$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8520335c-5409-30cc-874f-c7fd7d7b6a29.roa File: 8520335c-5409-30cc-874f-c7fd7d7b6a29.roa (raw, json) Hash identifier: pmWE9ZA4dXJuCnVLmWL3l37yxnxvBNzdn17hFGVWcNA= Subject key identifier: 01:A9:FE:DB:91:78:25:F9:90:31:FE:B3:A2:17:BD:5B:54:FB:58:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BAE85F68BC3B20CCBC9698 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8520335c-5409-30cc-874f-c7fd7d7b6a29.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 64.24.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:e8:5f:68:bc:3b:20:cc:bc:96:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=d702845b-9730-4b08-9425-e6dd1393d390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1b:6f:c5:a4:de:95:9c:43:d6:f9:3c:dc:6d: 7c:a0:44:3d:13:35:a0:f2:fc:aa:18:16:9f:45:67: 8e:1f:99:97:9d:62:be:3d:95:91:7a:bf:c9:12:31: 26:70:eb:bb:97:f1:e1:52:c6:7c:83:28:51:79:79: f1:59:b0:65:4a:af:32:f9:bd:96:93:16:73:62:80: 52:42:1e:61:52:f8:a6:5f:a6:6b:57:07:a7:e8:6d: 1a:51:11:6a:fd:6b:87:61:dd:d7:01:0a:ac:8f:eb: de:75:f5:f2:e5:e6:9b:89:9f:a5:cf:12:c7:8d:38: 7c:ea:87:57:ce:7c:1d:a9:4b:34:0f:b8:47:a8:3c: e8:4e:9a:a0:7b:df:85:af:32:15:b7:27:fc:b7:ea: a3:12:1f:e6:09:db:63:7e:82:85:f9:9b:4a:9c:3b: 65:ad:13:67:0b:ff:95:37:a1:00:04:c9:5f:1d:44: 04:0f:03:2b:b7:d7:02:5b:3a:46:49:89:ff:3d:ec: 93:17:2f:ca:ee:7a:49:87:b3:60:b0:12:a7:50:0f: 27:eb:d9:65:c2:ae:ac:73:7e:01:4d:0c:f7:ab:1c: 0b:8f:97:3a:31:ff:cf:66:ac:0f:3d:bf:18:0f:c6: 67:73:7f:8a:7b:70:05:07:76:88:4d:02:cd:63:45: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A9:FE:DB:91:78:25:F9:90:31:FE:B3:A2:17:BD:5B:54:FB:58:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8520335c-5409-30cc-874f-c7fd7d7b6a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f0:94:1c:f9:02:f7:a3:a9:d0:1b:75:3c:15:86:01:03:03: 51:67:d8:20:c3:d3:69:fc:67:43:03:b9:75:1e:d7:8d:2a:b4: 9a:3a:6c:cd:64:b5:a5:d2:aa:d7:6d:f8:37:33:1b:8c:f5:ad: 7c:16:fe:bf:d1:f7:e1:b8:ca:c8:b7:e1:c9:c7:59:d4:a4:4a: 53:e6:6b:12:18:f1:44:fe:76:12:f0:f3:a1:59:4e:d6:9b:ce: db:a8:cb:eb:32:eb:b0:74:a7:56:f5:22:28:28:a3:20:cf:59: 5a:fc:16:2b:e7:21:c1:f5:54:64:88:11:7d:2b:b0:e9:83:eb: a8:0e:88:ff:c3:bb:40:a2:be:38:4f:de:d2:a2:f3:cb:0b:34: e9:c4:36:cc:91:d1:d8:c4:9f:04:11:32:d8:46:54:75:01:63: d5:1c:bb:8e:88:f4:57:69:f0:6e:6d:6a:d7:b5:22:c7:b3:33: 8d:39:c9:0a:69:47:9b:15:7c:5e:7a:86:c0:d7:2b:cc:17:36: 45:1b:f3:4a:8a:9a:67:f5:8c:2c:d9:27:83:b3:11:4a:41:31: ad:ed:31:f6:04:ad:e6:f7:24:ac:f1:83:e8:db:a1:b9:76:5a: dd:9a:8a:cc:c5:61:5b:76:18:22:17:5e:ce:8d:bd:ad:3d:c9: 49:b9:e9:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuuhfaLw7IMy8lpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZDcwMjg0NWItOTczMC00YjA4LTk0MjUtZTZkZDEzOTNkMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhtvxaTelZxD1vk83G18oEQ9EzWg8vyqGBaf RWeOH5mXnWK+PZWRer/JEjEmcOu7l/HhUsZ8gyhReXnxWbBlSq8y+b2WkxZzYoBS Qh5hUvimX6ZrVwen6G0aURFq/WuHYd3XAQqsj+vedfXy5eabiZ+lzxLHjTh86odX znwdqUs0D7hHqDzoTpqge9+FrzIVtyf8t+qjEh/mCdtjfoKF+ZtKnDtlrRNnC/+V N6EABMlfHUQEDwMrt9cCWzpGSYn/PeyTFy/K7npJh7NgsBKnUA8n69llwq6sc34B TQz3qxwLj5c6Mf/PZqwPPb8YD8Znc3+Ke3AFB3aITQLNY0WeiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGp/tuReCX5kDH+s6IXvVtU+1gJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODUyMDMzNWMtNTQwOS0z MGNjLTg3NGYtYzdmZDdkN2I2YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/wlBz5AvejqdAbdTwVhgEDA1Fn2CDD02n8Z0MDuXUe140qtJo6bM1k taXSqtdt+DczG4z1rXwW/r/R9+G4ysi34cnHWdSkSlPmaxIY8UT+dhLw86FZTtab ztuoy+sy67B0p1b1IigooyDPWVr8FivnIcH1VGSIEX0rsOmD66gOiP/Du0CivjhP 3tKi88sLNOnENsyR0djEnwQRMthGVHUBY9Ucu46I9Fdp8G5tate1IsezM405yQpp R5sVfF56hsDXK8wXNkUb80qKmmf1jCzZJ4OzEUpBMa3tMfYEreb3JKzxg+jbobl2 Wt2aiszFYVt2GCIXXs6Nva09yUm56Zw= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:33 2026 by rpki-client