$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa File: 5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa (raw, json) Hash identifier: WN6FIFb2kdmvSo58XAx4T5X0XaaYIbpw226jbRzORv0= Subject key identifier: 05:FB:74:BE:3B:75:C5:7E:90:F1:F6:BD:C2:B6:CC:29:B1:B4:93:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C5097D4B5BE734BAD8CC30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.2.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:09:7d:4b:5b:e7:34:ba:d8:cc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=6d809a9d-92d7-4b31-a962-22ee0f29796e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:9e:d3:af:18:b7:c4:46:30:37:ad:46:ce: 39:90:8f:98:2f:42:c7:27:c4:73:0b:f2:96:46:99: 98:94:82:30:38:81:d2:ba:89:0f:fe:95:2a:2d:f2: 1e:0f:2b:2f:7a:b9:b0:b6:4a:6f:3c:be:b8:17:77: f4:83:92:65:fb:00:36:00:2e:ea:b0:7d:32:37:0d: 37:80:da:28:28:b8:a9:2e:18:52:9b:a2:ba:d9:da: f8:9f:eb:bd:2d:e9:91:63:ee:98:2d:72:2f:87:05: d1:95:84:4d:80:b6:63:9d:a8:64:2b:48:46:22:c3: f8:9c:aa:40:4c:02:b2:4e:42:9d:bb:f2:91:3c:e3: 13:bc:bc:08:2a:5b:28:55:a1:dd:b4:c0:8e:c4:bb: c2:de:8b:61:a1:78:e9:02:af:37:c5:08:a5:30:14: fd:60:8e:8c:20:88:d5:ac:d5:ad:0c:66:a9:fa:3d: 79:83:cd:07:b7:5c:05:d0:b2:d5:20:1d:72:f3:a2: 56:03:88:d9:8d:a0:77:0d:b3:4c:4c:fd:3e:45:62: 7b:ec:01:25:18:f1:b5:4d:06:16:f0:f7:c9:6a:c7: 18:95:cd:9b:33:75:11:be:17:a7:5c:9a:b7:20:e1: e9:a5:72:c2:e7:e5:7d:db:0e:6c:bf:2d:60:40:1c: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FB:74:BE:3B:75:C5:7E:90:F1:F6:BD:C2:B6:CC:29:B1:B4:93:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:66:50:fd:d6:43:7f:8e:ec:ab:b4:74:55:2a:3d:71:0d:29: ea:0c:cc:b5:45:81:b2:09:fa:ac:a3:06:76:20:2a:91:09:66: 98:e9:b8:54:08:a1:cc:f5:3d:71:ba:1e:14:c3:30:e4:60:d2: 25:34:fc:a5:d9:29:21:62:3a:08:98:c8:a9:55:79:e0:8c:45: 3a:7f:cf:a6:f5:94:ca:f1:76:00:c0:4d:04:76:62:79:15:66: 1f:17:0a:83:e4:a1:79:76:af:a6:4e:64:51:02:23:77:2a:b5: 76:6a:93:14:e0:e3:20:a8:e9:7f:f6:14:22:d7:4d:68:9d:01: 32:c2:21:4b:ef:5c:b8:24:0d:8e:b3:ad:28:c3:49:15:bb:7a: d6:37:1f:0a:c6:d4:a7:01:3b:97:ff:0a:ae:a0:24:e7:9f:45: 26:58:1e:46:0d:da:2e:15:3d:b1:73:96:09:0a:e6:0d:32:a7: 00:57:03:aa:e7:e9:03:31:1f:1d:f3:13:ff:58:26:ea:d5:26: e4:1b:86:84:6b:f5:3c:65:be:8d:6b:2d:61:a2:33:66:c1:cd: 7c:9a:03:89:dc:c4:d2:a0:a1:6a:8f:e0:65:a9:2a:fc:9f:f7: 83:60:4e:1a:86:8e:fc:39:da:cf:d0:f5:e3:78:8a:9d:3a:c0: bf:a6:c4:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQl9S1vnNLrYzDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NmQ4MDlhOWQtOTJkNy00YjMxLWE5NjItMjJlZTBmMjk3OTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaWe068Yt8RGMDetRs45kI+YL0LHJ8RzC/KW RpmYlIIwOIHSuokP/pUqLfIeDysvermwtkpvPL64F3f0g5Jl+wA2AC7qsH0yNw03 gNooKLipLhhSm6K62dr4n+u9LemRY+6YLXIvhwXRlYRNgLZjnahkK0hGIsP4nKpA TAKyTkKdu/KRPOMTvLwIKlsoVaHdtMCOxLvC3othoXjpAq83xQilMBT9YI6MIIjV rNWtDGap+j15g80Ht1wF0LLVIB1y86JWA4jZjaB3DbNMTP0+RWJ77AElGPG1TQYW 8PfJascYlc2bM3URvhenXJq3IOHppXLC5+V92w5svy1gQByiLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX7dL47dcV+kPH2vcK2zCmxtJNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWEzMmIwOWQtNjE0Yy0z MjNkLTliMDItZDhiZGFkNGZjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNmUP3WQ3+O7Ku0dFUqPXENKeoMzLVFgbIJ+qyjBnYgKpEJZpjpuFQI ocz1PXG6HhTDMORg0iU0/KXZKSFiOgiYyKlVeeCMRTp/z6b1lMrxdgDATQR2YnkV Zh8XCoPkoXl2r6ZOZFECI3cqtXZqkxTg4yCo6X/2FCLXTWidATLCIUvvXLgkDY6z rSjDSRW7etY3HwrG1KcBO5f/Cq6gJOefRSZYHkYN2i4VPbFzlgkK5g0ypwBXA6rn 6QMxHx3zE/9YJurVJuQbhoRr9Txlvo1rLWGiM2bBzXyaA4ncxNKgoWqP4GWpKvyf 94NgThqGjvw52s/Q9eN4ip06wL+mxFo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:36 2026 by rpki-client