$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c73a4710-df08-30ff-8c3e-3a6cb0a9ac37.roa File: c73a4710-df08-30ff-8c3e-3a6cb0a9ac37.roa (raw, json) Hash identifier: +MJvUCGZ0c8WjxYeaX4KJQtSodAl7312DFTbX5kHI2o= Subject key identifier: B7:00:D7:80:A3:67:AE:01:98:4E:D6:48:2A:94:82:C3:93:34:BB:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BC1EF9333501FF363A5980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c73a4710-df08-30ff-8c3e-3a6cb0a9ac37.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 216.96.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:1e:f9:33:35:01:ff:36:3a:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3f8b37ac-d276-4c30-a837-8261784d26bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:cf:6a:87:2c:9b:bf:18:47:0c:d5:3c:32: ff:10:53:13:f9:4a:01:08:21:81:94:0c:b3:ed:87: 48:f5:82:37:b3:2f:70:ef:e1:75:b3:d0:6c:42:4d: 55:48:07:a9:2d:25:4e:e1:a1:68:41:20:78:1b:c6: ae:1c:14:45:c5:94:c2:a1:e6:eb:fb:07:80:75:05: ce:bc:79:9f:7a:54:e2:42:ff:cf:62:8c:b4:69:1e: 1c:53:3c:ba:74:04:02:34:71:31:ea:c8:01:43:37: 51:9e:a5:6d:bc:e5:cb:c6:5d:dc:6d:af:8c:a4:62: 40:9b:07:a2:a0:11:a0:62:e9:9b:dc:95:b3:e1:8a: a6:c3:82:be:77:26:91:31:b2:7b:ef:b1:2a:05:39: 3b:ec:19:9e:77:d8:d3:95:0f:c8:8a:84:8c:23:00: b7:40:3c:87:7e:cd:82:03:02:d7:ee:22:60:ef:d7: 26:25:0e:91:3d:84:d6:80:5e:81:d3:b8:28:d4:f0: 8c:71:08:c8:b7:bf:7d:7e:35:f9:8b:62:3c:84:d5: 3e:f2:4d:0e:23:f8:c5:f6:f4:6a:1b:00:08:25:c3: 4f:1e:58:7f:66:c0:53:59:24:0b:94:e4:fb:0d:98: 6f:f9:be:a6:94:60:19:ad:4e:52:04:17:f9:33:f0: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:00:D7:80:A3:67:AE:01:98:4E:D6:48:2A:94:82:C3:93:34:BB:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c73a4710-df08-30ff-8c3e-3a6cb0a9ac37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:4f:ee:ed:b7:4f:fa:87:a9:02:88:0f:9b:51:9b:09:e4:07: f2:81:ad:d8:44:ac:d1:78:17:c3:7d:e0:f1:8e:f7:09:06:74: dd:8c:a7:e8:ab:f1:6c:6a:cb:f3:68:61:99:e2:94:a8:cd:ae: f3:1c:68:ba:af:ce:aa:0a:e4:a6:d0:87:bc:e2:19:21:da:97: 25:d5:d3:51:79:e1:72:65:32:cb:c9:e5:09:33:fb:84:61:90: 98:f1:a3:00:7b:4d:0e:9d:0f:59:40:b3:70:63:71:8f:20:b8: a8:c9:36:d3:33:52:79:9d:a1:ab:da:ff:84:46:8e:84:f0:8b: 52:6a:fb:7a:86:c3:d2:38:c0:b2:d7:15:be:1f:b9:61:a4:0c: 69:a0:38:23:ab:52:62:f7:98:57:c9:ab:90:76:eb:70:bf:69: 2d:a3:69:62:a7:19:e5:ec:fd:91:c0:43:9e:8c:f8:ab:95:61: b6:2b:9d:17:84:dd:7d:3d:fa:47:cf:20:90:81:7f:b9:bf:fb: ee:58:65:17:83:58:4e:25:be:72:7a:a5:55:4a:ce:66:c1:c0: 0c:9b:86:0c:79:79:b9:b7:28:97:33:b9:19:5f:05:5b:4f:32: 51:71:a2:f6:c4:6e:62:15:85:91:86:d1:a3:24:81:76:d2:d1: 49:fc:f7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvB75MzUB/zY6WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk M2Y4YjM3YWMtZDI3Ni00YzMwLWE4MzctODI2MTc4NGQyNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe3Paocsm78YRwzVPDL/EFMT+UoBCCGBlAyz 7YdI9YI3sy9w7+F1s9BsQk1VSAepLSVO4aFoQSB4G8auHBRFxZTCoebr+weAdQXO vHmfelTiQv/PYoy0aR4cUzy6dAQCNHEx6sgBQzdRnqVtvOXLxl3cba+MpGJAmwei oBGgYumb3JWz4Yqmw4K+dyaRMbJ777EqBTk77Bmed9jTlQ/IioSMIwC3QDyHfs2C AwLX7iJg79cmJQ6RPYTWgF6B07go1PCMcQjIt799fjX5i2I8hNU+8k0OI/jF9vRq GwAIJcNPHlh/ZsBTWSQLlOT7DZhv+b6mlGAZrU5SBBf5M/CffQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcA14CjZ64BmE7WSCqUgsOTNLtJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzczYTQ3MTAtZGYwOC0z MGZmLThjM2UtM2E2Y2IwYTlhYzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2GAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVP7u23T/qHqQKID5tRmwnkB/KBrdhErNF4F8N94PGO9wkGdN2Mp+ir 8Wxqy/NoYZnilKjNrvMcaLqvzqoK5KbQh7ziGSHalyXV01F54XJlMsvJ5Qkz+4Rh kJjxowB7TQ6dD1lAs3BjcY8guKjJNtMzUnmdoava/4RGjoTwi1Jq+3qGw9I4wLLX Fb4fuWGkDGmgOCOrUmL3mFfJq5B263C/aS2jaWKnGeXs/ZHAQ56M+KuVYbYrnReE 3X09+kfPIJCBf7m/++5YZReDWE4lvnJ6pVVKzmbBwAybhgx5ebm3KJczuRlfBVtP MlFxovbEbmIVhZGG0aMkgXbS0Un89+0= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:14 2026 by rpki-client