$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d3930bd-105f-3853-afe2-8d5d7f5e6311.roa File: 8d3930bd-105f-3853-afe2-8d5d7f5e6311.roa (raw, json) Hash identifier: JPaRkBRIi6EiX6+c9Z/+TC1vrtSpbAV+eAiLu+c3mTw= Subject key identifier: 13:F5:D1:75:5F:93:C7:20:8F:8D:7D:E8:16:0A:21:38:DE:BF:42:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A9C156343ACDBB8B98E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d3930bd-105f-3853-afe2-8d5d7f5e6311.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 64.24.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9c:15:63:43:ac:db:b8:b9:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=dee063e4-4c27-44af-a2a3-5d7cb98d3bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c9:a8:84:a7:43:e8:09:d7:21:68:4f:3d:95: 7c:c6:19:b2:81:4a:7e:34:c4:ef:3a:7a:47:6c:76: 95:09:e3:cb:41:39:40:48:d2:71:bd:23:6b:ec:4e: 9d:ed:2a:6f:eb:bd:29:e7:ed:d4:48:e7:31:5b:a0: c3:cb:16:a4:84:54:dc:b5:18:47:17:35:bc:19:e4: b1:e5:9c:b9:8e:70:cc:cd:08:6a:c4:3b:73:28:52: bb:39:00:8a:95:3f:14:28:6b:65:bf:92:40:1c:c1: 0b:c2:d5:ae:34:de:8f:d8:4f:42:29:6f:bd:4a:a8: 16:57:f6:fc:03:4d:d6:d9:c8:98:03:8a:59:56:cf: d9:30:94:46:04:95:26:af:82:42:09:69:09:82:c6: f7:c7:74:2f:db:fe:35:fa:41:f8:2b:b3:f6:5a:bc: bd:c4:b6:63:0a:b3:d7:da:c7:00:84:c9:d0:9a:c2: 77:ee:5e:e4:82:fe:08:c9:e0:67:ce:7d:3f:aa:f6: 0e:4d:8b:4f:13:c0:28:b4:69:be:2a:34:59:10:53: 55:5e:7c:8d:88:c4:f8:43:ce:94:e7:60:54:c2:07: ac:73:47:7f:02:7a:19:7b:23:4b:c8:7f:5a:88:30: 4b:9f:70:cc:e3:7e:87:c9:ce:c9:1e:be:0c:4f:81: eb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F5:D1:75:5F:93:C7:20:8F:8D:7D:E8:16:0A:21:38:DE:BF:42:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d3930bd-105f-3853-afe2-8d5d7f5e6311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c3:fe:2f:aa:50:8a:d9:71:c4:90:01:af:16:36:76:53:bd: fe:40:b5:ff:ee:d5:17:f6:9f:3a:22:b2:f5:bc:6e:fd:93:39: 6b:0e:c2:ca:af:de:6e:42:67:55:63:39:fb:d6:83:4b:09:4a: 8b:4b:f6:3b:79:e6:b1:27:ec:3d:87:19:15:18:6e:09:c4:0a: a0:c6:fa:17:0a:19:00:4d:89:a2:44:53:f7:8f:46:e9:f0:22: c7:b7:b8:44:91:a9:5b:51:7d:c5:69:e0:ef:df:0c:99:a2:03: 2a:d0:db:00:1f:80:6a:ca:2c:fe:80:5d:d3:a3:57:93:7d:0d: 82:3d:e9:aa:3d:3d:d9:db:27:4c:1f:45:11:b8:6c:3f:11:46: ce:56:72:4a:8c:e1:b2:8b:d4:30:33:f1:45:22:c0:35:eb:0e: 12:82:a2:02:a4:d9:9c:41:6c:dd:b3:1b:06:fd:1f:0e:65:18: 2c:08:f9:73:cf:31:d2:bb:5f:71:29:fe:18:0e:7e:9c:e9:3c: 85:43:89:96:18:4b:fc:1b:ee:2b:71:b6:57:75:17:7f:75:fa: a4:1e:e5:a1:e5:03:f7:35:dd:6c:a8:90:2c:47:d6:d9:7c:1e: 38:71:9f:1b:43:0a:b0:af:8a:84:31:42:a5:7e:ee:8e:45:8b: 9d:75:ac:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpwVY0Os27i5jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZGVlMDYzZTQtNGMyNy00NGFmLWEyYTMtNWQ3Y2I5OGQzYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsmohKdD6AnXIWhPPZV8xhmygUp+NMTvOnpH bHaVCePLQTlASNJxvSNr7E6d7Spv670p5+3USOcxW6DDyxakhFTctRhHFzW8GeSx 5Zy5jnDMzQhqxDtzKFK7OQCKlT8UKGtlv5JAHMELwtWuNN6P2E9CKW+9SqgWV/b8 A03W2ciYA4pZVs/ZMJRGBJUmr4JCCWkJgsb3x3Qv2/41+kH4K7P2Wry9xLZjCrPX 2scAhMnQmsJ37l7kgv4IyeBnzn0/qvYOTYtPE8AotGm+KjRZEFNVXnyNiMT4Q86U 52BUwgesc0d/AnoZeyNLyH9aiDBLn3DM436Hyc7JHr4MT4HrEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBP10XVfk8cgj4196BYKITjev0LRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGQzOTMwYmQtMTA1Zi0z ODUzLWFmZTItOGQ1ZDdmNWU2MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzD/i+qUIrZccSQAa8WNnZTvf5Atf/u1Rf2nzoisvW8bv2TOWsOwsqv 3m5CZ1VjOfvWg0sJSotL9jt55rEn7D2HGRUYbgnECqDG+hcKGQBNiaJEU/ePRunw Ise3uESRqVtRfcVp4O/fDJmiAyrQ2wAfgGrKLP6AXdOjV5N9DYI96ao9PdnbJ0wf RRG4bD8RRs5WckqM4bKL1DAz8UUiwDXrDhKCogKk2ZxBbN2zGwb9Hw5lGCwI+XPP MdK7X3Ep/hgOfpzpPIVDiZYYS/wb7itxtld1F391+qQe5aHlA/c13WyokCxH1tl8 HjhxnxtDCrCvioQxQqV+7o5Fi511rIk= -----END CERTIFICATE-----Generated at Fri Apr 17 11:58:09 2026 by rpki-client