$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10b95a4e-359e-311d-9432-cbe17e9bd1ce.roa File: 10b95a4e-359e-311d-9432-cbe17e9bd1ce.roa (raw, json) Hash identifier: cIWfDwbQsDjItCOKcQLePz0PajwW4C3q59ZmnQ//wjU= Subject key identifier: 3C:9B:58:3B:D4:E2:49:B5:BC:5E:FA:3E:71:21:50:EF:97:D1:08:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9D6FF9FA60288AA02100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10b95a4e-359e-311d-9432-cbe17e9bd1ce.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 207.69.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9d:6f:f9:fa:60:28:8a:a0:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5d08378f-24ca-409a-95e6-413e4f68664b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:44:59:41:17:85:a9:5e:50:47:cb:61:4c: 4d:3c:3b:64:da:df:28:c1:1c:d5:c3:c8:d6:81:21: 07:aa:fe:c8:77:08:51:ad:43:5c:d4:95:fc:81:6e: 9f:d2:89:f6:2c:31:8d:7c:b0:84:1c:b3:8d:29:11: 04:51:fb:a1:37:14:d1:28:dd:5b:4f:e4:c6:8c:47: 43:4c:88:74:e3:2d:d0:a0:00:aa:58:1d:04:a5:3e: 36:d9:b0:5d:d0:7e:44:36:a4:b7:bd:32:fa:9a:c6: 93:47:c9:6f:75:bf:5a:80:2c:26:b6:3e:09:81:85: f9:4f:8c:1a:da:0d:a8:6f:f5:9b:7d:e7:7a:c4:bb: 05:45:b8:45:c6:fe:9a:3c:d2:38:8d:93:bf:93:e6: 51:9f:b3:91:73:e9:00:29:71:8c:6f:d8:18:7b:5a: bb:ad:d9:b0:0e:86:3e:b8:ec:85:f0:0b:85:e2:05: fc:11:fa:23:98:ae:33:30:62:1e:c5:6c:8a:5a:72: 06:63:c3:c1:05:27:dd:18:43:9d:f9:ae:60:88:c8: 3f:3a:90:78:5d:e6:18:ac:df:8b:6d:94:c1:c1:61: 80:25:5d:35:91:eb:54:1f:44:e8:f2:04:cf:b8:09: 44:87:de:5d:dc:cd:bf:7d:6c:36:3a:95:82:f9:c8: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9B:58:3B:D4:E2:49:B5:BC:5E:FA:3E:71:21:50:EF:97:D1:08:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10b95a4e-359e-311d-9432-cbe17e9bd1ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.69.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:2d:a6:98:03:b2:50:36:7c:81:77:37:f9:ea:94:65:41:a5: 08:c5:8b:96:4d:4d:f5:1e:e4:77:8e:c8:20:a7:6a:e4:c7:30: 69:ee:4c:66:1e:c7:4c:29:4d:2b:15:5a:f5:d5:3b:d6:40:fe: 0d:1d:81:72:a0:8d:2f:00:c2:48:cc:97:2e:e5:15:35:f1:3a: 53:90:b9:d6:c1:40:3b:39:df:20:6d:06:7a:7c:91:75:38:4a: 26:3f:90:dd:06:71:fb:e1:1c:80:a3:e5:32:1f:a6:09:2b:73: 7c:1b:6a:6f:ef:ed:b2:70:62:27:ed:1a:8a:b2:58:29:33:02: 92:dd:b6:a2:c5:f9:b7:95:3d:d4:db:5f:e3:f3:71:c7:07:cc: 82:0c:32:22:31:bd:db:e8:e5:2a:fe:56:4b:7c:49:ef:0f:68: 43:23:1f:e4:57:0a:6f:73:b0:28:61:c5:ef:e4:9e:db:09:22: 01:8b:2a:8b:7a:72:c9:19:4e:56:1b:95:9a:87:3c:d0:99:ac: 83:e2:cc:ee:75:b2:97:1b:b3:2c:6c:6d:a5:48:30:cc:32:4a: b5:5b:65:f7:02:a9:ee:b0:d6:b4:2e:87:2b:dd:6e:50:b7:4f: c5:b7:3c:ad:6a:01:5b:1e:b3:64:7f:65:c3:6f:02:e1:55:fe: 9d:0f:cf:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCp1v+fpgKIqgIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NWQwODM3OGYtMjRjYS00MDlhLTk1ZTYtNDEzZTRmNjg2NjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqflEWUEXhaleUEfLYUxNPDtk2t8owRzVw8jW gSEHqv7IdwhRrUNc1JX8gW6f0on2LDGNfLCEHLONKREEUfuhNxTRKN1bT+TGjEdD TIh04y3QoACqWB0EpT422bBd0H5ENqS3vTL6msaTR8lvdb9agCwmtj4JgYX5T4wa 2g2ob/Wbfed6xLsFRbhFxv6aPNI4jZO/k+ZRn7ORc+kAKXGMb9gYe1q7rdmwDoY+ uOyF8AuF4gX8EfojmK4zMGIexWyKWnIGY8PBBSfdGEOd+a5giMg/OpB4XeYYrN+L bZTBwWGAJV01ketUH0To8gTPuAlEh95d3M2/fWw2OpWC+cj0swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDybWDvU4km1vF76PnEhUO+X0QhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTBiOTVhNGUtMzU5ZS0z MTFkLTk0MzItY2JlMTdlOWJkMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz0W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACItppgDslA2fIF3N/nqlGVBpQjFi5ZNTfUe5HeOyCCnauTHMGnuTGYe x0wpTSsVWvXVO9ZA/g0dgXKgjS8AwkjMly7lFTXxOlOQudbBQDs53yBtBnp8kXU4 SiY/kN0GcfvhHICj5TIfpgkrc3wbam/v7bJwYiftGoqyWCkzApLdtqLF+beVPdTb X+PzcccHzIIMMiIxvdvo5Sr+Vkt8Se8PaEMjH+RXCm9zsChhxe/kntsJIgGLKot6 cskZTlYblZqHPNCZrIPizO51spcbsyxsbaVIMMwySrVbZfcCqe6w1rQuhyvdblC3 T8W3PK1qAVses2R/ZcNvAuFV/p0Pz1o= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:07 2026 by rpki-client