$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6f5663a0-91b3-3da6-84d7-eed27f98832a.roa File: 6f5663a0-91b3-3da6-84d7-eed27f98832a.roa (raw, json) Hash identifier: D5eqTKrPXByTbdVjT21Gqd+ZjbJPSWwL+Zaxt2cOdJ0= Subject key identifier: E2:1B:9E:D1:42:14:42:68:81:36:88:06:CD:73:1B:CD:81:0A:CA:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A70191010AED5E1493880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6f5663a0-91b3-3da6-84d7-eed27f98832a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 209.96.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:70:19:10:10:ae:d5:e1:49:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=15038857-8039-4f44-b92d-bc96d863e902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7a:63:11:34:bf:e8:78:a8:de:10:c2:9c:2b: 9a:59:d2:30:f2:0e:80:9d:f5:fd:2b:ed:38:c0:11: 96:c7:0e:73:46:59:2b:11:92:ce:c8:73:4e:0c:86: 3e:80:24:e7:98:88:b0:51:36:9e:a1:f5:6e:2b:72: 48:a5:46:6a:69:dd:e6:1c:08:f4:83:37:94:76:ce: a9:81:e6:1a:dc:ec:5e:74:86:e4:f6:6d:7a:55:45: 58:70:68:5c:96:f4:8f:bc:55:a9:b3:8b:2b:3b:ca: ef:1e:8c:99:31:81:37:f7:92:98:35:71:bb:a5:79: 8a:7e:b7:b8:58:52:1b:94:a4:6f:97:9a:aa:9f:93: 2d:28:f9:9e:44:17:db:9f:a3:59:cf:a7:14:20:af: d5:4a:de:60:25:5c:a0:ca:e2:6b:a1:50:ef:47:9e: 78:89:4b:8a:fc:b8:75:58:7f:e6:47:d6:eb:20:00: 2c:c5:bf:50:80:a0:14:fb:ed:69:d7:c9:94:b5:e8: 28:bd:99:1c:8c:93:32:33:12:4d:fc:54:94:c3:67: 85:56:c3:28:44:37:09:10:17:03:76:df:69:eb:47: c1:d9:08:5c:38:d1:a9:ef:db:25:6e:96:74:0b:11: e7:22:37:40:c8:3c:3f:07:ad:12:95:70:e4:f2:3c: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1B:9E:D1:42:14:42:68:81:36:88:06:CD:73:1B:CD:81:0A:CA:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6f5663a0-91b3-3da6-84d7-eed27f98832a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.96.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c1:44:b6:92:02:d9:c3:17:3f:dd:d6:26:a4:c4:39:90:3b: 7b:df:b6:e6:9c:e6:83:93:78:af:47:fd:9f:52:93:56:da:1a: 3b:ca:ae:d2:4d:35:fc:58:45:8f:40:6e:77:fe:5d:8a:af:83: aa:df:15:da:47:d0:60:72:8b:83:f5:4a:80:47:fa:aa:c0:d9: cd:ac:54:58:dd:65:86:2a:25:33:96:10:ec:42:32:9d:1d:53: 14:f9:61:a6:d0:f2:7a:9a:79:c5:b8:76:ff:44:48:8b:11:18: a3:a3:34:ef:58:49:df:1b:63:ed:72:00:62:2d:5c:88:86:84: 76:23:ce:ef:76:85:82:47:2d:7a:9a:f6:26:5f:3c:fd:8f:c4: e3:e8:ba:c0:a4:3c:b4:af:6c:4f:e0:9b:7e:20:bf:fd:38:f5: b4:d8:ea:ce:97:df:2e:26:bb:08:c5:6b:d5:b9:3a:e4:e7:54: bd:e4:7f:22:16:00:b0:6a:a4:9a:e8:e2:66:9d:6e:bf:92:1c: b7:e9:a3:c6:60:a3:64:c5:7d:f1:67:0c:95:4d:7f:14:34:2c: c1:f6:bf:bf:a3:3f:98:9c:a0:2f:03:76:ee:86:d3:67:dd:5d: e9:37:3f:3b:44:1e:dc:66:35:50:87:84:ed:c7:47:fc:ed:05: 1d:46:e8:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnAZEBCu1eFJOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTUwMzg4NTctODAzOS00ZjQ0LWI5MmQtYmM5NmQ4NjNlOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3pjETS/6Hio3hDCnCuaWdIw8g6AnfX9K+04 wBGWxw5zRlkrEZLOyHNODIY+gCTnmIiwUTaeofVuK3JIpUZqad3mHAj0gzeUds6p geYa3OxedIbk9m16VUVYcGhclvSPvFWps4srO8rvHoyZMYE395KYNXG7pXmKfre4 WFIblKRvl5qqn5MtKPmeRBfbn6NZz6cUIK/VSt5gJVygyuJroVDvR554iUuK/Lh1 WH/mR9brIAAsxb9QgKAU++1p18mUtegovZkcjJMyMxJN/FSUw2eFVsMoRDcJEBcD dt9p60fB2QhcONGp79slbpZ0CxHnIjdAyDw/B60SlXDk8jxpbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIbntFCFEJogTaIBs1zG82BCspDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmY1NjYzYTAtOTFiMy0z ZGE2LTg0ZDctZWVkMjdmOTg4MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0WCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7BRLaSAtnDFz/d1iakxDmQO3vftuac5oOTeK9H/Z9Sk1baGjvKrtJN NfxYRY9Abnf+XYqvg6rfFdpH0GByi4P1SoBH+qrA2c2sVFjdZYYqJTOWEOxCMp0d UxT5YabQ8nqaecW4dv9ESIsRGKOjNO9YSd8bY+1yAGItXIiGhHYjzu92hYJHLXqa 9iZfPP2PxOPousCkPLSvbE/gm34gv/049bTY6s6X3y4muwjFa9W5OuTnVL3kfyIW ALBqpJro4madbr+SHLfpo8Zgo2TFffFnDJVNfxQ0LMH2v7+jP5icoC8Ddu6G02fd Xek3PztEHtxmNVCHhO3HR/ztBR1G6Ck= -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:08 2026 by rpki-client