$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f6e8455-3669-3fdc-b367-1809444eef20.roa File: 2f6e8455-3669-3fdc-b367-1809444eef20.roa (raw, json) Hash identifier: DTcHYg4oeOZCD+4mjIbWWfmTOUUVay2425HmUcrGPTM= Subject key identifier: 94:3C:6E:DC:E3:5A:B8:FB:48:D2:2D:B4:76:AD:F3:FC:39:F6:A1:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7B582A3C2EEA85C08C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f6e8455-3669-3fdc-b367-1809444eef20.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 46783 IP address blocks: 209.255.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7b:58:2a:3c:2e:ea:85:c0:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=53f596d7-27ad-43a6-a1b7-c0744be55bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1a:45:b1:29:91:41:3a:48:b1:dd:3e:bd:d6: f5:c7:b4:57:99:c7:81:e6:2d:15:26:a4:98:e1:79: 33:6c:6a:2a:f1:6b:20:00:5f:b5:55:d3:1d:74:55: 24:20:e6:17:82:be:76:4e:05:18:10:77:a3:48:71: 4b:e7:b6:c1:d3:0f:81:41:82:65:cd:4b:a5:ff:b6: 92:73:05:ec:5a:9e:c7:c7:08:ca:67:bb:f1:71:ed: a6:44:3c:24:26:41:1d:93:72:14:8a:cb:45:74:26: 25:56:f2:b7:a6:dc:77:c9:e7:d1:cf:c4:5a:ac:24: 3e:b4:3b:f3:de:95:6e:f9:3c:76:6a:a1:d9:8a:ca: 93:95:eb:68:07:7b:89:5f:ca:54:16:e9:f5:09:c1: 1a:31:8a:42:b5:85:a8:ef:32:e7:93:bc:ad:dd:db: ba:d2:bf:40:ce:ae:cc:30:80:59:f6:ac:94:38:0c: 3b:2d:22:79:72:7a:01:fc:46:08:c0:9e:e2:c7:7d: ae:3a:b9:d5:7e:18:eb:43:1d:60:62:fb:cd:0f:52: fe:e7:a9:9a:72:94:75:19:31:63:bc:7d:cf:b0:ce: f7:58:57:6e:44:3f:d6:9a:cb:6a:f2:03:87:07:fc: 02:5b:98:ac:1b:5d:c7:ec:00:dc:91:c2:f5:9a:fc: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3C:6E:DC:E3:5A:B8:FB:48:D2:2D:B4:76:AD:F3:FC:39:F6:A1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f6e8455-3669-3fdc-b367-1809444eef20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4e:eb:1a:68:a0:6c:b0:7c:a6:97:6c:de:3b:a1:b0:c1:04: ad:91:62:30:bd:47:6c:dc:17:6c:e7:74:0c:1f:c9:85:06:60: c6:5e:06:33:d1:5b:6a:b1:b3:53:08:77:de:54:77:c8:b2:14: e9:f6:15:87:1f:54:16:39:43:30:34:d3:3a:95:94:0a:76:1a: 41:26:c5:c2:6b:0c:9d:bb:b4:81:78:3e:ce:b3:f9:89:4b:68: 49:61:8a:1f:4a:11:4d:a6:60:e4:3c:e6:a8:55:42:c7:0a:c5: 1c:1c:9d:35:17:f8:fb:5f:a1:37:02:94:4d:04:42:00:fa:08: 52:42:1b:92:80:8a:9e:f5:fc:ea:30:1d:5a:2b:a5:3f:c0:c1: 4c:40:01:74:4e:3d:9a:2b:44:93:eb:20:45:19:fa:ea:05:a8: 1f:67:87:5a:2b:75:cb:72:1c:09:2f:00:d3:3a:b4:ab:5e:83: 46:18:cd:56:81:0a:6a:ce:e2:e0:5d:1c:1a:d3:7d:8a:39:52: e6:66:a7:b3:62:e6:01:9e:0a:61:a1:ab:96:c3:f7:83:5a:1b: b0:ab:9d:18:86:a8:36:ad:3e:2b:48:15:4a:be:7b:fa:33:da: 86:3b:d6:73:7e:95:3f:c9:0e:a6:d2:76:21:4e:c8:9f:5f:f3: ce:72:43:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCntYKjwu6oXAjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTNmNTk2ZDctMjdhZC00M2E2LWExYjctYzA3NDRiZTU1YmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxpFsSmRQTpIsd0+vdb1x7RXmceB5i0VJqSY 4XkzbGoq8WsgAF+1VdMddFUkIOYXgr52TgUYEHejSHFL57bB0w+BQYJlzUul/7aS cwXsWp7HxwjKZ7vxce2mRDwkJkEdk3IUistFdCYlVvK3ptx3yefRz8RarCQ+tDvz 3pVu+Tx2aqHZisqTletoB3uJX8pUFun1CcEaMYpCtYWo7zLnk7yt3du60r9Azq7M MIBZ9qyUOAw7LSJ5cnoB/EYIwJ7ix32uOrnVfhjrQx1gYvvND1L+56macpR1GTFj vH3PsM73WFduRD/Wmstq8gOHB/wCW5isG13H7ADckcL1mvz3gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQ8btzjWrj7SNIttHat8/w59qGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY2ZTg0NTUtMzY2OS0z ZmRjLWIzNjctMTgwOTQ0NGVlZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdO6xpooGywfKaXbN47obDBBK2RYjC9R2zcF2zndAwfyYUGYMZeBjPR W2qxs1MId95Ud8iyFOn2FYcfVBY5QzA00zqVlAp2GkEmxcJrDJ27tIF4Ps6z+YlL aElhih9KEU2mYOQ85qhVQscKxRwcnTUX+PtfoTcClE0EQgD6CFJCG5KAip71/Oow HVorpT/AwUxAAXROPZorRJPrIEUZ+uoFqB9nh1ordctyHAkvANM6tKteg0YYzVaB CmrO4uBdHBrTfYo5UuZmp7Ni5gGeCmGhq5bD94NaG7CrnRiGqDatPitIFUq+e/oz 2oY71nN+lT/JDqbSdiFOyJ9f885yQz0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:48:15 2026 by rpki-client