$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f238683-1775-3a8c-b8e4-f517c9d11d99.roa File: 9f238683-1775-3a8c-b8e4-f517c9d11d99.roa (raw, json) Hash identifier: 6RVcSFJXUGWcXDR+Wdk8zliowFeGGIgDOM53XOanPNM= Subject key identifier: 3C:EB:53:29:B9:99:37:78:DC:A7:A8:36:00:91:FD:0C:E5:D2:8C:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BA350EDE3524C3E6620080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f238683-1775-3a8c-b8e4-f517c9d11d99.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 162.39.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:35:0e:de:35:24:c3:e6:62:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=66ff5c7c-7194-4c47-8b5f-d22fb46d1fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:28:a3:36:1b:a6:6c:5c:5a:91:1a:55:a4: 58:f1:70:e6:d1:a8:59:c1:cc:1a:32:af:25:6c:5e: b8:7c:d6:43:8f:cd:ef:d9:a3:ab:d4:fb:c0:81:8b: 26:33:88:b7:cb:55:5c:62:3e:9e:a0:7f:33:2a:41: 13:d5:8a:74:db:31:99:d1:73:42:4e:df:38:a1:2c: 56:23:46:af:5c:14:75:7a:76:75:c1:ff:6a:ad:95: 3c:7d:ee:2f:18:14:c7:8a:90:14:01:55:7c:13:87: b7:4c:86:11:d2:e9:f2:3d:9c:7f:c0:b4:6c:34:f0: ff:05:56:93:80:94:a5:0e:f4:b3:44:61:41:cd:c9: 02:9e:66:ff:82:ac:60:98:26:8e:3c:94:be:3e:27: 92:34:f0:39:f5:7a:c5:30:31:d3:b4:40:ef:2a:f8: a0:c5:74:07:cd:5b:81:53:72:b0:34:6a:57:86:b0: cf:45:06:4a:16:dc:c9:3c:be:cd:79:2e:bb:d9:71: 40:93:92:cc:7b:24:4f:da:e4:63:40:a2:3a:1c:2c: 7c:55:60:81:2a:19:89:de:7f:15:dd:ee:d6:0e:6c: 34:78:f4:0b:a5:62:a1:e4:73:40:09:ff:ec:ba:d4: 94:eb:f0:91:d9:ee:ca:b7:6e:df:d1:61:6e:f0:dc: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EB:53:29:B9:99:37:78:DC:A7:A8:36:00:91:FD:0C:E5:D2:8C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f238683-1775-3a8c-b8e4-f517c9d11d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.39.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b7:13:8d:2b:52:46:9e:80:ab:fa:55:89:56:3f:9c:a6:82: 12:60:7c:60:02:e8:89:75:81:d5:4d:1c:ea:0a:87:01:10:46: d4:65:20:53:ae:b8:d4:94:f5:6e:66:ac:8e:85:6f:06:16:73: 48:ee:ee:42:d8:f1:24:2e:ab:84:98:50:04:7e:fe:97:c1:9e: 6b:4a:d9:bd:18:63:f5:15:e4:d0:7c:c9:de:ff:98:14:f8:46: 59:a7:8f:6c:89:7f:05:c5:b4:1d:36:05:d3:91:98:a1:e3:61: 3f:c6:6a:76:3e:88:27:3c:f2:81:1a:78:3b:e9:0b:b7:5b:7b: 39:ad:02:02:ad:cc:1b:64:56:ee:50:cf:56:db:08:49:b6:44: c0:33:e5:e2:62:81:79:3a:b1:4c:67:fe:4d:db:5b:5f:b7:37: 55:e6:7e:7b:69:9d:b3:1f:f9:85:85:91:ce:f3:30:c5:48:d6: 1a:83:b2:5a:6b:5a:05:f5:16:12:a6:b9:9a:bc:ea:54:6e:58: 17:d5:1d:dd:c9:ab:07:58:8a:59:f1:0e:08:73:77:aa:38:ad: 9f:ed:5e:e7:52:57:64:63:9e:3d:ae:9e:58:c9:e7:a2:89:1f: 64:22:85:40:0a:67:d2:08:1d:40:73:aa:6a:79:00:6c:c8:18: fe:7d:da:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujUO3jUkw+ZiAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NjZmZjVjN2MtNzE5NC00YzQ3LThiNWYtZDIyZmI0NmQxZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZAoozYbpmxcWpEaVaRY8XDm0ahZwcwaMq8l bF64fNZDj83v2aOr1PvAgYsmM4i3y1VcYj6eoH8zKkET1Yp02zGZ0XNCTt84oSxW I0avXBR1enZ1wf9qrZU8fe4vGBTHipAUAVV8E4e3TIYR0unyPZx/wLRsNPD/BVaT gJSlDvSzRGFBzckCnmb/gqxgmCaOPJS+PieSNPA59XrFMDHTtEDvKvigxXQHzVuB U3KwNGpXhrDPRQZKFtzJPL7NeS672XFAk5LMeyRP2uRjQKI6HCx8VWCBKhmJ3n8V 3e7WDmw0ePQLpWKh5HNACf/sutSU6/CR2e7Kt27f0WFu8Nw+/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzrUym5mTd43KeoNgCR/Qzl0owyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWYyMzg2ODMtMTc3NS0z YThjLWI4ZTQtZjUxN2M5ZDExZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoifSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC3E40rUkaegKv6VYlWP5ymghJgfGAC6Il1gdVNHOoKhwEQRtRlIFOu uNSU9W5mrI6FbwYWc0ju7kLY8SQuq4SYUAR+/pfBnmtK2b0YY/UV5NB8yd7/mBT4 Rlmnj2yJfwXFtB02BdORmKHjYT/GanY+iCc88oEaeDvpC7dbezmtAgKtzBtkVu5Q z1bbCEm2RMAz5eJigXk6sUxn/k3bW1+3N1XmfntpnbMf+YWFkc7zMMVI1hqDslpr WgX1FhKmuZq86lRuWBfVHd3JqwdYilnxDghzd6o4rZ/tXudSV2Rjnj2unljJ56KJ H2QihUAKZ9IIHUBzqmp5AGzIGP592uY= -----END CERTIFICATE-----Generated at Mon Apr 13 13:08:18 2026 by rpki-client