$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493f1833-6d1d-32c8-b906-96fedaabf1df.roa File: 493f1833-6d1d-32c8-b906-96fedaabf1df.roa (raw, json) Hash identifier: 5b9XOFCONK+UYl3/q9qNUGXtPQkW6CxcZ8xmZPPAGxI= Subject key identifier: 3B:D4:E2:46:9F:0A:3F:E0:48:05:08:D4:08:37:04:4D:F6:84:B3:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BAE95D225467187FD7E740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493f1833-6d1d-32c8-b906-96fedaabf1df.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 207.91.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:e9:5d:22:54:67:18:7f:d7:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4bd9b649-400b-4dd9-9e01-5b9889d942cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e5:62:7c:b9:17:bd:d4:6c:27:16:ed:52:7a: e9:71:b6:4a:e2:50:7d:fd:3d:b0:b6:99:c5:f4:79: 20:14:49:a6:de:e9:1c:19:a7:75:0b:2f:97:ee:66: 2d:78:26:a8:78:a0:a6:a7:6e:ef:10:33:e3:e2:78: 1b:9a:dc:f1:d5:7e:c6:95:35:73:66:b0:91:0e:37: d8:8b:de:77:d4:3b:9e:e7:f9:01:e9:ad:7d:54:a8: 09:9e:51:c7:6b:26:47:e4:d8:4b:57:00:5f:8f:f7: a3:59:4d:4e:58:4a:c0:73:d9:24:1a:aa:f3:7e:2e: 01:dc:16:06:21:b2:8e:4e:1a:5a:ac:74:19:0c:9a: f3:e3:78:79:15:31:ad:55:da:5c:ef:f3:e3:db:d0: 53:d1:90:c6:4e:f3:62:21:e7:a2:79:d8:56:4c:0d: da:71:9f:f2:70:df:4b:72:03:2b:64:19:78:d4:23: 46:f8:22:b9:e9:f9:a5:7e:f5:d6:e3:54:da:55:02: 16:3d:1e:21:d5:32:87:5a:87:49:b5:5c:d2:ce:16: 9c:fd:aa:66:67:d1:0b:30:7e:b1:76:89:f0:5d:ca: 92:df:cc:c1:b2:97:f4:4c:7b:17:1f:86:ff:64:42: c4:11:84:f5:46:9c:e8:96:53:e1:29:9e:30:aa:b7: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D4:E2:46:9F:0A:3F:E0:48:05:08:D4:08:37:04:4D:F6:84:B3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493f1833-6d1d-32c8-b906-96fedaabf1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.91.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:59:91:48:fa:9d:09:d1:1f:0b:6c:c1:34:7a:35:0b:71:61: 22:bb:9c:0e:ee:c9:fd:9b:22:e2:23:e8:f6:cd:b2:74:ec:73: bf:22:f1:41:90:39:21:5e:9e:12:45:a6:0b:61:24:0c:82:a3: 23:d7:75:7e:4f:30:b3:c0:60:97:e8:ee:7d:57:11:a3:b8:9c: ac:72:5c:dc:53:63:c3:74:a3:34:f5:19:f8:72:bb:ac:7c:7f: 2c:90:aa:b2:da:47:76:c0:5c:e5:4b:4a:3f:a3:8a:13:38:8f: 2f:5b:98:48:70:c3:06:03:2d:47:70:32:e4:b6:05:ce:3b:17: 10:ff:72:e1:7c:ac:d3:90:c6:7f:9a:d4:f1:b7:8a:73:aa:ae: 2a:95:9b:a2:7d:74:21:b9:42:67:74:85:5d:b8:1c:ec:16:0d: db:c4:e8:32:92:b2:c7:1b:cc:92:12:01:c9:e0:dc:d2:05:6b: 7f:6a:26:e3:c4:65:56:f2:67:2b:d4:37:5f:5e:bf:4e:56:3b: e8:9d:be:16:3d:aa:dc:d1:11:1b:49:35:ae:07:1c:70:e8:ac: f9:0e:5a:89:ee:11:8e:ae:99:0d:53:b4:56:b6:2b:28:09:4c: 74:ad:a8:f2:67:ef:93:9b:f9:ca:a0:83:d6:63:bd:66:b3:6f: 20:34:6e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuuldIlRnGH/X50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NGJkOWI2NDktNDAwYi00ZGQ5LTllMDEtNWI5ODg5ZDk0MmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+VifLkXvdRsJxbtUnrpcbZK4lB9/T2wtpnF 9HkgFEmm3ukcGad1Cy+X7mYteCaoeKCmp27vEDPj4ngbmtzx1X7GlTVzZrCRDjfY i9531Due5/kB6a19VKgJnlHHayZH5NhLVwBfj/ejWU1OWErAc9kkGqrzfi4B3BYG IbKOThparHQZDJrz43h5FTGtVdpc7/Pj29BT0ZDGTvNiIeeiedhWTA3acZ/ycN9L cgMrZBl41CNG+CK56fmlfvXW41TaVQIWPR4h1TKHWodJtVzSzhac/apmZ9ELMH6x donwXcqS38zBspf0THsXH4b/ZELEEYT1RpzollPhKZ4wqrddMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvU4kafCj/gSAUI1Ag3BE32hLNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDkzZjE4MzMtNmQxZC0z MmM4LWI5MDYtOTZmZWRhYWJmMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz1soMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5ZkUj6nQnRHwtswTR6NQtxYSK7nA7uyf2bIuIj6PbNsnTsc78i8UGQ OSFenhJFpgthJAyCoyPXdX5PMLPAYJfo7n1XEaO4nKxyXNxTY8N0ozT1Gfhyu6x8 fyyQqrLaR3bAXOVLSj+jihM4jy9bmEhwwwYDLUdwMuS2Bc47FxD/cuF8rNOQxn+a 1PG3inOqriqVm6J9dCG5Qmd0hV24HOwWDdvE6DKSsscbzJISAcng3NIFa39qJuPE ZVbyZyvUN19ev05WO+idvhY9qtzRERtJNa4HHHDorPkOWonuEY6umQ1TtFa2KygJ THStqPJn75Ob+cqgg9ZjvWazbyA0bqM= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:33 2026 by rpki-client