$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa File: 8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa (raw, json) Hash identifier: 2iv93sEussBr1KQF4VhEoCGU9KmbVSc9aCxyXRURGqU= Subject key identifier: 4F:19:56:72:48:29:10:A7:84:FF:BC:FC:A9:9B:EF:C4:FD:B9:9C:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C50AC31E0AE4B3D8CF02C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.2.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:0a:c3:1e:0a:e4:b3:d8:cf:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=f9e642ad-7275-4754-94eb-04a7cad2e581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:dc:dd:bc:02:6f:cf:4b:fe:19:d9:80:7d: 13:1f:d0:d5:c2:bb:94:fb:0d:66:e8:91:ed:80:d4: 8a:3d:f4:2b:34:d3:e1:f4:08:d6:d7:27:e8:9f:15: 86:4b:e1:c4:1b:62:ce:18:a8:4d:94:6e:11:12:b0: bc:be:7f:ca:8c:be:7a:8d:34:ff:d3:3f:5f:e8:3f: 25:36:e4:ee:fa:b7:16:4c:78:81:c8:18:97:d7:79: f4:47:b4:68:24:0a:97:e0:ac:3a:78:69:00:eb:ce: c3:d2:ab:5a:e5:ee:90:cc:14:97:f9:88:1a:aa:8e: e6:4c:9e:b1:5d:4e:79:0c:e0:70:ee:8c:48:2b:c0: f8:49:f3:f7:db:76:f0:24:cf:83:2b:cb:93:29:81: de:77:60:f9:24:f6:84:a5:13:f7:ef:c9:11:df:90: d0:52:ea:06:19:4f:79:ce:bf:f4:c3:5a:89:a6:10: bf:9b:c1:9e:80:c0:56:95:bd:85:49:a9:58:3e:fb: 4a:64:81:7e:3b:68:3e:28:ff:2a:6a:95:6b:84:3a: d4:23:22:52:c8:14:3c:20:52:e6:9a:0b:ed:e1:dc: 71:d8:53:8a:0b:9b:58:51:0c:56:86:14:ee:b2:2b: d1:73:82:3e:4d:fe:2c:00:1d:82:e6:72:f5:dd:a9: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:19:56:72:48:29:10:A7:84:FF:BC:FC:A9:9B:EF:C4:FD:B9:9C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a5:65:eb:82:13:67:13:c1:f9:5a:be:03:e4:ef:48:d4:d9: 8b:8e:17:aa:2b:99:12:e7:aa:e2:8b:fc:22:5b:02:4f:6a:5d: 52:c6:c5:d5:3b:3e:16:cb:e4:57:c5:08:8c:6b:49:fd:21:da: e6:64:83:9e:12:78:55:8b:b1:c7:1b:17:a1:bd:ed:45:d1:72: 21:23:5e:ab:45:e2:c3:4e:a9:04:d0:23:e6:21:74:f3:4b:c5: f6:c6:43:23:4a:0e:f6:d1:16:7d:44:f5:25:c8:4e:4f:7e:22: ea:2e:b2:17:52:c7:aa:db:31:04:f9:96:b0:a8:b0:30:de:6d: b6:1c:a3:d0:51:38:45:51:1c:3a:08:95:86:d8:40:c1:4e:10: c2:39:0c:b7:9b:2a:7b:cd:65:8e:1a:e9:d1:b8:54:3b:2b:a2: 1a:c3:33:98:cc:b4:bc:4f:ca:dd:4e:cf:6c:02:c4:c7:e6:42: f4:ae:52:83:13:a5:58:48:e7:81:02:91:71:4b:60:5e:8a:9d: e0:a0:d6:3a:6d:74:52:95:ef:72:50:17:b6:4a:b4:a2:06:76: e0:33:91:ff:85:78:9f:48:22:cf:6c:d0:09:6c:5e:16:13:ee: 50:f3:73:dc:8f:2c:58:aa:14:b2:0c:4a:39:74:c0:c9:ea:32: 22:06:9d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQrDHgrks9jPAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZjllNjQyYWQtNzI3NS00NzU0LTk0ZWItMDRhN2NhZDJlNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMrc3bwCb89L/hnZgH0TH9DVwruU+w1m6JHt gNSKPfQrNNPh9AjW1yfonxWGS+HEG2LOGKhNlG4RErC8vn/KjL56jTT/0z9f6D8l NuTu+rcWTHiByBiX13n0R7RoJAqX4Kw6eGkA687D0qta5e6QzBSX+Ygaqo7mTJ6x XU55DOBw7oxIK8D4SfP323bwJM+DK8uTKYHed2D5JPaEpRP378kR35DQUuoGGU95 zr/0w1qJphC/m8GegMBWlb2FSalYPvtKZIF+O2g+KP8qapVrhDrUIyJSyBQ8IFLm mgvt4dxx2FOKC5tYUQxWhhTusivRc4I+Tf4sAB2C5nL13ans8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8ZVnJIKRCnhP+8/Kmb78T9uZx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ5N2RiZmUtNjA3OC0z MmY0LTljMTgtYjg0YzE1MzNjOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASlZeuCE2cTwflavgPk70jU2YuOF6ormRLnquKL/CJbAk9qXVLGxdU7 PhbL5FfFCIxrSf0h2uZkg54SeFWLsccbF6G97UXRciEjXqtF4sNOqQTQI+YhdPNL xfbGQyNKDvbRFn1E9SXITk9+IuoushdSx6rbMQT5lrCosDDebbYco9BROEVRHDoI lYbYQMFOEMI5DLebKnvNZY4a6dG4VDsrohrDM5jMtLxPyt1Oz2wCxMfmQvSuUoMT pVhI54ECkXFLYF6KneCg1jptdFKV73JQF7ZKtKIGduAzkf+FeJ9IIs9s0AlsXhYT 7lDzc9yPLFiqFLIMSjl0wMnqMiIGndo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:55:22 2026 by rpki-client