$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3519a5a8-4016-3eed-94c2-653b4471adef.roa File: 3519a5a8-4016-3eed-94c2-653b4471adef.roa (raw, json) Hash identifier: 0wxZpaYrQJ+kdoLHPYh0Zb8k6+Dk306Ci4wFWZa/I1c= Subject key identifier: 00:E0:DC:E1:8F:FF:29:56:E1:A4:41:8C:76:77:07:33:95:F5:B4:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6F521B94CBBD38AFB700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3519a5a8-4016-3eed-94c2-653b4471adef.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 205.185.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6f:52:1b:94:cb:bd:38:af:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ccc486bf-e7e0-4e22-abe7-d5526d1e7d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:53:2f:0c:88:8a:d2:4c:2a:c7:ca:02:d8: 74:fa:61:42:36:d6:bf:1d:b9:1d:fb:24:56:21:79: e7:75:6c:c1:06:11:b4:9f:50:52:c5:06:90:67:87: 67:a1:c9:4f:f2:d7:69:f8:07:72:0f:ee:2e:a5:0a: 08:59:47:c2:b6:ca:3b:b2:c2:ff:c8:57:23:e8:fe: 2e:c6:a2:e5:63:4e:06:ab:eb:61:e1:c6:05:c6:13: af:95:54:35:46:96:fa:5f:70:7c:e8:65:93:2a:51: f4:2b:cd:bb:b9:61:c1:d1:c4:d7:7d:f7:15:8e:6f: 72:ba:11:d6:16:a7:c0:90:f8:7a:cf:88:0a:9e:e6: 8a:06:de:85:a1:92:3e:cf:c9:ce:84:80:0a:0d:09: 24:dd:a7:74:11:55:84:3a:ad:30:a6:c6:94:24:eb: d6:0e:01:15:e8:23:a0:43:83:da:fb:1d:70:32:c6: 9f:1b:ef:de:a5:66:c3:fb:95:da:fc:ff:37:12:93: 2c:92:02:e5:65:47:8b:5b:36:72:19:67:96:e6:7f: 83:90:c6:9e:c1:9d:b8:0a:a6:0b:57:72:06:71:39: 0e:7b:77:d7:13:78:20:32:40:e0:a5:7b:f6:f9:45: 74:f7:23:6c:e4:06:d9:23:ed:59:ef:68:4f:8f:28: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E0:DC:E1:8F:FF:29:56:E1:A4:41:8C:76:77:07:33:95:F5:B4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3519a5a8-4016-3eed-94c2-653b4471adef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.185.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ea:89:88:11:f3:a4:13:3e:8d:5c:29:82:5d:1a:f2:b9:9d: 3b:e7:34:1d:85:42:c4:56:dc:b2:e4:8f:99:00:a6:17:d2:d8: 93:6c:61:d1:c1:9a:c9:4a:9b:6a:ca:a6:02:c2:df:f6:8e:d8: ba:c3:42:75:8b:8b:05:1c:e8:bd:65:31:45:c1:7a:a7:b7:c2: af:9f:3d:98:07:b1:40:00:8c:41:d3:9b:0c:83:ad:6a:bf:8d: c6:68:6b:c6:14:43:68:8b:d0:9c:1f:c5:af:14:95:aa:91:d1: 7a:fb:9f:a3:a2:15:9b:84:23:1f:7c:67:c5:58:9b:b5:93:b7: ab:c3:3e:c5:ad:74:dd:53:e5:49:0c:db:d9:ba:e6:38:76:c6: 92:d9:87:63:6f:49:10:69:10:d0:db:a0:d6:48:f2:81:2c:07: 32:27:18:4d:1b:68:bc:af:b6:6e:4e:b4:db:8b:67:1d:8f:5f: 62:d7:7f:4f:3e:b9:18:06:8f:18:fb:d2:b7:01:29:3b:71:a7: f5:f2:72:87:51:8b:98:ed:aa:69:c0:19:21:bb:af:e6:c6:9f: 21:b2:fc:a7:62:0a:11:4a:8c:b5:3f:2b:04:53:c0:ff:0b:94: 4d:98:bf:ba:14:be:50:6b:8e:a6:a4:a2:6a:8c:54:ef:0b:56: 26:bb:28:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCm9SG5TLvTivtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2NjNDg2YmYtZTdlMC00ZTIyLWFiZTctZDU1MjZkMWU3ZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xTLwyIitJMKsfKAth0+mFCNta/Hbkd+yRW IXnndWzBBhG0n1BSxQaQZ4dnoclP8tdp+AdyD+4upQoIWUfCtso7ssL/yFcj6P4u xqLlY04Gq+th4cYFxhOvlVQ1Rpb6X3B86GWTKlH0K827uWHB0cTXffcVjm9yuhHW FqfAkPh6z4gKnuaKBt6FoZI+z8nOhIAKDQkk3ad0EVWEOq0wpsaUJOvWDgEV6COg Q4Pa+x1wMsafG+/epWbD+5Xa/P83EpMskgLlZUeLWzZyGWeW5n+DkMaewZ24CqYL V3IGcTkOe3fXE3ggMkDgpXv2+UV09yNs5AbZI+1Z72hPjygIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADg3OGP/ylW4aRBjHZ3BzOV9bSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzUxOWE1YTgtNDAxNi0z ZWVkLTk0YzItNjUzYjQ0NzFhZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzbkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXqiYgR86QTPo1cKYJdGvK5nTvnNB2FQsRW3LLkj5kAphfS2JNsYdHB mslKm2rKpgLC3/aO2LrDQnWLiwUc6L1lMUXBeqe3wq+fPZgHsUAAjEHTmwyDrWq/ jcZoa8YUQ2iL0Jwfxa8UlaqR0Xr7n6OiFZuEIx98Z8VYm7WTt6vDPsWtdN1T5UkM 29m65jh2xpLZh2NvSRBpENDboNZI8oEsBzInGE0baLyvtm5OtNuLZx2PX2LXf08+ uRgGjxj70rcBKTtxp/XycodRi5jtqmnAGSG7r+bGnyGy/KdiChFKjLU/KwRTwP8L lE2Yv7oUvlBrjqakomqMVO8LVia7KLU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:06 2026 by rpki-client