$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa File: 64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa (raw, json) Hash identifier: Y9Y9QWrM1TxUL+icUA9tmn9xQ7533CMGjXDGLgzJaFA= Subject key identifier: FA:0D:64:6A:6B:4B:00:AC:0B:E0:5A:C0:11:96:5E:0E:EA:A0:6C:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB4C68100DEF00A496040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 151.213.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b4:c6:81:00:de:f0:0a:49:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2ce4b713-aed7-481e-a45c-98ad819b7b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:00:9a:2f:be:59:b1:cb:29:1e:3b:64:24: 4e:88:4e:27:3f:c5:47:65:3f:1f:63:21:8f:08:ab: 41:c7:4f:bf:a9:4a:4d:b5:d8:26:9d:f4:ef:1b:8c: 28:f9:5b:49:f0:75:bd:d7:e1:31:a6:a2:af:58:ec: 21:fa:16:31:45:ea:e3:3e:31:80:17:6e:0a:df:42: a9:9b:cb:47:af:1a:ff:23:09:d4:6d:24:75:0e:6d: 41:02:f4:6a:00:2e:0b:7b:cb:92:44:e7:13:2b:b3: e0:c0:b5:6f:a4:2e:23:22:a1:a1:43:c6:77:38:5f: 5e:94:96:4b:f4:06:22:07:24:bd:c7:cc:7e:b5:7c: 2a:5d:7d:df:96:a4:dc:4e:09:b0:0e:84:a1:75:45: 92:38:a8:76:d2:0f:f9:c3:ba:06:7d:fe:9d:f2:48: bc:4a:11:ad:3b:b6:01:93:29:1c:4f:73:ba:96:13: 8c:97:c9:cf:39:65:af:7c:c5:40:da:e8:a2:63:4c: 39:74:00:af:62:52:86:23:37:5b:db:52:a7:aa:e1: 53:85:1b:3e:72:9a:f6:13:47:18:c7:6f:4d:f7:c0: bf:49:72:02:ec:5d:01:fb:f4:2f:9d:5e:9d:eb:1a: 83:b2:71:b6:05:05:7e:fc:9b:fd:a4:3a:4b:e3:f0: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0D:64:6A:6B:4B:00:AC:0B:E0:5A:C0:11:96:5E:0E:EA:A0:6C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:73:e2:1b:e9:95:c3:d0:78:f6:71:d7:fa:a4:a6:ea:87:f2: 05:98:14:87:44:c6:06:2f:67:07:71:ee:e5:af:67:38:ca:6c: ad:3c:02:8f:c9:80:de:e5:47:aa:30:33:77:09:7e:c1:5f:10: 4e:5b:79:24:b1:aa:47:e4:05:1b:77:f4:3d:60:4d:49:bd:c6: 88:93:f0:49:20:85:b1:73:84:7c:65:82:f1:f5:bc:db:64:20: 13:61:4e:92:b4:c7:ae:e4:14:95:3e:14:92:39:9f:f9:0d:1e: e1:4e:b9:61:9e:72:42:d4:57:18:8b:9b:ac:92:13:6b:f2:ff: 7f:4b:58:25:c4:18:3e:fa:7b:8a:90:c5:55:ee:68:9b:a5:49: e4:a5:e1:83:7d:63:d2:12:87:5c:29:c2:08:89:e0:34:a0:91: c3:9a:80:c1:a1:5f:7f:3f:63:48:56:8c:1c:61:ab:d5:dd:c4: 2e:d9:51:42:25:eb:66:96:4f:0f:93:91:cc:be:92:40:26:7b: cf:7d:6d:20:94:c3:6a:5c:8a:c8:0c:6c:32:ef:29:ac:23:02: 4d:e0:cb:4b:7a:3e:65:64:58:fc:cd:a9:dc:3c:f8:7d:f7:a9: f0:c9:66:c7:72:df:48:0e:97:fc:ea:4c:cd:ba:f3:7f:8d:09: d3:60:d4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLTGgQDe8ApJYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmNlNGI3MTMtYWVkNy00ODFlLWE0NWMtOThhZDgxOWI3YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaIAmi++WbHLKR47ZCROiE4nP8VHZT8fYyGP CKtBx0+/qUpNtdgmnfTvG4wo+VtJ8HW91+ExpqKvWOwh+hYxRerjPjGAF24K30Kp m8tHrxr/IwnUbSR1Dm1BAvRqAC4Le8uSROcTK7PgwLVvpC4jIqGhQ8Z3OF9elJZL 9AYiByS9x8x+tXwqXX3flqTcTgmwDoShdUWSOKh20g/5w7oGff6d8ki8ShGtO7YB kykcT3O6lhOMl8nPOWWvfMVA2uiiY0w5dACvYlKGIzdb21KnquFThRs+cpr2E0cY x29N98C/SXIC7F0B+/QvnV6d6xqDsnG2BQV+/Jv9pDpL4/CP8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoNZGprSwCsC+BawBGWXg7qoGxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRkN2JjM2QtMDFmYS0z NzYxLWFhMGQtMDVjYmNkMWFkMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl9XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpz4hvplcPQePZx1/qkpuqH8gWYFIdExgYvZwdx7uWvZzjKbK08Ao/J gN7lR6owM3cJfsFfEE5beSSxqkfkBRt39D1gTUm9xoiT8EkghbFzhHxlgvH1vNtk IBNhTpK0x67kFJU+FJI5n/kNHuFOuWGeckLUVxiLm6ySE2vy/39LWCXEGD76e4qQ xVXuaJulSeSl4YN9Y9ISh1wpwgiJ4DSgkcOagMGhX38/Y0hWjBxhq9XdxC7ZUUIl 62aWTw+Tkcy+kkAme899bSCUw2pcisgMbDLvKawjAk3gy0t6PmVkWPzNqdw8+H33 qfDJZsdy30gOl/zqTM2683+NCdNg1Lk= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:50 2026 by rpki-client