$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ad790f0-7776-3000-9f07-d7b9e124a34f.roa File: 6ad790f0-7776-3000-9f07-d7b9e124a34f.roa (raw, json) Hash identifier: tYT4Db27H0+YNJE93v9JpT7iSfxFKICU/Jl3qgE3HgY= Subject key identifier: BC:27:0F:B8:9D:B8:32:42:E6:7B:7B:B1:51:F4:06:76:0A:30:B1:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BAE97E2FF984380DDA1DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ad790f0-7776-3000-9f07-d7b9e124a34f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 216.96.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:e9:7e:2f:f9:84:38:0d:da:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b33bce9e-f890-4c0d-9f20-31934b880612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3b:01:db:7f:6d:81:a1:7e:96:25:44:48:32: d6:e4:cc:0c:de:b4:05:7c:57:ed:a8:33:b7:d9:c9: 5b:ce:cc:80:31:74:23:e7:e1:ca:bd:07:78:16:a5: d4:06:c9:b4:3a:f0:cc:a1:cb:94:56:4a:81:1a:9c: f2:5f:23:b4:4c:aa:83:8d:d5:ab:68:a6:eb:7a:8e: 4d:7a:f8:23:46:3e:31:a2:10:13:c7:88:24:de:a2: a3:5c:de:c6:1b:57:ac:19:4e:e9:71:23:0b:01:40: 38:da:ca:6a:8a:ff:63:71:71:87:63:73:d1:7d:ff: 3d:39:ce:c3:a9:9c:d0:69:fb:3e:de:c5:59:00:73: dd:94:ab:ca:d4:8b:c0:92:98:63:d0:bb:38:e5:53: cf:b3:c0:9c:93:56:64:29:fc:90:11:43:0d:b1:76: a4:af:34:7a:aa:4a:2b:06:79:37:11:ab:60:28:8e: 64:b3:7d:7b:db:a6:a7:e8:41:80:42:4b:ef:d4:aa: c4:ee:2b:92:e5:20:79:58:8e:64:3f:64:c6:8c:18: 61:1a:e3:85:f5:06:86:72:3d:2c:93:73:61:49:50: 72:b8:1d:77:b5:98:9f:5c:fb:d0:d6:f3:f1:c1:a1: 3a:ee:96:ae:e8:79:f3:f6:74:b7:a0:73:66:e9:02: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:27:0F:B8:9D:B8:32:42:E6:7B:7B:B1:51:F4:06:76:0A:30:B1:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ad790f0-7776-3000-9f07-d7b9e124a34f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c1:4c:f3:68:bf:63:50:47:5a:56:f3:55:53:43:e4:98:12: b5:2e:fe:60:94:1c:ea:a0:a8:07:fc:5e:91:f2:63:3e:06:07: 2c:bb:e4:21:47:a0:0d:14:ab:da:20:a6:94:e5:7e:cc:32:3b: d4:25:23:58:97:00:81:96:74:11:2a:cb:b3:40:c7:3a:f1:63: 03:14:0a:99:8b:85:1c:55:5c:33:a5:87:2b:62:55:ff:b0:0c: e9:9a:d3:24:57:e4:2c:ca:4e:18:29:39:ff:c3:c9:02:1c:26: 2a:15:91:cd:b7:60:7b:dc:a5:96:f4:10:da:f5:65:77:fe:63: 54:1a:3e:29:db:86:78:30:ce:d7:e8:c6:b4:fe:9e:5c:ad:09: ba:56:4e:6e:cf:e2:7a:93:5a:56:86:a1:5a:39:72:b4:21:53: a9:a4:17:b9:b2:a6:b9:d8:d5:c3:cd:28:ff:f6:ea:0e:ea:1c: e3:ed:f6:6d:4f:5e:68:01:a7:ac:0e:39:54:07:9e:eb:90:37: fe:c6:60:1f:53:60:cb:ad:84:49:9f:0f:ad:c2:2f:45:d8:2f: 4b:c1:21:19:47:5d:e6:86:6a:f5:9f:2e:19:c2:6c:6e:36:dd: e9:f1:83:47:46:6b:5c:50:1f:36:b0:b6:ab:09:aa:53:ff:90: 36:3f:dc:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuul+L/mEOA3aHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjMzYmNlOWUtZjg5MC00YzBkLTlmMjAtMzE5MzRiODgwNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjsB239tgaF+liVESDLW5MwM3rQFfFftqDO3 2clbzsyAMXQj5+HKvQd4FqXUBsm0OvDMocuUVkqBGpzyXyO0TKqDjdWraKbreo5N evgjRj4xohATx4gk3qKjXN7GG1esGU7pcSMLAUA42spqiv9jcXGHY3PRff89Oc7D qZzQafs+3sVZAHPdlKvK1IvAkphj0Ls45VPPs8Cck1ZkKfyQEUMNsXakrzR6qkor Bnk3EatgKI5ks31726an6EGAQkvv1KrE7iuS5SB5WI5kP2TGjBhhGuOF9QaGcj0s k3NhSVByuB13tZifXPvQ1vPxwaE67pau6Hnz9nS3oHNm6QJ5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwnD7iduDJC5nt7sVH0BnYKMLH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmFkNzkwZjAtNzc3Ni0z MDAwLTlmMDctZDdiOWUxMjRhMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTBTPNov2NQR1pW81VTQ+SYErUu/mCUHOqgqAf8XpHyYz4GByy75CFH oA0Uq9ogppTlfswyO9QlI1iXAIGWdBEqy7NAxzrxYwMUCpmLhRxVXDOlhytiVf+w DOma0yRX5CzKThgpOf/DyQIcJioVkc23YHvcpZb0ENr1ZXf+Y1QaPinbhngwztfo xrT+nlytCbpWTm7P4nqTWlaGoVo5crQhU6mkF7myprnY1cPNKP/26g7qHOPt9m1P XmgBp6wOOVQHnuuQN/7GYB9TYMuthEmfD63CL0XYL0vBIRlHXeaGavWfLhnCbG42 3enxg0dGa1xQHzawtqsJqlP/kDY/3Ig= -----END CERTIFICATE-----Generated at Mon Apr 13 11:42:10 2026 by rpki-client