$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa File: 5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa (raw, json) Hash identifier: wyd+Z35Jly2CWMSP78T1e6X1v2A4Fbr+GJDZ2jfcEbM= Subject key identifier: E1:2A:44:35:E8:31:6E:ED:77:A2:A6:68:3B:38:07:38:AA:71:B2:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C4DCA39F67129DDE8F1900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.2.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:dc:a3:9f:67:12:9d:de:8f:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=824bddb0-1db3-4ba0-a770-a68af33b2a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:0a:91:53:9a:29:2a:9a:72:8b:59:22:57: c4:61:0a:10:04:e1:7d:83:01:0b:1a:09:86:ce:3c: c7:6b:94:92:8d:9d:91:ff:62:a2:ee:b9:eb:ed:90: c9:25:90:e3:27:2f:09:34:27:5e:a7:46:68:be:e9: ac:4d:40:fa:af:53:65:8f:ef:49:01:0e:c8:e4:9e: 14:93:28:65:bc:aa:91:50:a1:ba:78:dc:77:b7:c1: 53:a7:b8:6a:ae:a2:5b:c0:41:3a:c2:1c:56:a5:3f: 11:57:2d:23:f6:98:01:18:72:5f:20:6d:9c:2c:73: 90:6d:29:98:b7:b6:98:27:b7:b2:d0:34:e3:1e:16: cb:61:6a:fe:e9:2b:62:fc:61:b9:38:8c:50:b4:60: a1:b3:42:f5:b1:52:db:cc:1e:9b:72:39:7a:bd:5e: eb:11:0c:0b:c8:ba:06:bf:92:63:bc:60:f9:d6:04: 61:cf:a7:39:a8:26:fe:28:ca:00:fe:81:0b:3e:ff: 98:75:13:4d:18:55:79:48:e7:59:fa:8b:e0:22:63: a1:31:9e:c5:db:d0:4c:c0:b0:ba:ff:99:0d:32:fa: fd:04:7c:69:e5:18:7a:1a:23:86:9f:e5:5d:25:4f: 10:4b:e7:49:c6:88:5e:7e:02:3b:af:e3:3c:8f:f8: 06:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2A:44:35:E8:31:6E:ED:77:A2:A6:68:3B:38:07:38:AA:71:B2:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5140e7ab-5d24-3342-9292-d79d02eb5dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b4:f9:f1:d1:61:5b:1c:ac:a5:a0:db:69:51:42:9b:6a:b2: 5a:08:65:c7:fe:c8:8e:f3:24:9b:75:f2:c8:3b:c8:ea:29:64: 46:8b:8b:62:c2:e5:fb:bf:49:1e:9b:aa:15:8d:ee:d9:0a:3a: fd:34:7f:8f:fa:29:15:bf:ef:35:c2:94:a1:ff:42:ae:a5:3c: c8:61:da:9c:3d:ad:ec:96:ca:d8:d7:a1:8a:9f:28:b8:d0:ac: bc:7c:4e:86:4c:24:5c:12:c6:bc:6a:21:f9:f0:b7:b6:61:fa: 21:e6:ad:3c:8e:82:4f:17:af:34:a9:54:7b:39:01:67:60:41: e5:1f:d3:1d:32:6f:50:27:0b:0c:87:d4:7d:1a:30:7d:c4:a9: e0:da:f5:eb:01:9a:fc:62:ea:bb:c1:e5:f6:21:c6:31:62:a0: 03:d0:07:95:81:5d:fd:c6:79:01:1e:d7:09:51:c2:10:d7:a5: 60:80:34:9f:47:1c:f9:1d:62:ec:7d:fc:f0:ba:c9:ef:a1:6d: c6:ae:6e:d4:0a:5c:2d:38:ba:94:af:c7:20:12:31:d5:81:24: 77:d1:63:31:23:6c:42:15:28:47:92:5d:bd:19:47:dd:ca:c2: 87:56:58:41:18:c4:3a:5f:eb:68:fd:e4:ef:2a:ca:a3:31:46: db:d8:12:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxNyjn2cSnd6PGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ODI0YmRkYjAtMWRiMy00YmEwLWE3NzAtYTY4YWYzM2IyYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis8KkVOaKSqacotZIlfEYQoQBOF9gwELGgmG zjzHa5SSjZ2R/2Ki7rnr7ZDJJZDjJy8JNCdep0ZovumsTUD6r1Nlj+9JAQ7I5J4U kyhlvKqRUKG6eNx3t8FTp7hqrqJbwEE6whxWpT8RVy0j9pgBGHJfIG2cLHOQbSmY t7aYJ7ey0DTjHhbLYWr+6Sti/GG5OIxQtGChs0L1sVLbzB6bcjl6vV7rEQwLyLoG v5JjvGD51gRhz6c5qCb+KMoA/oELPv+YdRNNGFV5SOdZ+ovgImOhMZ7F29BMwLC6 /5kNMvr9BHxp5Rh6GiOGn+VdJU8QS+dJxohefgI7r+M8j/gGWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEqRDXoMW7td6KmaDs4BziqcbIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTE0MGU3YWItNWQyNC0z MzQyLTkyOTItZDc5ZDAyZWI1ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0QJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm0+fHRYVscrKWg22lRQptqsloIZcf+yI7zJJt18sg7yOopZEaLi2LC 5fu/SR6bqhWN7tkKOv00f4/6KRW/7zXClKH/Qq6lPMhh2pw9reyWytjXoYqfKLjQ rLx8ToZMJFwSxrxqIfnwt7Zh+iHmrTyOgk8XrzSpVHs5AWdgQeUf0x0yb1AnCwyH 1H0aMH3EqeDa9esBmvxi6rvB5fYhxjFioAPQB5WBXf3GeQEe1wlRwhDXpWCANJ9H HPkdYux9/PC6ye+hbcaubtQKXC04upSvxyASMdWBJHfRYzEjbEIVKEeSXb0ZR93K wodWWEEYxDpf62j95O8qyqMxRtvYEiA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:40:08 2026 by rpki-client