$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a84eae1-b572-3f0a-989a-89ea61dd9ae2.roa File: 7a84eae1-b572-3f0a-989a-89ea61dd9ae2.roa (raw, json) Hash identifier: voAyG1jmZOTPa+EgZXDDJ9jLS3Q01gktpEVq4PhZAGo= Subject key identifier: 1F:B8:1D:10:89:66:F8:B7:A6:1C:66:78:8E:79:6D:68:B7:00:08:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C4E19112D8147834655240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a84eae1-b572-3f0a-989a-89ea61dd9ae2.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.2.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e1:91:12:d8:14:78:34:65:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=9c3383af-fc61-4c06-93ab-ca40c7f6e2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:37:8a:12:69:65:38:45:8d:be:11:a2:93: c9:03:8b:c8:4f:10:01:b3:f0:94:bb:08:88:a9:95: 40:21:26:02:06:ee:9f:a5:99:67:ae:b4:86:55:34: d2:04:92:3e:bf:fd:97:61:3c:33:44:aa:99:1d:08: f7:ae:20:42:8e:7e:13:df:ec:16:4d:46:6b:d4:0f: f3:f9:91:f4:23:01:28:78:49:3e:1a:19:70:43:60: e5:28:80:74:30:0b:72:f1:ca:8a:6e:15:88:96:49: c3:41:a9:de:c9:f0:87:7e:73:ee:d4:a1:59:72:de: c6:5a:28:a5:5b:c9:e2:41:55:34:c7:d0:36:70:e5: 21:e2:a6:e4:c1:61:b4:19:15:e8:34:10:99:7e:78: 1d:4d:16:39:8e:ca:1b:09:15:80:75:0c:66:77:f7: 21:ba:61:89:d1:d8:05:05:87:e6:3a:c8:e9:e0:62: 34:a4:3c:5c:95:58:a5:1d:4c:9d:49:db:62:0d:28: 1a:0d:25:81:85:2e:5c:6d:ab:17:e7:07:9a:b8:ad: e6:20:96:4c:ef:4a:cf:4b:5a:a2:74:7e:1a:87:49: a2:b9:55:7b:d6:c8:74:e8:bf:f6:62:5a:34:e8:9d: 73:08:22:ce:96:76:81:59:de:5f:46:d3:4e:84:0f: 96:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B8:1D:10:89:66:F8:B7:A6:1C:66:78:8E:79:6D:68:B7:00:08:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a84eae1-b572-3f0a-989a-89ea61dd9ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d8:c6:3c:89:8d:fb:47:63:1c:3d:bb:ec:63:ae:b4:55:91: a3:5f:e4:e5:42:7f:f3:90:f8:81:e2:e7:aa:b7:24:fe:00:c6: bd:cd:8a:c7:18:80:0c:04:d0:cb:2b:c7:9f:27:5c:bc:58:cc: 46:5f:fd:79:ef:ed:7e:5a:57:de:f6:03:02:58:fd:95:59:57: 84:0d:38:6e:76:c2:e8:db:06:c2:5f:a4:20:c5:24:cf:31:58: 9e:e1:b9:88:ef:fb:dc:4c:26:6c:81:a4:d6:2f:4e:62:33:02: d9:a1:14:37:79:1f:6a:7d:c9:2a:b0:84:ca:c9:90:2e:ce:31: a8:c9:61:23:51:50:20:7f:32:48:2a:04:5b:ba:b2:6c:3b:56: 36:9b:4a:b7:57:a4:f7:6f:d6:eb:cc:cf:64:63:54:ae:86:4e: ff:c8:40:7a:09:ad:62:a0:e0:e1:6c:52:ca:a5:0a:d3:6e:40: cb:83:50:66:28:a3:43:a3:00:4d:ac:b0:2c:f5:5b:3d:80:3b: e3:26:93:72:e9:59:65:82:8d:b6:4a:36:ae:76:f1:1f:84:e2: 28:04:2d:51:83:da:5a:e3:6a:d8:da:8c:67:1a:5b:be:8c:b2: aa:2f:6c:48:76:1d:e6:c4:c8:58:a9:6f:71:1d:e2:a6:ee:dd: 16:d2:77:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOGREtgUeDRlUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk OWMzMzgzYWYtZmM2MS00YzA2LTkzYWItY2E0MGM3ZjZlMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro43ihJpZThFjb4RopPJA4vITxABs/CUuwiI qZVAISYCBu6fpZlnrrSGVTTSBJI+v/2XYTwzRKqZHQj3riBCjn4T3+wWTUZr1A/z +ZH0IwEoeEk+GhlwQ2DlKIB0MAty8cqKbhWIlknDQaneyfCHfnPu1KFZct7GWiil W8niQVU0x9A2cOUh4qbkwWG0GRXoNBCZfngdTRY5jsobCRWAdQxmd/chumGJ0dgF BYfmOsjp4GI0pDxclVilHUydSdtiDSgaDSWBhS5cbasX5weauK3mIJZM70rPS1qi dH4ah0miuVV71sh06L/2Ylo06J1zCCLOlnaBWd5fRtNOhA+WawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+4HRCJZvi3phxmeI55bWi3AAiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2E4NGVhZTEtYjU3Mi0z ZjBhLTk4OWEtODllYTYxZGQ5YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArYxjyJjftHYxw9u+xjrrRVkaNf5OVCf/OQ+IHi56q3JP4Axr3NiscY gAwE0Msrx58nXLxYzEZf/Xnv7X5aV972AwJY/ZVZV4QNOG52wujbBsJfpCDFJM8x WJ7huYjv+9xMJmyBpNYvTmIzAtmhFDd5H2p9ySqwhMrJkC7OMajJYSNRUCB/Mkgq BFu6smw7VjabSrdXpPdv1uvMz2RjVK6GTv/IQHoJrWKg4OFsUsqlCtNuQMuDUGYo o0OjAE2ssCz1Wz2AO+Mmk3LpWWWCjbZKNq528R+E4igELVGD2lrjatjajGcaW76M sqovbEh2HebEyFipb3Ed4qbu3RbSd+4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:18 2026 by rpki-client