$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa File: 4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa (raw, json) Hash identifier: Zao/zAW5fpZHpunAJDZw6VQDhmlsR3EWSRFnziGeMgc= Subject key identifier: DC:1D:79:B4:DA:2D:3F:C5:96:23:A1:86:01:CC:5C:F1:4F:A5:81:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9DC1DA282A24F0127500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 207.155.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9d:c1:da:28:2a:24:f0:12:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=8ba6809a-4be8-4938-8ca6-9b14608ef82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:06:41:60:c6:a3:c5:50:80:63:42:e6:0e:a9: d5:d7:10:6d:bc:ad:3d:22:22:e2:2e:2f:64:fb:e9: fc:87:3e:5f:68:4d:08:b9:d1:ef:1a:e3:55:42:2c: b4:79:46:4c:2d:84:1f:d8:f9:f4:b1:58:90:8e:11: 3b:86:b1:ea:3b:5e:ce:d7:a5:6a:c0:cd:dd:9a:91: f1:a9:26:53:d6:ca:c0:1a:6b:5a:28:60:2d:06:a7: 16:bd:f5:8f:aa:8b:0d:83:78:0d:4f:8d:1d:60:ab: fc:40:df:c7:17:12:0e:8f:f4:f8:e2:df:b7:10:4b: 98:bd:db:12:fc:16:a0:55:5a:6d:a4:b7:08:ec:86: db:91:0b:4b:1d:ed:76:72:dc:eb:2a:11:bf:61:a5: f5:8b:f7:71:f7:4f:e0:40:04:bf:1c:b5:f4:25:41: 60:f7:cd:b8:76:c6:f0:2b:94:16:fd:cd:61:38:46: b7:06:52:6d:84:1e:bd:f4:36:80:7b:bc:af:1c:a6: ba:c1:00:4e:53:78:aa:d5:5c:db:92:a7:03:9f:d6: 52:8c:1e:2f:fb:97:dd:ee:66:f3:07:a9:bc:f3:2a: 6d:97:7a:af:60:4e:8e:cd:1b:2b:a5:2f:50:76:5d: ef:51:e3:91:fa:ba:c3:9e:dd:1c:9d:ce:86:c0:d1: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1D:79:B4:DA:2D:3F:C5:96:23:A1:86:01:CC:5C:F1:4F:A5:81:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.155.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:57:15:76:c0:a0:43:ce:22:f6:2a:5d:32:a5:91:4f:13:08: 6e:8c:3a:fa:8e:4b:db:77:03:36:7c:ee:91:85:b0:98:1d:12: 4c:23:a4:d2:99:1e:c6:ae:48:14:8b:05:dd:ff:d7:55:63:e9: ae:1c:c8:b9:45:47:1b:91:09:8a:17:2e:08:21:f2:5c:d3:f8: af:fe:6e:f1:f1:e4:38:2c:18:ff:da:f4:3c:dc:6b:80:22:a3: cc:79:9c:6f:7e:5f:fe:42:6e:66:49:31:9f:9a:b6:91:14:5c: ea:69:f9:ee:71:99:fd:86:26:8c:86:06:cb:e2:fe:6b:ea:cd: 94:10:2f:00:9c:de:b5:ce:9a:39:56:1e:49:fd:69:28:93:bd: e5:ce:bb:d8:8e:4b:63:b3:20:8b:7b:60:b6:59:f7:b3:a9:c0: 10:3a:e5:c0:6e:70:c1:d4:d3:56:ef:5a:36:5a:50:75:ea:cc: f4:b9:49:60:5d:05:9c:0c:94:c7:16:20:10:b0:13:94:ec:fd: e8:83:7e:89:6c:c7:24:c2:59:5c:46:82:b5:83:15:5b:c9:74: 1a:19:b4:81:d6:cc:04:a1:28:1e:85:de:f1:c0:ad:0e:31:83: a5:68:6c:1e:78:2f:9a:43:0f:c4:22:9e:1f:e9:94:15:26:77: 27:a4:e5:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCp3B2igqJPASdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OGJhNjgwOWEtNGJlOC00OTM4LThjYTYtOWIxNDYwOGVmODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQZBYMajxVCAY0LmDqnV1xBtvK09IiLiLi9k ++n8hz5faE0IudHvGuNVQiy0eUZMLYQf2Pn0sViQjhE7hrHqO17O16VqwM3dmpHx qSZT1srAGmtaKGAtBqcWvfWPqosNg3gNT40dYKv8QN/HFxIOj/T44t+3EEuYvdsS /BagVVptpLcI7IbbkQtLHe12ctzrKhG/YaX1i/dx90/gQAS/HLX0JUFg9824dsbw K5QW/c1hOEa3BlJthB699DaAe7yvHKa6wQBOU3iq1VzbkqcDn9ZSjB4v+5fd7mbz B6m88yptl3qvYE6OzRsrpS9Qdl3vUeOR+rrDnt0cnc6GwNH3eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwdebTaLT/FliOhhgHMXPFPpYGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM3ODY1OGMtMTFhYi0z MTI1LWIyZmUtNGJiMjcxYzdmM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHz5sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhXFXbAoEPOIvYqXTKlkU8TCG6MOvqOS9t3AzZ87pGFsJgdEkwjpNKZ HsauSBSLBd3/11Vj6a4cyLlFRxuRCYoXLggh8lzT+K/+bvHx5DgsGP/a9Dzca4Ai o8x5nG9+X/5CbmZJMZ+atpEUXOpp+e5xmf2GJoyGBsvi/mvqzZQQLwCc3rXOmjlW Hkn9aSiTveXOu9iOS2OzIIt7YLZZ97OpwBA65cBucMHU01bvWjZaUHXqzPS5SWBd BZwMlMcWIBCwE5Ts/eiDfolsxyTCWVxGgrWDFVvJdBoZtIHWzAShKB6F3vHArQ4x g6VobB54L5pDD8Qinh/plBUmdyek5a0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:04 2026 by rpki-client