1a:ae:94:3c:63:2a:89:bc:9d:4a:a4:95:a4:38: 1b:1f:90:18:97:05:bb:a7:fd:52:ed:1d:a0:f8:95: 2c:81:2e:91:9f:e3:9a:df:8f:b8:01:88:7d:ec:e5: 60:a6:31:5e:73:21:53:ed:f0:f8:a3:0b:f7:2c:42: 8c:77:72:96:81:c3:87:8b:b0:66:38:96:ba:fc:6e: ff:11:8f:f4:c1:0a:4f:8c:f5:28:53:4c:43:05:9a: df:d4:ab:e0:60:cf:d1:e1:1c:7f:65:f7:53:22:b8: b7:45:46:06:44:cd:7c:89:12:eb:0f:7c:64:d7:9a: d7:ef:ff:57:3d:af:ec:28:b7:65:52:0a:bb:23:58: 13:0d:03:0f:d3:15:d7:ed:a2:97:69:5c:b5:a7:d1: 16:91:f0:d0:a0:19:6f:16:9c:84:56:f1:f2:20:b4: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:30:00:33:52:90:B2:A9:FC:07:8A:55:08:90:0B:7D:A8:21:22:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/282bef38-7c98-31f3-9540-44db9761880d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d6:d7:fb:50:c0:6d:4a:6c:77:40:a4:7d:b1:77:11:2b:4c: 7e:90:55:48:be:17:88:a9:e8:4a:8a:ac:f1:4c:02:04:15:c1: 33:ea:85:c6:30:80:07:c3:18:8d:d4:83:dc:39:16:86:8a:25: 02:d4:50:12:2a:7a:e6:0d:44:fa:be:9d:9f:29:0f:fd:f9:00: 4a:1b:0e:66:d5:48:4f:68:b5:0a:79:7f:62:12:1e:29:14:f7: 13:35:c0:6b:a7:ee:da:9c:e3:93:9f:3c:d7:88:94:f9:0d:9b: eb:49:4e:6b:8a:22:08:31:44:ea:cc:fe:c6:34:c5:9d:65:46: 86:58:72:8a:4d:56:c9:0c:95:ae:ac:d2:08:1a:a0:74:76:25: 53:6d:e5:f6:54:f9:14:5c:87:71:49:c6:8d:97:88:33:95:45: 0d:42:09:2c:4f:66:c9:af:26:c5:20:4c:9f:ae:81:1d:73:bd: 54:e1:68:fb:5f:58:3b:71:c8:db:93:02:8c:0c:3e:8c:5d:d7: b9:fc:5d:e9:ca:9b:49:5f:84:69:b5:6b:3c:2a:cb:14:96:16: 39:38:14:dc:31:dd:02:3e:06:07:b9:4b:af:e3:5a:0c:5e:5c: 75:8d:56:2c:69:a4:26:1a:d5:53:40:db:69:88:46:d3:f1:a2: 96:ea:72:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvB5ifI8ZYe7S6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OGIzZjk4NDAtYmIzMi00MWFlLWFlNDYtM2RiMzBiMDUzYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArscN15OA0LWZfJvkCPkJYp5PzVPgSB9Sutom E5gCoo6DolM8jWvW3vjJkp7D0dAFIsTLTjw92n4d0Ip+SyWtvVXxVJxmI8WI6TMp +PM49qa+ZOIcURJRC0nHGq6UPGMqibydSqSVpDgbH5AYlwW7p/1S7R2g+JUsgS6R n+Oa34+4AYh97OVgpjFecyFT7fD4owv3LEKMd3KWgcOHi7BmOJa6/G7/EY/0wQpP jPUoU0xDBZrf1KvgYM/R4Rx/ZfdTIri3RUYGRM18iRLrD3xk15rX7/9XPa/sKLdl Ugq7I1gTDQMP0xXX7aKXaVy1p9EWkfDQoBlvFpyEVvHyILQIfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUwADNSkLKp/AeKVQiQC32oISIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjgyYmVmMzgtN2M5OC0z MWYzLTk1NDAtNDRkYjk3NjE4ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPW1/tQwG1KbHdApH2xdxErTH6QVUi+F4ip6EqKrPFMAgQVwTPqhcYw gAfDGI3Ug9w5FoaKJQLUUBIqeuYNRPq+nZ8pD/35AEobDmbVSE9otQp5f2ISHikU 9xM1wGun7tqc45OfPNeIlPkNm+tJTmuKIggxROrM/sY0xZ1lRoZYcopNVskMla6s 0ggaoHR2JVNt5fZU+RRch3FJxo2XiDOVRQ1CCSxPZsmvJsUgTJ+ugR1zvVThaPtf WDtxyNuTAowMPoxd17n8XenKm0lfhGm1azwqyxSWFjk4FNwx3QI+Bge5S6/jWgxe XHWNVixppCYa1VNA22mIRtPxopbqcqg= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:29 2026 by rpki-client