$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa File: 247e7628-8aa1-3d54-9913-d48b0ed908ec.roa (raw, json) Hash identifier: vxA15zB89Zk+RG5RIXpvXEIsbZdXaQKyY0KavxkeM5o= Subject key identifier: C2:B5:0A:09:E8:C3:B8:60:A9:96:DA:2D:75:41:3C:D4:3B:5E:DA:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A70E4E2111C8611B8D0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 209.252.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:70:e4:e2:11:1c:86:11:b8:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fd41a042-c6c7-476b-bc7e-3ce65fc21d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:23:cb:12:b4:66:7d:9c:fe:3b:1f:9d:3f:90: ec:86:9e:9d:30:ab:af:f8:59:0f:59:a6:e6:89:37: 12:4b:8d:bb:a7:4d:90:b5:65:8a:35:66:7b:59:66: b2:b8:c5:3f:31:47:60:c3:87:2d:84:f5:cb:e4:4d: b9:b0:3e:4f:18:5b:1d:3b:e9:0c:d9:c1:3a:e8:f3: e6:f6:6d:b9:84:26:bc:16:98:35:a8:6d:50:c2:1b: 2c:58:77:02:55:11:b9:29:49:90:ff:f7:33:c4:32: 3d:d5:ef:7a:c9:21:7e:1a:de:70:f2:56:f6:fb:23: b7:a5:20:99:59:c2:3b:81:a5:d3:5e:59:41:03:d5: 95:fe:ce:fd:10:c2:a7:04:81:a4:e7:96:10:fc:21: f2:81:3e:38:ac:4c:78:b3:13:49:05:3c:64:74:bd: a6:6f:08:1a:65:67:b7:5e:6f:b4:e0:bd:8c:73:4b: 59:ac:ea:63:2c:41:41:29:81:0e:2b:69:9a:88:cb: c3:be:7f:75:98:0a:9d:a6:a2:00:e5:4f:2d:0a:39: c4:8a:b8:76:85:72:8e:42:01:a3:1d:74:1a:05:26: 56:bd:94:c3:e4:0f:59:df:7b:f5:5d:3f:06:5f:0e: 74:f4:c2:8b:bd:f4:e5:82:5d:6e:09:b9:33:ad:b2: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B5:0A:09:E8:C3:B8:60:A9:96:DA:2D:75:41:3C:D4:3B:5E:DA:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d9:d6:ee:a9:81:74:5c:26:e1:bf:2c:22:79:6c:31:ea:71: 43:99:9f:f7:f2:2e:2a:d0:70:8d:6a:48:74:f2:e6:af:4f:7e: 76:b8:e8:29:7c:40:d6:8e:9d:0d:e1:f8:e4:8d:a6:11:d9:61: d4:37:89:ae:cc:10:22:b8:22:ce:8d:e3:17:b4:90:58:be:79: 86:6e:f0:84:f1:e6:49:fc:08:ae:95:f1:e2:95:5c:84:13:1f: ea:9f:4d:5d:9d:6e:6a:7d:c4:bc:16:9b:01:77:73:2e:33:cc: 6c:27:7b:80:a3:75:ea:4a:d0:96:52:d2:92:77:40:a8:52:f0: cd:0f:2f:73:ce:50:a2:93:5c:0a:1a:d9:2d:85:fe:c9:59:4d: 63:ee:69:b2:d7:55:e3:be:ae:1f:83:2b:86:7f:c9:c7:55:a6: c7:b1:30:86:51:7c:01:f9:6c:87:be:75:07:52:6a:0e:1d:da: 6e:46:1d:56:52:4b:b8:81:84:5e:be:2f:35:db:24:60:2b:72: c4:5c:57:f5:7e:a2:10:56:a4:9e:a1:0b:ea:80:a3:06:f2:a0: 61:42:a4:b2:3e:4d:48:f3:6f:16:13:13:3f:b4:4a:dc:d3:ee: 36:ae:a0:1b:38:39:6f:12:97:8e:fe:1f:28:a4:31:b2:3b:e0: 48:e8:1d:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnDk4hEchhG40MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmQ0MWEwNDItYzZjNy00NzZiLWJjN2UtM2NlNjVmYzIxZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCPLErRmfZz+Ox+dP5Dshp6dMKuv+FkPWabm iTcSS427p02QtWWKNWZ7WWayuMU/MUdgw4cthPXL5E25sD5PGFsdO+kM2cE66PPm 9m25hCa8Fpg1qG1QwhssWHcCVRG5KUmQ//czxDI91e96ySF+Gt5w8lb2+yO3pSCZ WcI7gaXTXllBA9WV/s79EMKnBIGk55YQ/CHygT44rEx4sxNJBTxkdL2mbwgaZWe3 Xm+04L2Mc0tZrOpjLEFBKYEOK2maiMvDvn91mAqdpqIA5U8tCjnEirh2hXKOQgGj HXQaBSZWvZTD5A9Z33v1XT8GXw509MKLvfTlgl1uCbkzrbK3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK1Cgnow7hgqZbaLXVBPNQ7XtofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQ3ZTc2MjgtOGFhMS0z ZDU0LTk5MTMtZDQ4YjBlZDkwOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvZ1u6pgXRcJuG/LCJ5bDHqcUOZn/fyLirQcI1qSHTy5q9Pfna46Cl8 QNaOnQ3h+OSNphHZYdQ3ia7MECK4Is6N4xe0kFi+eYZu8ITx5kn8CK6V8eKVXIQT H+qfTV2dbmp9xLwWmwF3cy4zzGwne4CjdepK0JZS0pJ3QKhS8M0PL3POUKKTXAoa 2S2F/slZTWPuabLXVeO+rh+DK4Z/ycdVpsexMIZRfAH5bIe+dQdSag4d2m5GHVZS S7iBhF6+LzXbJGArcsRcV/V+ohBWpJ6hC+qAowbyoGFCpLI+TUjzbxYTEz+0StzT 7jauoBs4OW8Sl47+HyikMbI74EjoHbg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:47 2026 by rpki-client