$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d061660-0bee-3652-8a3a-bf7cafdb55df.roa File: 0d061660-0bee-3652-8a3a-bf7cafdb55df.roa (raw, json) Hash identifier: Y/GG4pqD0nlTLbOyKxoMrTygyscQTzaZ6GmjmKkDxTA= Subject key identifier: 06:61:8E:5C:5D:78:67:F4:A4:C3:0A:EB:E7:B7:AE:63:33:AB:B7:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A704C90A13EC9FC5D4C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d061660-0bee-3652-8a3a-bf7cafdb55df.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 209.165.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:70:4c:90:a1:3e:c9:fc:5d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5a750a32-cf9a-4930-a763-0290fd74176a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:17:d0:16:85:d6:50:14:b9:82:2b:2b:4b: 19:23:00:9e:70:13:1c:db:c5:e2:57:b4:3a:f4:e8: b7:82:b1:de:70:63:88:f2:19:d9:c3:83:6f:f5:37: 0a:1c:66:c2:00:b5:f1:fa:5e:42:f0:87:95:aa:fe: d0:e0:a8:86:67:3a:19:a9:6f:e9:5d:a9:35:a5:47: 57:e7:7e:65:dd:65:da:40:d8:15:34:c6:63:c5:35: 3b:25:8e:87:0f:38:8f:6a:52:fc:ae:0b:ca:79:76: f1:a9:c5:be:64:4f:07:ca:6d:dc:5b:9a:83:53:40: fb:bc:d8:26:5a:24:9e:88:eb:c7:9d:df:38:4f:08: 22:b7:f6:85:35:f8:44:d2:21:1a:fd:cf:8c:4f:9b: 21:83:b9:9d:f0:25:5f:f3:ce:d5:3c:f7:6c:15:79: 9f:8f:6f:a9:87:64:c9:4e:49:5c:ec:45:08:57:75: 53:18:83:f7:e5:a2:d2:69:fb:45:7f:65:d5:a0:6f: 42:a9:cc:df:8b:cc:2f:12:bc:dc:ce:93:33:19:ed: 6a:7b:69:73:ff:41:e1:c3:16:b4:b3:74:9f:b2:d3: a3:43:7d:b9:2a:ce:d8:f3:d1:13:5c:58:8d:4d:31: 31:2c:d0:6e:b5:99:17:42:4e:56:b6:d0:6f:78:73: 35:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:61:8E:5C:5D:78:67:F4:A4:C3:0A:EB:E7:B7:AE:63:33:AB:B7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d061660-0bee-3652-8a3a-bf7cafdb55df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a1:45:1c:8e:b1:ed:ab:1a:ca:3e:00:55:a7:c2:39:bc:f8: 54:75:c3:b5:48:19:82:b4:1c:4d:09:67:d1:d0:2f:d9:39:19: 2a:a6:d8:ef:37:e5:dc:ff:8f:5a:dc:db:51:f9:02:7d:b8:6a: 19:de:1b:c8:04:c7:72:d0:57:3a:2a:da:21:e8:8f:ae:63:df: 62:ef:24:51:f2:6c:b0:fa:b9:e0:3b:8f:d1:0b:bb:d9:e9:bb: 7c:cc:18:62:23:99:13:fd:a3:57:f7:df:7f:05:c1:55:fc:6f: 2c:56:76:e9:d3:fe:dd:59:52:28:ff:f2:22:ce:aa:07:06:8c: bd:0d:9c:6d:0f:38:2d:0d:0b:ca:d6:84:cf:2b:83:4a:81:40: 7a:d9:3c:a7:6d:13:04:3c:71:c5:4a:30:07:ba:26:0d:8d:04: cd:af:f5:1a:6b:18:8c:83:e3:c5:0f:1d:25:bb:9b:46:c3:a3: 03:8d:f7:60:f6:6b:3a:f0:6e:51:1f:93:19:57:0d:0e:44:61: 6b:c7:6d:df:58:f2:7b:ad:af:e5:68:45:5f:ec:87:41:58:f6: 84:4d:b0:e7:eb:22:fa:0e:8e:25:30:5d:56:a5:e9:e6:dd:62: 81:70:ad:36:95:87:d2:b1:f2:64:0a:8a:a6:fb:f0:b9:c3:be: f6:bd:54:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnBMkKE+yfxdTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NWE3NTBhMzItY2Y5YS00OTMwLWE3NjMtMDI5MGZkNzQxNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIIX0BaF1lAUuYIrK0sZIwCecBMc28XiV7Q6 9Oi3grHecGOI8hnZw4Nv9TcKHGbCALXx+l5C8IeVqv7Q4KiGZzoZqW/pXak1pUdX 535l3WXaQNgVNMZjxTU7JY6HDziPalL8rgvKeXbxqcW+ZE8Hym3cW5qDU0D7vNgm WiSeiOvHnd84Twgit/aFNfhE0iEa/c+MT5shg7md8CVf887VPPdsFXmfj2+ph2TJ Tklc7EUIV3VTGIP35aLSaftFf2XVoG9Cqczfi8wvErzczpMzGe1qe2lz/0Hhwxa0 s3SfstOjQ325Ks7Y89ETXFiNTTExLNButZkXQk5WttBveHM1bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZhjlxdeGf0pMMK6+e3rmMzq7dSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQwNjE2NjAtMGJlZS0z NjUyLThhM2EtYmY3Y2FmZGI1NWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByhRRyOse2rGso+AFWnwjm8+FR1w7VIGYK0HE0JZ9HQL9k5GSqm2O83 5dz/j1rc21H5An24ahneG8gEx3LQVzoq2iHoj65j32LvJFHybLD6ueA7j9ELu9np u3zMGGIjmRP9o1f3338FwVX8byxWdunT/t1ZUij/8iLOqgcGjL0NnG0POC0NC8rW hM8rg0qBQHrZPKdtEwQ8ccVKMAe6Jg2NBM2v9RprGIyD48UPHSW7m0bDowON92D2 azrwblEfkxlXDQ5EYWvHbd9Y8nutr+VoRV/sh0FY9oRNsOfrIvoOjiUwXVal6ebd YoFwrTaVh9Kx8mQKiqb78LnDvva9VFc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:39 2026 by rpki-client