$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02670ec5-21f2-32ca-bec2-f808fc87140b.roa File: 02670ec5-21f2-32ca-bec2-f808fc87140b.roa (raw, json) Hash identifier: vclHsYyNalkDhnx5E8XB1d3ATqnPZH9dw8WESuWcI2E= Subject key identifier: 75:A8:25:38:BB:EC:B5:06:7C:29:B4:B0:0D:B1:E9:D4:82:6E:92:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A78E3D5EB4BBEEBA846C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02670ec5-21f2-32ca-bec2-f808fc87140b.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 209.192.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:78:e3:d5:eb:4b:be:eb:a8:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c703f1c3-beaf-4db4-acfe-7eafdb474a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:18:d9:d2:c4:ab:66:ec:f4:a0:99:d0:a7: b3:82:8a:50:bc:1b:62:73:62:83:cd:c8:ab:40:84: 06:a0:26:25:1c:50:15:ab:44:65:4f:98:f2:ee:d4: bb:b3:73:2b:e2:84:35:3f:44:dd:6c:a9:7c:5f:87: f6:ea:a6:0d:2d:30:b8:81:52:99:0c:26:ae:87:6c: ea:61:58:1b:29:4c:9b:3d:f7:bf:08:a1:f5:45:c3: 46:60:9c:0d:16:7f:8c:d8:3d:82:94:63:47:08:c0: f4:d8:6f:6f:b0:34:aa:73:d2:56:be:95:52:13:6f: 45:44:44:55:cb:5a:57:12:d4:b1:b2:61:54:90:33: e0:54:b3:36:29:b4:b1:e5:ac:0b:5b:68:89:ad:b9: 49:32:dd:d5:2f:bd:7d:89:75:c6:56:66:db:c8:50: 8d:31:73:76:45:e2:8f:a9:da:80:c5:2d:b4:f0:42: 61:00:6b:37:ec:61:f4:0f:50:9a:0b:f0:1b:df:0b: 3f:8d:20:39:0d:90:75:f2:3b:dd:55:be:4e:22:48: d8:53:73:5d:db:bf:2b:b0:a4:b1:1e:bc:96:ea:17: af:c1:3d:76:91:4e:4e:58:b6:73:e0:37:4c:5e:46: 1b:ab:6b:b9:26:5b:39:b7:9c:77:b1:e7:1b:b4:5b: f1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A8:25:38:BB:EC:B5:06:7C:29:B4:B0:0D:B1:E9:D4:82:6E:92:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02670ec5-21f2-32ca-bec2-f808fc87140b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ea:a9:10:04:89:48:fd:32:be:04:4f:39:75:ec:8b:e4:75: 22:40:22:e7:53:55:b0:e6:e3:1c:7e:b3:43:5b:b7:2c:e1:62: 41:fa:74:24:dd:46:8a:76:f2:b1:c4:c3:f0:e5:38:b3:5c:08: 4d:19:e4:df:09:21:65:68:fc:62:96:ec:2a:36:3d:d0:c9:67: 41:d0:e4:8a:e1:f0:01:b8:3a:21:58:0d:f1:25:63:ca:37:7b: f1:4c:26:a9:d1:be:00:23:7a:06:18:2d:58:88:b6:7c:5e:10: ca:fd:51:5d:b0:1f:87:26:46:9c:78:ef:dd:13:bf:d9:fa:06: 14:9c:26:2f:53:18:27:36:3f:60:59:a3:b5:43:5d:ef:f7:d6: ee:22:39:6e:30:a8:8c:f3:97:a2:64:61:28:33:0e:13:d5:c4: ce:41:e1:49:bd:6f:6b:73:f6:be:f3:4d:6c:bb:e6:00:a9:42: 6b:4e:0b:c2:08:81:aa:3e:a4:87:34:c2:e6:4d:bd:70:89:ac: 6f:51:13:63:5e:9d:f4:33:94:79:da:66:95:e0:bd:b6:ff:52: f8:03:1b:e0:1f:b2:e2:e4:09:20:7b:03:10:c2:8f:e6:61:31: 12:87:cb:8a:0a:99:b7:62:32:3a:d8:b3:b5:ba:ea:2a:ae:29: fd:1a:ed:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnjj1etLvuuoRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzcwM2YxYzMtYmVhZi00ZGI0LWFjZmUtN2VhZmRiNDc0YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQYY2dLEq2bs9KCZ0KezgopQvBtic2KDzcir QIQGoCYlHFAVq0RlT5jy7tS7s3Mr4oQ1P0TdbKl8X4f26qYNLTC4gVKZDCauh2zq YVgbKUybPfe/CKH1RcNGYJwNFn+M2D2ClGNHCMD02G9vsDSqc9JWvpVSE29FRERV y1pXEtSxsmFUkDPgVLM2KbSx5awLW2iJrblJMt3VL719iXXGVmbbyFCNMXN2ReKP qdqAxS208EJhAGs37GH0D1CaC/Ab3ws/jSA5DZB18jvdVb5OIkjYU3Nd278rsKSx HryW6hevwT12kU5OWLZz4DdMXkYbq2u5Jls5t5x3secbtFvxAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWoJTi77LUGfCm0sA2x6dSCbpIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDI2NzBlYzUtMjFmMi0z MmNhLWJlYzItZjgwOGZjODcxNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbqqRAEiUj9Mr4ETzl17IvkdSJAIudTVbDm4xx+s0NbtyzhYkH6dCTd Rop28rHEw/DlOLNcCE0Z5N8JIWVo/GKW7Co2PdDJZ0HQ5Irh8AG4OiFYDfElY8o3 e/FMJqnRvgAjegYYLViItnxeEMr9UV2wH4cmRpx4790Tv9n6BhScJi9TGCc2P2BZ o7VDXe/31u4iOW4wqIzzl6JkYSgzDhPVxM5B4Um9b2tz9r7zTWy75gCpQmtOC8II gao+pIc0wuZNvXCJrG9RE2NenfQzlHnaZpXgvbb/UvgDG+AfsuLkCSB7AxDCj+Zh MRKHy4oKmbdiMjrYs7W66iquKf0a7XQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:55 2026 by rpki-client