$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa File: 48e35af3-3f19-327b-a342-5b5e29f9df5f.roa (raw, json) Hash identifier: fEn408NvkB0y0Tke6oL+eVWmuqCVISx/4daBfdnzCc4= Subject key identifier: F6:2C:E4:CE:07:77:F4:E2:37:68:E9:D0:C5:FB:11:28:5C:0E:61:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BAE951BB5D1AB44A7E8400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 207.91.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:e9:51:bb:5d:1a:b4:4a:7e:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=6eaa375b-e96c-40bd-a883-02568afe5619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4f:19:e3:15:39:1a:f6:17:8a:0f:f9:5d:0f: 78:a8:31:2d:a2:97:b7:51:a1:a9:fc:0b:34:29:d9: d1:26:1e:30:07:9e:f6:fd:47:80:55:85:27:d2:bf: c5:af:18:3c:1d:f6:e6:ad:58:1b:02:63:51:a7:a1: 7f:4a:4e:f4:c9:ba:96:5c:fc:4a:be:29:a0:f8:31: 6c:f6:0e:c2:f8:14:f9:ae:8d:d6:60:9a:0e:b3:18: ad:4b:33:3f:ef:49:aa:cf:89:87:a4:2a:c1:5c:e2: 5b:a4:1f:ba:10:cd:b6:df:2a:ef:96:af:f2:74:8f: 64:7d:d3:58:93:ae:ec:ff:87:5a:f3:7d:15:7e:8e: 01:7f:05:31:71:6d:bf:39:d2:99:71:32:69:f7:71: e1:54:7f:11:8a:69:cd:1f:58:56:46:42:6e:67:1c: 36:7e:b8:5b:98:a3:81:72:0e:0c:17:c8:11:c5:e6: da:20:18:c8:a9:ad:ad:cd:0d:4e:cf:37:b8:36:c2: f3:51:91:b5:dd:a0:81:8a:e1:32:93:81:97:74:85: 8f:4d:42:a2:af:1a:d9:55:cc:38:a3:29:04:66:9a: 0f:d7:fe:66:5c:95:1e:49:3d:13:25:b8:33:12:1e: e6:b7:ae:cb:63:94:f9:63:86:84:c1:fc:d8:fa:a0: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2C:E4:CE:07:77:F4:E2:37:68:E9:D0:C5:FB:11:28:5C:0E:61:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.91.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:24:0e:1f:a6:6d:2c:b6:a6:4d:63:38:15:a8:cb:1c:f2:5d: 28:7a:58:83:05:37:58:e4:00:d8:61:c4:9b:09:d0:5d:54:86: f3:7d:46:08:ab:33:50:21:2b:29:2c:de:8b:67:c9:4d:08:8b: 8f:35:89:d2:b4:94:c9:d9:5a:87:b3:c4:71:bb:61:47:da:dd: e9:8f:e0:a4:d7:01:62:de:a3:23:2a:47:ce:e0:1e:47:c0:1f: f7:ab:36:72:7b:46:86:cc:bc:cb:d0:d2:f9:80:a0:4f:fb:7d: b6:0b:cf:a4:86:60:cf:9a:cf:7d:ae:f9:c0:9f:e1:71:e7:0b: 56:22:24:0f:a6:12:8f:f0:c2:4f:8e:d4:14:b3:07:3f:fd:0f: d1:6d:b5:33:79:e1:00:98:bb:f6:ee:77:01:0b:85:a4:7c:22: e2:a3:6f:57:59:ac:88:d8:e5:d3:66:ea:e3:f4:92:e2:b3:80: 0b:18:19:4f:06:57:6a:c6:84:a7:83:34:59:79:a5:e1:15:e1: 30:f6:df:41:8d:44:6d:a5:c2:1c:1d:d2:22:a2:2c:8a:68:c8: 1d:ee:e1:4f:83:04:9a:3b:53:5a:50:65:22:09:5e:c8:33:e5: 9a:20:1f:0a:58:b2:4f:74:26:99:e6:1f:90:7c:90:d7:6f:2c: be:4f:48:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuulRu10atEp+hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NmVhYTM3NWItZTk2Yy00MGJkLWE4ODMtMDI1NjhhZmU1NjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU8Z4xU5GvYXig/5XQ94qDEtope3UaGp/As0 KdnRJh4wB572/UeAVYUn0r/Frxg8HfbmrVgbAmNRp6F/Sk70ybqWXPxKvimg+DFs 9g7C+BT5ro3WYJoOsxitSzM/70mqz4mHpCrBXOJbpB+6EM223yrvlq/ydI9kfdNY k67s/4da830Vfo4BfwUxcW2/OdKZcTJp93HhVH8RimnNH1hWRkJuZxw2frhbmKOB cg4MF8gRxebaIBjIqa2tzQ1Ozze4NsLzUZG13aCBiuEyk4GXdIWPTUKirxrZVcw4 oykEZpoP1/5mXJUeST0TJbgzEh7mt67LY5T5Y4aEwfzY+qA5rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYs5M4Hd/TiN2jp0MX7EShcDmHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDhlMzVhZjMtM2YxOS0z MjdiLWEzNDItNWI1ZTI5ZjlkZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz1sQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQkDh+mbSy2pk1jOBWoyxzyXSh6WIMFN1jkANhhxJsJ0F1UhvN9Rgir M1AhKyks3otnyU0Ii481idK0lMnZWoezxHG7YUfa3emP4KTXAWLeoyMqR87gHkfA H/erNnJ7RobMvMvQ0vmAoE/7fbYLz6SGYM+az32u+cCf4XHnC1YiJA+mEo/wwk+O 1BSzBz/9D9FttTN54QCYu/budwELhaR8IuKjb1dZrIjY5dNm6uP0kuKzgAsYGU8G V2rGhKeDNFl5peEV4TD230GNRG2lwhwd0iKiLIpoyB3u4U+DBJo7U1pQZSIJXsgz 5ZogHwpYsk90JpnmH5B8kNdvLL5PSFg= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:29 2026 by rpki-client