$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f5b071c-f8c4-33f2-83ac-505e007b23f6.roa File: 4f5b071c-f8c4-33f2-83ac-505e007b23f6.roa (raw, json) Hash identifier: EiP+Lygfvvvwz+c3aM4wNd4TAofaDtpmnsQD355nLuA= Subject key identifier: 96:0E:75:DC:2C:A9:31:04:89:63:FE:04:18:53:00:CB:3A:36:A8:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C4DEFA146891BD63035EE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f5b071c-f8c4-33f2-83ac-505e007b23f6.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.2.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:de:fa:14:68:91:bd:63:03:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=8f5300d3-f7d5-4b71-b914-ab367c2a3eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:4a:d8:15:80:77:48:5b:e9:0f:12:69:50: ad:11:48:db:0f:99:ce:56:98:67:39:3a:09:ef:72: 53:bd:9a:05:03:00:a7:44:e3:1f:80:d0:ad:3e:d7: 10:58:6c:77:1c:f4:b2:86:55:35:95:47:0f:bc:bb: e0:98:39:6d:c9:71:70:39:54:2d:c5:16:68:82:a7: 71:c1:bd:1e:89:40:73:e0:7d:03:5a:6e:89:ae:30: 41:7e:d3:53:ee:60:bd:d8:3e:41:ab:2d:f3:f1:44: ac:80:1b:fc:4f:50:19:e3:f6:37:70:bd:cd:f5:41: 31:63:42:f4:05:24:48:3c:8f:ee:62:60:ac:0e:13: a0:4f:e7:71:80:fb:28:b3:a8:7b:05:90:75:24:ab: 93:da:fe:8e:ae:e0:8e:b2:6e:85:02:d4:d9:25:6c: 0a:14:7d:6d:63:ae:dc:ae:dd:be:8b:7e:d1:c0:be: 07:2f:88:c1:a2:cb:ef:e2:b5:2f:ad:4a:19:56:f9: bc:1f:d9:e8:6b:7d:7b:23:24:32:ab:4a:65:31:81: 31:b0:f9:a7:9f:6a:f2:fb:4c:2d:c0:8b:30:7d:16: b1:a7:28:02:9a:5f:58:e7:ca:10:85:f7:5f:66:f8: 7b:80:04:94:b7:ac:28:73:72:f5:dd:d1:7b:5f:eb: d4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0E:75:DC:2C:A9:31:04:89:63:FE:04:18:53:00:CB:3A:36:A8:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f5b071c-f8c4-33f2-83ac-505e007b23f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:89:28:df:7a:a5:e9:fb:cf:23:ed:8a:d8:bd:8a:e5:0e:fb: 64:48:28:b7:df:e6:d0:aa:ec:43:8d:82:6e:46:e1:60:0c:b3: 6f:3a:0d:f0:5e:bb:ed:5e:08:4c:3f:d7:d2:98:ea:09:a6:d1: f2:bb:38:a3:31:e1:dd:47:4f:1e:bd:c7:7d:6b:a9:38:15:71: a7:bf:c2:e7:7c:2d:4a:de:5e:7d:13:12:2b:67:66:b4:6b:a3: 1e:ff:f2:2a:05:ad:1f:6d:2e:f7:ac:77:fd:df:b8:1d:13:9e: 8c:1c:f6:da:33:ee:59:7b:ac:3b:34:80:21:e9:ca:11:e9:25: 70:a6:6c:ff:19:c8:38:f4:ef:fd:01:a3:f4:cb:73:15:aa:9a: 92:07:c3:1d:09:34:b7:c1:d5:c9:6b:3f:bd:67:64:79:b0:e4: 60:76:50:5e:d2:7a:63:bb:a8:a5:fe:32:a7:8c:47:d9:c5:a3: c1:2d:bd:ef:99:56:49:35:9a:d1:7c:c8:76:2d:94:1e:1a:3f: 57:e2:9f:9b:b0:83:9d:32:29:6d:79:61:8f:6f:fa:d8:49:0b: cb:0d:21:e1:74:79:d6:04:a4:08:c6:ec:21:9c:bf:c1:91:29: c6:09:cb:bb:2f:b3:d5:6d:35:04:73:66:09:cf:f9:e8:94:b5: d5:42:dd:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxN76FGiRvWMDXuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk OGY1MzAwZDMtZjdkNS00YjcxLWI5MTQtYWIzNjdjMmEzZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAratK2BWAd0hb6Q8SaVCtEUjbD5nOVphnOToJ 73JTvZoFAwCnROMfgNCtPtcQWGx3HPSyhlU1lUcPvLvgmDltyXFwOVQtxRZogqdx wb0eiUBz4H0DWm6JrjBBftNT7mC92D5Bqy3z8USsgBv8T1AZ4/Y3cL3N9UExY0L0 BSRIPI/uYmCsDhOgT+dxgPsos6h7BZB1JKuT2v6OruCOsm6FAtTZJWwKFH1tY67c rt2+i37RwL4HL4jBosvv4rUvrUoZVvm8H9noa317IyQyq0plMYExsPmnn2ry+0wt wIswfRaxpygCml9Y58oQhfdfZvh7gASUt6woc3L13dF7X+vU3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYOddwsqTEEiWP+BBhTAMs6NqhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY1YjA3MWMtZjhjNC0z M2YyLTgzYWMtNTA1ZTAwN2IyM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0QKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCJKN96pen7zyPtiti9iuUO+2RIKLff5tCq7EONgm5G4WAMs286DfBe u+1eCEw/19KY6gmm0fK7OKMx4d1HTx69x31rqTgVcae/wud8LUreXn0TEitnZrRr ox7/8ioFrR9tLvesd/3fuB0Tnowc9toz7ll7rDs0gCHpyhHpJXCmbP8ZyDj07/0B o/TLcxWqmpIHwx0JNLfB1clrP71nZHmw5GB2UF7SemO7qKX+MqeMR9nFo8Etve+Z Vkk1mtF8yHYtlB4aP1fin5uwg50yKW15YY9v+thJC8sNIeF0edYEpAjG7CGcv8GR KcYJy7svs9VtNQRzZgnP+eiUtdVC3ao= -----END CERTIFICATE-----Generated at Fri Mar 27 03:31:39 2026 by rpki-client