$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa File: 0a90a390-d0a5-365f-9730-fddae514051e.roa (raw, json) Hash identifier: eOhxwZGGBQm2PQ8RmSWpiLXGTLBEjWyxXBJ0NOreBrU= Subject key identifier: D0:CB:22:F2:9A:AA:7E:CD:FB:44:14:2C:29:97:36:C5:BA:68:75:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9C7359A53ED2CB93E240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 199.195.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9c:73:59:a5:3e:d2:cb:93:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a9b36db7-333a-49ef-b1bf-daff2161c2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:6f:66:0f:85:9e:ac:d3:78:0a:17:43:92: ca:35:ce:19:94:ee:ea:02:e2:68:36:0e:67:65:05: ea:27:a6:d3:f0:c8:84:59:c2:92:d5:f0:fa:90:a0: 09:8a:94:77:e2:2a:83:b9:b2:e0:29:0b:10:f0:87: 62:5b:bf:bf:1d:40:66:ec:39:b4:13:43:ef:81:aa: e7:77:c4:be:e3:86:d7:89:df:7a:c3:6a:8b:b7:60: 3c:f9:30:8f:dc:5f:a9:9c:8e:a2:f3:76:58:21:6b: 25:73:e8:e5:2c:1d:4c:25:cc:ef:ac:ea:54:a6:f5: 2e:c5:2d:1c:4a:b4:78:cc:88:fa:fc:ef:19:c2:d3: 05:5a:af:4b:37:36:a6:e7:75:84:9a:73:01:da:e6: 91:7e:0e:66:99:5e:6e:19:a8:e1:13:73:c7:6b:3c: 55:66:aa:60:fe:49:1d:4a:0d:b8:39:e3:5a:83:cc: 70:a1:d9:a9:6e:05:6b:04:0d:bc:be:91:d7:9c:01: 76:6b:ca:b2:bf:6c:98:9f:f9:f4:8b:df:d5:88:6e: 63:e6:f5:1a:af:ad:5c:9c:94:41:1f:e3:2a:98:63: 2f:1f:c4:d9:70:a4:2f:9f:16:f8:d7:8f:76:a9:60: 08:fb:21:ca:a0:28:45:a0:10:97:d9:96:77:63:b7: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CB:22:F2:9A:AA:7E:CD:FB:44:14:2C:29:97:36:C5:BA:68:75:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:49:07:11:a4:86:1b:fb:63:9a:9c:37:19:2c:f1:6d:bf:11: 9f:b8:68:1f:6d:8d:e8:0a:33:f0:b5:60:9e:0b:68:3d:b9:27: c6:59:68:9e:c9:2f:40:5d:14:7a:0d:a0:d4:4c:ed:ef:60:93: dd:25:45:c8:82:b4:5c:3f:b3:27:9c:44:0b:f8:78:cf:91:0c: bb:cb:ee:12:f3:4f:f4:f3:cf:71:1d:0b:1a:6f:a2:94:c9:6a: 62:bd:c7:6f:1c:a6:c1:7c:50:1a:f4:3e:d9:be:91:02:1c:b4: 49:80:ce:ea:5a:22:36:1d:99:0e:7b:65:7f:d9:0b:3d:f8:e1: 18:01:f9:2e:32:88:4f:f4:f8:0f:3b:26:95:ba:6d:17:03:b9: 8e:29:fd:1a:f3:f9:c4:6d:c3:56:6a:f3:68:b2:db:fc:15:f0: 10:b8:b2:cc:f1:d4:61:c9:09:e4:b9:60:68:4f:95:fc:d9:ab: 65:08:31:06:a1:ed:1c:88:9e:07:e2:74:97:fa:e4:79:55:26: 27:f0:d0:8c:e0:b1:69:15:d2:e1:a4:df:ec:0f:4a:c8:7c:f5: c4:72:ac:ec:21:2a:8c:20:0e:c2:d0:4c:8f:f9:0d:f1:7b:cb: f7:d5:cd:a9:76:f0:5c:27:87:19:19:13:e3:db:32:c7:50:f3: 18:8c:89:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpxzWaU+0suT4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTliMzZkYjctMzMzYS00OWVmLWIxYmYtZGFmZjIxNjFjMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq95vZg+FnqzTeAoXQ5LKNc4ZlO7qAuJoNg5n ZQXqJ6bT8MiEWcKS1fD6kKAJipR34iqDubLgKQsQ8IdiW7+/HUBm7Dm0E0Pvgarn d8S+44bXid96w2qLt2A8+TCP3F+pnI6i83ZYIWslc+jlLB1MJczvrOpUpvUuxS0c SrR4zIj6/O8ZwtMFWq9LNzam53WEmnMB2uaRfg5mmV5uGajhE3PHazxVZqpg/kkd Sg24OeNag8xwodmpbgVrBA28vpHXnAF2a8qyv2yYn/n0i9/ViG5j5vUar61cnJRB H+MqmGMvH8TZcKQvnxb41492qWAI+yHKoChFoBCX2ZZ3Y7dliQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDLIvKaqn7N+0QULCmXNsW6aHUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE5MGEzOTAtZDBhNS0z NjVmLTk3MzAtZmRkYWU1MTQwNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlJBxGkhhv7Y5qcNxks8W2/EZ+4aB9tjegKM/C1YJ4LaD25J8ZZaJ7J L0BdFHoNoNRM7e9gk90lRciCtFw/syecRAv4eM+RDLvL7hLzT/Tzz3EdCxpvopTJ amK9x28cpsF8UBr0Ptm+kQIctEmAzupaIjYdmQ57ZX/ZCz344RgB+S4yiE/0+A87 JpW6bRcDuY4p/Rrz+cRtw1Zq82iy2/wV8BC4sszx1GHJCeS5YGhPlfzZq2UIMQah 7RyIngfidJf65HlVJifw0IzgsWkV0uGk3+wPSsh89cRyrOwhKowgDsLQTI/5DfF7 y/fVzal28FwnhxkZE+PbMsdQ8xiMico= -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:02 2026 by rpki-client