$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa File: 7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa (raw, json) Hash identifier: RJx9dRFcgvrHfhqyP9fxcscm8/viSXSMKq25lBrAE4s= Subject key identifier: FA:ED:AC:AA:11:17:C0:B0:49:A9:A0:63:38:15:9A:BC:D7:F6:44:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7C1808B9DD3EE4422900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 54682 IP address blocks: 74.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7c:18:08:b9:dd:3e:e4:42:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=334f873a-a778-463c-a000-c9c71ae7b5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:90:2e:cd:3e:50:b3:60:0e:2a:80:db:c2: b5:15:53:e1:02:31:e6:2e:2a:d0:8e:3f:fa:63:e4: 75:37:bc:b7:20:d6:fa:2b:81:9a:95:5e:99:9a:0e: 82:d1:3e:b5:8e:66:f5:c1:9f:fb:b7:5d:19:b0:3d: 3e:76:3e:66:42:c1:42:95:96:cc:51:d6:f3:60:e1: e4:5a:ce:ee:a2:c0:cf:8b:f8:48:35:6b:71:03:9b: 4d:4c:aa:31:88:1c:81:a4:df:2c:18:cb:f4:2a:f1: 0c:da:a1:7f:aa:fc:60:49:ca:c8:33:81:2b:9c:2d: 5c:db:5a:65:06:8d:fd:b8:43:cf:9c:20:b3:73:18: 9f:c3:63:2c:38:1f:4f:cc:e6:4b:3c:9f:24:74:3d: eb:a9:e9:80:7a:e9:26:9b:24:2a:89:76:e1:bf:63: 00:45:6b:83:27:37:93:23:de:cd:46:54:ec:63:78: 81:9b:41:4f:60:53:83:09:d2:f8:98:64:a9:5c:19: ae:00:7a:16:f3:e6:04:dd:dd:12:64:3e:4a:be:40: 8c:cf:5c:3f:bc:1e:85:ce:e9:79:3b:34:99:87:27: 71:4e:dc:78:c9:0b:7a:a9:37:a6:b0:3f:6e:00:c8: 3a:b6:c1:0c:7f:7f:9f:f9:51:60:6d:87:c5:f2:39: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:ED:AC:AA:11:17:C0:B0:49:A9:A0:63:38:15:9A:BC:D7:F6:44:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:42:15:96:88:d9:f5:76:73:f8:59:60:f0:35:c0:d5:61:83: 3a:21:14:e3:5b:e2:c2:6f:6c:9b:74:f8:34:23:4f:80:d5:77: 8e:1a:3f:87:c3:7c:76:00:07:9c:02:d2:28:44:cb:a2:69:b6: d1:3b:73:29:92:eb:5c:40:3e:36:46:71:98:b2:c7:20:91:cb: a0:c4:94:d3:51:18:67:9c:58:cb:40:22:86:58:3d:4b:08:33: b8:94:b5:84:05:92:04:9f:2f:1e:ab:f5:9e:70:46:02:31:f2: 67:3e:c3:aa:21:e3:48:6e:31:0a:44:9e:21:53:06:6f:5b:eb: cc:de:30:bd:b4:2b:22:3f:f0:23:2d:d6:27:cc:7b:69:4b:61: 01:2e:e5:33:90:f9:73:6d:6b:23:15:fd:be:0f:4f:f7:a5:ce: 2d:02:79:09:cb:1d:2d:05:8b:66:bf:9d:95:1e:d5:2a:68:90: 0b:a3:d9:c7:cd:2a:f4:60:3e:0e:97:e0:b6:ee:fd:64:2f:8e: 76:67:a1:75:b1:3f:0a:b2:d2:2e:fa:02:32:4f:8d:c1:d4:9d: b1:33:72:91:10:a2:60:31:52:a6:a2:63:68:b8:1e:c4:3c:36: 88:da:39:ab:a9:75:af:b0:9e:23:ae:dc:6b:c1:1f:e3:76:a4: 15:f6:c1:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnwYCLndPuRCKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzM0Zjg3M2EtYTc3OC00NjNjLWEwMDAtYzljNzFhZTdiNWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXOQLs0+ULNgDiqA28K1FVPhAjHmLirQjj/6 Y+R1N7y3INb6K4GalV6Zmg6C0T61jmb1wZ/7t10ZsD0+dj5mQsFClZbMUdbzYOHk Ws7uosDPi/hINWtxA5tNTKoxiByBpN8sGMv0KvEM2qF/qvxgScrIM4ErnC1c21pl Bo39uEPPnCCzcxifw2MsOB9PzOZLPJ8kdD3rqemAeukmmyQqiXbhv2MARWuDJzeT I97NRlTsY3iBm0FPYFODCdL4mGSpXBmuAHoW8+YE3d0SZD5KvkCMz1w/vB6Fzul5 OzSZhydxTtx4yQt6qTemsD9uAMg6tsEMf3+f+VFgbYfF8jkPewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrtrKoRF8CwSamgYzgVmrzX9kRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2UyOGM0ZDYtZmNiNy0z MjQ0LWFkZGUtNzk4ZTA5NGEyZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtCFZaI2fV2c/hZYPA1wNVhgzohFONb4sJvbJt0+DQjT4DVd44aP4fD fHYAB5wC0ihEy6JpttE7cymS61xAPjZGcZiyxyCRy6DElNNRGGecWMtAIoZYPUsI M7iUtYQFkgSfLx6r9Z5wRgIx8mc+w6oh40huMQpEniFTBm9b68zeML20KyI/8CMt 1ifMe2lLYQEu5TOQ+XNtayMV/b4PT/elzi0CeQnLHS0Fi2a/nZUe1SpokAuj2cfN KvRgPg6X4Lbu/WQvjnZnoXWxPwqy0i76AjJPjcHUnbEzcpEQomAxUqaiY2i4HsQ8 NojaOaupda+wniOu3GvBH+N2pBX2wfQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:07 2026 by rpki-client