$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fc9c161-863c-37d1-b046-3caf9242dc82.roa File: 2fc9c161-863c-37d1-b046-3caf9242dc82.roa (raw, json) Hash identifier: EXSsJ7bjMt36lze7eX4EXP82ZIgcnfSQWOmpOlmHhsU= Subject key identifier: 03:E4:1D:9E:C2:48:DC:00:A4:A0:E7:AE:20:4B:4E:98:DA:81:98:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9A75CAC5F1DD01ABD480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fc9c161-863c-37d1-b046-3caf9242dc82.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 169.130.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9a:75:ca:c5:f1:dd:01:ab:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=2cfac67b-4653-4672-bd73-81303932f9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:6e:9a:40:c7:1b:28:b9:2d:fc:fa:82:93: 81:ff:ea:6c:c1:9b:43:57:71:67:5b:17:10:a0:2d: dc:b2:5a:88:56:ea:ae:50:31:d7:45:9d:e0:6a:9e: f6:06:ad:28:47:99:ea:2d:43:3c:58:e8:da:9b:e4: d2:47:51:c8:8d:b5:b7:b8:8e:44:2b:14:2a:a8:43: 4a:a1:e7:27:f7:e9:95:fc:5a:a2:a8:64:93:9c:a5: dd:e9:40:74:e8:cd:7e:08:05:80:e4:8e:8a:1f:3a: 8a:0d:53:51:d7:36:7a:f4:36:61:4a:9e:4d:82:0d: 4b:c1:cf:83:74:50:2f:a8:ab:8a:7f:4d:a5:4b:5c: 37:4f:8a:e4:06:f5:9d:00:4f:32:e6:d8:6a:70:ab: 50:f7:2a:71:09:d4:cb:7b:df:83:04:b1:e5:a6:5c: 17:ca:54:00:9a:c2:28:ab:f2:31:f4:d9:be:20:7f: ec:d2:eb:26:4d:5b:c9:27:5e:5b:75:ab:57:62:27: 9f:72:cf:44:3c:3a:5c:fb:e7:58:5a:f2:85:3d:73: 55:5e:3f:06:54:2d:ee:f7:4d:6c:73:ec:45:6c:e2: d4:9e:50:b6:83:2a:80:c5:70:20:c7:bf:bf:4a:f8: 38:65:b6:08:a6:da:a8:d1:53:f6:67:49:3d:c8:f7: 38:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E4:1D:9E:C2:48:DC:00:A4:A0:E7:AE:20:4B:4E:98:DA:81:98:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fc9c161-863c-37d1-b046-3caf9242dc82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 169.130.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7e:47:9c:6a:33:67:62:74:9c:b4:2a:16:e4:4e:46:ce:83: eb:11:21:98:84:60:55:20:0b:ef:db:0e:41:c4:d4:32:66:2d: 59:d3:f4:86:ff:d0:29:7a:7b:e1:ac:9b:26:05:fa:14:b3:4a: 2f:67:05:54:73:40:a2:19:f7:ac:5c:9b:3b:35:31:dd:54:42: d3:14:24:5c:c0:5f:b9:90:fb:70:fc:94:5f:2c:6f:15:4e:dc: b2:68:24:77:1d:e0:5a:44:04:fb:1d:fd:72:e2:94:ba:5e:b5: c4:f4:1a:e2:ec:93:de:b0:72:b3:d6:cb:a8:a3:f8:42:57:55: ba:c6:08:43:98:ba:26:dc:0b:ef:4d:ce:db:83:4e:b0:13:db: 90:d9:89:66:51:81:59:3e:ab:1d:aa:ae:86:d8:80:13:eb:e9: d6:6a:ed:9f:7d:41:30:c6:67:f8:2d:37:d7:68:94:1d:9b:48: ec:cf:ec:4a:84:71:f7:82:cc:b6:e0:e2:52:06:fe:9a:16:ed: 3e:7d:8c:6a:90:72:c4:20:06:08:7b:9b:36:14:14:e2:93:c0: a1:a4:4b:66:a9:03:e1:9b:de:1a:80:d0:c3:43:3c:22:ac:45: a2:68:97:76:5a:51:2e:97:a1:44:f7:0a:01:72:14:d5:8e:68: ce:bc:4d:7b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCpp1ysXx3QGr1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MmNmYWM2N2ItNDY1My00NjcyLWJkNzMtODEzMDM5MzJmOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+5umkDHGyi5Lfz6gpOB/+pswZtDV3FnWxcQ oC3cslqIVuquUDHXRZ3gap72Bq0oR5nqLUM8WOjam+TSR1HIjbW3uI5EKxQqqENK oecn9+mV/FqiqGSTnKXd6UB06M1+CAWA5I6KHzqKDVNR1zZ69DZhSp5Ngg1Lwc+D dFAvqKuKf02lS1w3T4rkBvWdAE8y5thqcKtQ9ypxCdTLe9+DBLHlplwXylQAmsIo q/Ix9Nm+IH/s0usmTVvJJ15bdatXYiefcs9EPDpc++dYWvKFPXNVXj8GVC3u901s c+xFbOLUnlC2gyqAxXAgx7+/Svg4ZbYIptqo0VP2Z0k9yPc4KwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAPkHZ7CSNwApKDnriBLTpjagZjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmZjOWMxNjEtODYzYy0z N2QxLWIwNDYtM2NhZjkyNDJkYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqYIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAbH5HnGozZ2J0nLQqFuRORs6D6xEhmIRgVSAL79sOQcTUMmYtWdP0hv/Q KXp74aybJgX6FLNKL2cFVHNAohn3rFybOzUx3VRC0xQkXMBfuZD7cPyUXyxvFU7c smgkdx3gWkQE+x39cuKUul61xPQa4uyT3rBys9bLqKP4QldVusYIQ5i6JtwL703O 24NOsBPbkNmJZlGBWT6rHaquhtiAE+vp1mrtn31BMMZn+C0312iUHZtI7M/sSoRx 94LMtuDiUgb+mhbtPn2MapByxCAGCHubNhQU4pPAoaRLZqkD4ZveGoDQw0M8IqxF omiXdlpRLpehRPcKAXIU1Y5ozrxNew== -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:40 2026 by rpki-client