$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ea35caf-c469-329a-a15c-789b0c207c34.roa File: 6ea35caf-c469-329a-a15c-789b0c207c34.roa (raw, json) Hash identifier: YXvDWoiJuQbbBxElagEKOVqTyiD47wryn4HuSVpqBwQ= Subject key identifier: E1:57:05:2B:74:7D:8A:09:AC:9F:F3:71:27:10:E0:9B:80:9E:3C:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C4DEB64E4036985AE5660C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ea35caf-c469-329a-a15c-789b0c207c34.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.2.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:de:b6:4e:40:36:98:5a:e5:66:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=156950de-6e59-427b-9c7f-58ddfc5eef47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:93:57:66:d1:3c:68:4f:fb:35:29:d9:ac: 68:e0:2a:64:d5:4a:9a:18:26:5b:94:43:c6:58:7c: fe:ab:c7:a5:57:dd:1f:b8:2f:fa:de:48:1e:b3:cc: 28:72:40:bd:80:e6:08:1c:75:0d:0c:69:ca:5d:16: fb:1e:78:df:92:91:df:4d:fb:06:12:f1:ef:15:cc: 77:56:29:b9:fd:25:3c:54:1a:c3:6e:77:18:46:6e: 64:ff:88:7b:c8:0f:6a:62:d1:bd:28:cf:0f:7c:ca: ac:63:eb:9d:18:18:51:f8:cd:0e:77:8b:db:4d:13: 34:c1:61:ca:02:49:7c:f0:5e:9b:48:01:ab:e9:8d: 17:5d:b1:7a:6b:73:de:b5:57:36:a2:46:4e:ea:f2: 9e:e7:96:cb:ce:0c:0f:5d:a7:22:d0:a6:f2:c1:2b: 8e:72:9c:bd:c9:bf:6c:d6:c0:ca:ba:cd:d7:11:80: 09:1f:3d:91:ea:01:ef:42:e9:63:22:6e:40:fc:3c: 8b:a2:28:11:94:9f:f3:18:2e:9d:63:02:68:f2:15: 66:a6:6d:50:7d:c5:2c:cb:56:78:60:96:01:f5:d1: b3:e7:e0:c7:98:43:02:fa:6f:d6:87:8e:83:ad:d0: 3b:22:8b:48:74:24:ec:6a:33:f2:54:0a:f6:a0:24: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:57:05:2B:74:7D:8A:09:AC:9F:F3:71:27:10:E0:9B:80:9E:3C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ea35caf-c469-329a-a15c-789b0c207c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:93:b2:e2:ef:d1:05:ee:3f:02:de:eb:48:b2:02:61:d6:16: d0:c3:0e:0c:41:f1:25:5f:d4:da:77:3b:d3:65:ce:c5:0a:ce: ad:95:05:0b:3f:36:8d:78:2b:ac:8f:8d:d2:59:26:57:0c:a3: e7:0a:b7:ed:ae:fc:4b:d2:2b:81:c8:e1:bb:d5:00:76:58:d3: 06:6f:6b:a5:65:1b:97:95:7a:81:bb:ad:f5:44:c9:16:e8:33: 67:2e:81:48:d4:47:c8:7e:d8:ed:54:25:09:22:15:d9:d8:74: ea:e0:be:78:99:5c:61:b2:aa:15:84:19:81:e0:6a:ac:cf:07: 2d:21:e7:db:f9:97:cd:d2:54:e5:b3:45:60:11:a6:de:d1:f3: 8c:f5:3e:d2:ae:4c:f9:b5:a8:8a:6b:13:ed:16:5d:fa:03:62: 7c:0f:05:43:6b:62:d2:4b:b0:7d:20:14:39:96:a4:b8:c3:fe: 21:0a:53:31:13:18:36:81:a1:ce:c1:f2:5e:73:f3:c9:a0:f9: b5:80:48:be:71:90:a1:3a:84:da:4b:de:2c:f3:08:71:84:21: b1:95:cf:83:a3:f0:dd:02:17:d9:fb:42:24:10:8b:e9:bd:cd: 77:e9:fa:7f:00:be:7c:7c:b7:fb:fe:fa:f3:bd:c6:45:d0:94: 6d:e9:1c:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxN62TkA2mFrlZgwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MTU2OTUwZGUtNmU1OS00MjdiLTljN2YtNThkZGZjNWVlZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQWTV2bRPGhP+zUp2axo4Cpk1UqaGCZblEPG WHz+q8elV90fuC/63kges8wockC9gOYIHHUNDGnKXRb7HnjfkpHfTfsGEvHvFcx3 Vim5/SU8VBrDbncYRm5k/4h7yA9qYtG9KM8PfMqsY+udGBhR+M0Od4vbTRM0wWHK Akl88F6bSAGr6Y0XXbF6a3PetVc2okZO6vKe55bLzgwPXaci0KbywSuOcpy9yb9s 1sDKus3XEYAJHz2R6gHvQuljIm5A/DyLoigRlJ/zGC6dYwJo8hVmpm1QfcUsy1Z4 YJYB9dGz5+DHmEMC+m/Wh46DrdA7IotIdCTsajPyVAr2oCQVOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFXBSt0fYoJrJ/zcScQ4JuAnjwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmVhMzVjYWYtYzQ2OS0z MjlhLWExNWMtNzg5YjBjMjA3YzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyTsuLv0QXuPwLe60iyAmHWFtDDDgxB8SVf1Np3O9NlzsUKzq2VBQs/ No14K6yPjdJZJlcMo+cKt+2u/EvSK4HI4bvVAHZY0wZva6VlG5eVeoG7rfVEyRbo M2cugUjUR8h+2O1UJQkiFdnYdOrgvniZXGGyqhWEGYHgaqzPBy0h59v5l83SVOWz RWARpt7R84z1PtKuTPm1qIprE+0WXfoDYnwPBUNrYtJLsH0gFDmWpLjD/iEKUzET GDaBoc7B8l5z88mg+bWASL5xkKE6hNpL3izzCHGEIbGVz4Oj8N0CF9n7QiQQi+m9 zXfp+n8Avnx8t/v++vO9xkXQlG3pHOY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:04 2026 by rpki-client