$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d9ecda7-4d58-352c-8b72-91f6b3325c74.roa File: 1d9ecda7-4d58-352c-8b72-91f6b3325c74.roa (raw, json) Hash identifier: UiqqqsyRUMX2uscUQyQpmr1MFgiAJhcXEqZ95rwAd2A= Subject key identifier: 87:A5:3B:EA:BB:28:C8:FD:B1:90:86:B9:4B:DD:FA:0F:8A:32:83:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3E000CFD209885B454FB1640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d9ecda7-4d58-352c-8b72-91f6b3325c74.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 208.101.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0c:fd:20:98:85:b4:54:fb:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=e597e3b2-f78b-4d9e-a707-3ef70a4f3e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:0c:9f:1f:af:25:c2:ce:17:a7:89:0c:33: f5:a3:66:3a:7d:64:38:54:ef:f2:95:44:5d:e3:3d: a8:a7:8a:7c:54:52:06:3d:34:d2:38:f3:ae:23:7d: e8:0f:d9:27:37:1f:17:61:81:e1:47:ab:99:c1:df: 84:17:b8:de:f8:83:5c:14:0e:c2:b9:ac:17:91:ff: 9e:78:ef:94:2a:24:d0:4b:75:94:f9:e0:0d:01:00: 32:8e:89:ca:b3:f7:2d:47:34:e3:ff:d3:fb:f6:45: b8:40:5e:96:7a:21:43:1c:06:f8:25:3e:6e:48:42: dd:ad:22:5f:cf:5a:e1:21:58:c7:61:8d:8a:5d:48: fa:5f:22:c6:32:1b:3d:4d:91:be:ee:dd:7e:19:f2: 0c:44:b4:78:d7:b4:23:bb:77:c7:2d:31:be:40:a1: 8e:b7:e7:03:01:15:a2:f7:e8:c9:05:3e:2b:a5:4b: dc:20:57:e6:46:4e:6c:1b:ae:25:59:3f:e7:ac:1c: df:d9:9a:0c:d1:a1:74:f7:e8:7a:89:3a:57:79:61: a2:3b:49:dd:90:60:d2:a7:55:b8:97:07:6b:3e:10: 3c:c6:af:4d:02:1f:1c:c0:10:50:7f:6a:4a:7d:90: 20:0f:4f:65:8e:4a:6b:01:ac:50:49:58:60:6d:c2: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A5:3B:EA:BB:28:C8:FD:B1:90:86:B9:4B:DD:FA:0F:8A:32:83:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d9ecda7-4d58-352c-8b72-91f6b3325c74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:35:ae:82:f7:30:92:ca:2a:21:05:09:53:b6:a3:e5:ff:e1: 9f:46:c0:39:61:a3:7c:8d:b5:77:8e:a2:1b:65:5c:85:61:dd: 0e:5c:21:52:d1:f5:67:88:44:dc:0f:cd:71:5a:1d:86:25:d3: 23:c0:87:ab:ba:df:93:55:94:4a:3b:7c:4c:af:3d:8d:6e:ba: 06:67:58:02:36:12:bb:19:53:cc:52:69:e4:01:4e:99:f7:5b: ce:98:94:43:49:44:e8:8a:a7:ad:39:21:87:66:4c:e6:75:a4: f9:2a:a5:e3:d3:a5:f1:28:7a:44:c2:34:01:17:5d:41:2a:a9: 18:40:50:f4:b0:16:43:bf:1c:2b:89:8d:ba:3f:a5:5e:21:15: 75:cf:b0:5d:17:cc:83:30:d8:de:17:90:81:8a:49:c2:e6:fb: a4:b4:6c:fb:aa:a6:1d:52:dd:06:3e:09:c9:3c:d5:85:01:1a: 22:29:76:2b:39:44:4e:38:a8:74:8a:c3:21:be:a5:35:26:b0: fa:c8:58:53:36:7c:c5:6d:b5:0c:84:54:a1:9a:23:17:01:f2: 04:dc:43:24:5a:4c:f0:cc:bd:1c:7a:de:8a:ad:60:73:9f:bd: c6:ce:52:33:ff:02:af:7e:c5:73:72:7b:05:0d:53:8a:86:c2: d8:a4:a4:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAz9IJiFtFT7FkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTU5N2UzYjItZjc4Yi00ZDllLWE3MDctM2VmNzBhNGYzZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqUMnx+vJcLOF6eJDDP1o2Y6fWQ4VO/ylURd 4z2op4p8VFIGPTTSOPOuI33oD9knNx8XYYHhR6uZwd+EF7je+INcFA7CuawXkf+e eO+UKiTQS3WU+eANAQAyjonKs/ctRzTj/9P79kW4QF6WeiFDHAb4JT5uSELdrSJf z1rhIVjHYY2KXUj6XyLGMhs9TZG+7t1+GfIMRLR417Qju3fHLTG+QKGOt+cDARWi 9+jJBT4rpUvcIFfmRk5sG64lWT/nrBzf2ZoM0aF09+h6iTpXeWGiO0ndkGDSp1W4 lwdrPhA8xq9NAh8cwBBQf2pKfZAgD09ljkprAaxQSVhgbcIyKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIelO+q7KMj9sZCGuUvd+g+KMoO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWQ5ZWNkYTctNGQ1OC0z NTJjLThiNzItOTFmNmIzMzI1Yzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg1roL3MJLKKiEFCVO2o+X/4Z9GwDlho3yNtXeOohtlXIVh3Q5cIVLR 9WeIRNwPzXFaHYYl0yPAh6u635NVlEo7fEyvPY1uugZnWAI2ErsZU8xSaeQBTpn3 W86YlENJROiKp605IYdmTOZ1pPkqpePTpfEoekTCNAEXXUEqqRhAUPSwFkO/HCuJ jbo/pV4hFXXPsF0XzIMw2N4XkIGKScLm+6S0bPuqph1S3QY+Cck81YUBGiIpdis5 RE44qHSKwyG+pTUmsPrIWFM2fMVttQyEVKGaIxcB8gTcQyRaTPDMvRx63oqtYHOf vcbOUjP/Aq9+xXNyewUNU4qGwtikpBM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:03:36 2026 by rpki-client