$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65820e26-08d3-39ca-84f8-de5a4f299c38.roa File: 65820e26-08d3-39ca-84f8-de5a4f299c38.roa (raw, json) Hash identifier: g7w3a8Wvb7lZoMuPsKrP9+yxkIOHWOcpZC2aNIOKuEE= Subject key identifier: F6:93:27:CB:B2:AE:5C:51:D6:6B:B5:E0:FD:A7:11:92:54:7F:F0:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9E34C097D09EB231FE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65820e26-08d3-39ca-84f8-de5a4f299c38.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 208.101.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9e:34:c0:97:d0:9e:b2:31:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9e713290-c15f-4d09-a172-99e2b745c040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:16:98:31:1d:e6:d7:b1:bd:89:c3:32:99: e7:0e:80:55:ba:9d:d6:bc:96:ad:ac:ce:f5:de:c4: a1:af:96:e2:ce:2d:8f:a9:03:07:ef:20:46:b2:aa: 6f:2b:4e:26:2b:8c:e3:15:cb:7d:92:91:93:76:18: 59:51:28:8b:11:9d:38:fa:28:7d:62:94:7e:b6:9f: 89:a8:43:28:b7:39:48:fa:17:ae:c5:c9:e4:6f:2a: 0d:9a:2e:29:78:9e:51:ad:f1:5c:ea:44:e4:a5:d7: 9c:51:ca:84:68:85:b1:0f:f7:53:2b:c7:97:9f:37: 54:ae:cf:11:d1:0a:e1:60:0c:07:db:2a:74:ac:9b: 50:d7:6e:85:35:b8:fe:58:7f:49:cf:6e:21:68:60: 7f:5b:84:bc:19:91:f0:44:14:f8:2e:e1:d9:92:1a: d4:ea:23:7f:85:e8:25:f9:61:71:24:fe:91:5d:59: bb:a9:eb:66:bf:b3:5d:29:3a:92:04:54:18:1d:2c: 81:ad:18:d0:40:d7:16:55:d9:f2:9f:f4:83:4a:92: ab:20:79:0b:7a:84:52:11:ee:96:e3:d9:96:08:ce: d0:ad:46:59:c7:31:b3:62:eb:3e:2f:58:87:c7:e8: f6:d5:e2:1f:d7:a1:38:33:ed:ea:f4:3c:fb:a1:42: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:93:27:CB:B2:AE:5C:51:D6:6B:B5:E0:FD:A7:11:92:54:7F:F0:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65820e26-08d3-39ca-84f8-de5a4f299c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a4:78:fd:00:aa:1a:51:4f:1f:56:9c:a0:0a:8b:9e:df:3d: 95:7a:b1:72:6e:73:85:80:e0:78:08:d9:cf:da:00:e5:2c:46: ee:e5:aa:f2:d0:b5:b9:30:13:5f:76:7f:e1:40:36:80:ba:04: f3:52:5e:ae:8d:f6:35:29:4c:63:62:a9:55:6b:fa:f2:15:a7: e5:d8:78:74:bf:39:19:d9:78:ac:6e:51:3a:c6:60:c3:1b:fa: 2c:47:23:1a:be:de:7b:73:25:70:e7:a1:58:eb:22:ff:f2:a6: 2c:ae:da:85:e3:fb:8b:fa:bf:04:3d:37:5e:99:0b:bd:c4:84: fe:4d:29:b9:f6:46:d0:83:05:9b:e1:67:29:31:52:2d:8a:44: 9f:1a:c6:b6:4d:34:77:f0:d9:5c:57:f2:87:ca:e7:17:ac:bd: 0a:6b:8f:5b:f2:20:de:eb:64:f5:41:5a:f4:e0:27:33:2d:6c: 66:2f:fb:83:b5:c3:53:92:29:7f:4d:74:10:4b:13:45:7f:cd: ab:4a:bd:7f:5e:01:0b:d8:cf:45:7a:53:e8:a2:93:47:42:6c: 3a:12:ed:38:da:80:e5:34:50:85:76:80:e6:b6:d7:1b:37:c6: b0:9f:a9:ae:00:b9:be:ca:8a:98:5c:b9:b4:9f:bc:b8:7a:4f: 41:1e:1f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCp40wJfQnrIx/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OWU3MTMyOTAtYzE1Zi00ZDA5LWExNzItOTllMmI3NDVjMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5cWmDEd5texvYnDMpnnDoBVup3WvJatrM71 3sShr5bizi2PqQMH7yBGsqpvK04mK4zjFct9kpGTdhhZUSiLEZ04+ih9YpR+tp+J qEMotzlI+heuxcnkbyoNmi4peJ5RrfFc6kTkpdecUcqEaIWxD/dTK8eXnzdUrs8R 0QrhYAwH2yp0rJtQ126FNbj+WH9Jz24haGB/W4S8GZHwRBT4LuHZkhrU6iN/hegl +WFxJP6RXVm7qetmv7NdKTqSBFQYHSyBrRjQQNcWVdnyn/SDSpKrIHkLeoRSEe6W 49mWCM7QrUZZxzGzYus+L1iHx+j21eIf16E4M+3q9Dz7oULNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaTJ8uyrlxR1mu14P2nEZJUf/BsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjU4MjBlMjYtMDhkMy0z OWNhLTg0ZjgtZGU1YTRmMjk5YzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEakeP0AqhpRTx9WnKAKi57fPZV6sXJuc4WA4HgI2c/aAOUsRu7lqvLQ tbkwE192f+FANoC6BPNSXq6N9jUpTGNiqVVr+vIVp+XYeHS/ORnZeKxuUTrGYMMb +ixHIxq+3ntzJXDnoVjrIv/ypiyu2oXj+4v6vwQ9N16ZC73EhP5NKbn2RtCDBZvh ZykxUi2KRJ8axrZNNHfw2VxX8ofK5xesvQprj1vyIN7rZPVBWvTgJzMtbGYv+4O1 w1OSKX9NdBBLE0V/zatKvX9eAQvYz0V6U+iik0dCbDoS7TjagOU0UIV2gOa21xs3 xrCfqa4Aub7KiphcubSfvLh6T0EeH2Q= -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:51 2026 by rpki-client