$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa File: ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa (raw, json) Hash identifier: r/yUfjaEpLRChp4j1G+ns0U/uHhhay8n7Cqjt0jQfp4= Subject key identifier: 8D:1B:3F:57:33:4B:15:A6:08:D0:06:72:7C:D6:92:E4:5D:65:78:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1BCB5D99C01C62E3B5A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 216.236.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1b:cb:5d:99:c0:1c:62:e3:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=3c9b50b3-918e-49f8-8655-7733ac05fd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:4b:81:70:5a:c3:09:60:5c:0b:cd:04:e6: 4f:4b:aa:ef:45:f5:26:14:3b:ef:fd:19:36:58:56: 7f:66:44:1b:09:4c:e5:82:fd:14:eb:61:68:a0:1e: ea:5d:8e:83:d0:63:15:e3:2c:75:8f:ee:96:5d:70: 79:28:cf:ca:10:1c:5e:ce:53:de:f0:25:ab:f1:1e: ba:6a:05:7c:8a:01:21:7d:20:aa:89:df:65:1f:7e: 7e:30:3d:42:89:99:b0:ff:ff:74:c2:19:73:3c:28: 0f:4f:86:20:37:1b:d1:ef:e8:02:e7:b6:50:be:5a: 5d:9d:f7:1b:64:33:eb:4d:1e:e5:fd:06:ab:91:61: 38:73:fa:a1:c4:c1:8d:d8:56:0f:0c:ce:2a:92:02: 9a:bc:39:58:a7:d7:d4:0c:14:62:c8:48:1e:91:28: 68:d9:c4:fe:2a:5f:98:6a:3b:1e:06:90:64:e9:97: bf:4b:f3:52:07:14:bb:db:05:d4:f7:67:0e:1a:fe: d9:70:75:e0:d9:06:1a:84:66:00:8f:10:ff:d1:26: fa:16:6f:0d:de:aa:ef:8b:fe:d8:1e:7e:76:b1:cf: 80:8d:33:87:0e:66:26:f9:a6:56:78:4e:d5:e8:d3: 3a:cb:a3:8f:a9:9d:7d:23:3e:95:fd:cb:0a:ef:04: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1B:3F:57:33:4B:15:A6:08:D0:06:72:7C:D6:92:E4:5D:65:78:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.236.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:8a:92:89:73:f9:ab:e7:ae:ec:f7:d7:cb:51:89:23:d5:c7: 57:aa:2c:e6:fc:84:6b:37:41:44:f2:c1:85:b7:7e:ae:99:11: dd:85:83:1c:63:93:10:ad:67:a2:04:9c:b2:d7:2e:31:dc:aa: 8e:ca:4f:8e:e8:ce:e7:30:7c:a6:1b:f5:19:2f:f8:d2:19:46: 4f:70:52:9d:ba:28:af:24:99:b6:08:73:1f:3a:1c:8e:f8:f9: b6:5f:08:b6:25:bf:d4:a7:63:7e:23:97:92:48:cd:8e:3d:da: c3:f9:73:fa:3d:b7:0b:1a:47:c9:c8:e1:23:01:68:37:24:21: 14:0c:77:aa:2c:78:d2:dc:70:f6:59:8c:06:76:51:1a:80:2f: 95:3d:c1:96:bd:36:09:c7:ca:03:ee:1f:72:ae:d3:8c:c5:c2: 57:1b:ef:6e:55:c7:57:bb:c1:e9:8d:6b:a1:46:17:f8:6a:8f: 2c:23:8e:77:3e:40:3a:ae:b2:0d:20:58:13:5b:e5:71:09:c1: 55:cc:93:05:73:c1:bf:5e:05:35:70:8e:d1:af:1c:d7:75:4d: 75:a7:50:1d:71:47:70:5d:11:25:96:23:c4:6d:f1:6b:af:89: aa:fc:1a:23:d4:86:90:89:8e:ff:06:b1:ed:86:b3:df:d7:f3: 78:6e:f2:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxvLXZnAHGLjtaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk M2M5YjUwYjMtOTE4ZS00OWY4LTg2NTUtNzczM2FjMDVmZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMxLgXBawwlgXAvNBOZPS6rvRfUmFDvv/Rk2 WFZ/ZkQbCUzlgv0U62FooB7qXY6D0GMV4yx1j+6WXXB5KM/KEBxezlPe8CWr8R66 agV8igEhfSCqid9lH35+MD1CiZmw//90whlzPCgPT4YgNxvR7+gC57ZQvlpdnfcb ZDPrTR7l/QarkWE4c/qhxMGN2FYPDM4qkgKavDlYp9fUDBRiyEgekSho2cT+Kl+Y ajseBpBk6Ze/S/NSBxS72wXU92cOGv7ZcHXg2QYahGYAjxD/0Sb6Fm8N3qrvi/7Y Hn52sc+AjTOHDmYm+aZWeE7V6NM6y6OPqZ19Iz6V/csK7wTUOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0bP1czSxWmCNAGcnzWkuRdZXhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E1YmY1YjEtNjE3Yy0z ZGM2LWIzYTgtZDQ5M2M0YTA3MzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OxVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSKkolz+avnruz318tRiSPVx1eqLOb8hGs3QUTywYW3fq6ZEd2Fgxxj kxCtZ6IEnLLXLjHcqo7KT47ozucwfKYb9Rkv+NIZRk9wUp26KK8kmbYIcx86HI74 +bZfCLYlv9SnY34jl5JIzY492sP5c/o9twsaR8nI4SMBaDckIRQMd6oseNLccPZZ jAZ2URqAL5U9wZa9NgnHygPuH3Ku04zFwlcb725Vx1e7wemNa6FGF/hqjywjjnc+ QDqusg0gWBNb5XEJwVXMkwVzwb9eBTVwjtGvHNd1TXWnUB1xR3BdESWWI8Rt8Wuv iar8GiPUhpCJjv8Gse2Gs9/X83hu8jQ= -----END CERTIFICATE-----Generated at Sat Jun 13 08:59:44 2026 by rpki-client