$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa File: 88348225-4e15-3a0e-bde2-822861e71616.roa (raw, json) Hash identifier: JCx/sIYVH9SB31D1L86Hlx/+fpvQtS5++dXajiTtz2A= Subject key identifier: 35:5B:D0:00:32:29:5F:8C:17:DF:D5:05:DB:67:B9:07:0E:9D:F4:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7A7AFAD4DA24F5A69480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 36471 IP address blocks: 209.255.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7a:7a:fa:d4:da:24:f5:a6:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=562f06d7-b8d1-4bc3-bae6-10c5a984a82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:ee:5d:07:75:7d:67:75:d6:1b:38:a1:4f: ec:69:f5:b9:ff:50:2a:9a:1d:6f:5e:e1:3f:9b:2b: 15:66:69:00:71:6c:f7:b9:6b:9d:43:6f:16:10:ac: 52:77:2d:ce:9d:aa:48:0f:97:f9:e1:2e:fc:22:94: 2a:ac:1e:75:ac:12:06:cd:44:f8:02:4c:4b:4d:25: 2a:85:2b:88:97:2a:bf:29:14:66:01:84:87:da:dd: f3:20:81:68:dc:ab:5d:c8:43:ef:48:f8:6d:53:a5: 6b:b2:61:08:f5:ee:c3:c0:b2:5b:18:c3:80:50:3f: b0:50:52:c3:da:ec:9e:bd:b5:c7:33:22:47:b4:42: 0d:2d:2c:72:40:d7:7d:f7:bb:92:bd:61:87:c7:8e: 4d:e6:da:61:ed:22:1c:dd:5a:f0:13:87:f6:83:c7: b6:73:cb:f6:fb:bb:90:68:b9:47:54:94:02:f1:da: 43:0f:ea:9f:0a:43:ba:51:a0:d9:cf:a6:b3:a1:af: 4e:8b:cd:03:07:62:a0:35:14:8c:69:59:98:57:7d: df:e4:48:3a:b4:de:ef:12:eb:6c:8f:38:94:5b:7a: 13:a3:00:3c:f1:67:35:73:7c:9c:63:92:b8:29:35: 29:b1:98:7d:81:8c:6a:10:0c:5b:9c:8a:66:b4:c9: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5B:D0:00:32:29:5F:8C:17:DF:D5:05:DB:67:B9:07:0E:9D:F4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2a:c2:02:55:f8:c4:24:b5:80:88:72:43:55:ac:df:6e:5e: 0d:69:ed:ee:8a:1a:64:42:6f:6a:45:c4:51:3e:30:51:88:58: 49:e0:cf:1e:2b:6b:8f:c5:21:b7:c9:e8:24:8a:07:23:4c:28: 7c:fa:a8:c4:66:70:66:d1:93:32:8d:e5:5f:ce:07:8a:09:d6: cb:cb:22:ba:72:ab:40:f6:67:82:40:2e:06:dd:0c:18:cd:e0: ac:82:a6:cf:54:99:24:18:cb:bb:3c:3e:0a:ea:5a:b3:ad:85: 2e:e1:5a:45:d5:ab:28:76:14:19:59:84:8a:33:07:14:25:4c: ff:bb:32:c7:bc:7d:38:9f:4f:2a:e1:b2:20:ed:84:6f:59:5d: 85:25:d8:77:04:ad:09:26:fe:78:13:e6:ea:99:3b:a7:ab:26: fa:7b:47:69:4d:78:d4:c2:5e:6e:88:74:06:b2:33:aa:5b:3f: 08:a8:48:51:29:41:b6:97:f6:82:38:a0:ee:d7:07:4a:4d:0a: 86:94:84:bf:52:ac:79:62:95:07:ce:d3:95:5e:68:22:81:03: 32:34:70:e1:02:a6:05:f4:f2:79:d1:ed:80:d6:23:52:bd:1b: fc:ea:a4:b2:46:22:75:c6:6e:5a:b6:ea:49:75:fb:88:eb:ba: 16:9b:49:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnp6+tTaJPWmlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTYyZjA2ZDctYjhkMS00YmMzLWJhZTYtMTBjNWE5ODRhODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnruXQd1fWd11hs4oU/safW5/1Aqmh1vXuE/ mysVZmkAcWz3uWudQ28WEKxSdy3OnapID5f54S78IpQqrB51rBIGzUT4AkxLTSUq hSuIlyq/KRRmAYSH2t3zIIFo3KtdyEPvSPhtU6VrsmEI9e7DwLJbGMOAUD+wUFLD 2uyevbXHMyJHtEINLSxyQNd997uSvWGHx45N5tph7SIc3VrwE4f2g8e2c8v2+7uQ aLlHVJQC8dpDD+qfCkO6UaDZz6azoa9Oi80DB2KgNRSMaVmYV33f5Eg6tN7vEuts jziUW3oTowA88Wc1c3ycY5K4KTUpsZh9gYxqEAxbnIpmtMlKmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVb0AAyKV+MF9/VBdtnuQcOnfRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODgzNDgyMjUtNGUxNS0z YTBlLWJkZTItODIyODYxZTcxNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIqwgJV+MQktYCIckNVrN9uXg1p7e6KGmRCb2pFxFE+MFGIWEngzx4r a4/FIbfJ6CSKByNMKHz6qMRmcGbRkzKN5V/OB4oJ1svLIrpyq0D2Z4JALgbdDBjN 4KyCps9UmSQYy7s8PgrqWrOthS7hWkXVqyh2FBlZhIozBxQlTP+7Mse8fTifTyrh siDthG9ZXYUl2HcErQkm/ngT5uqZO6erJvp7R2lNeNTCXm6IdAayM6pbPwioSFEp QbaX9oI4oO7XB0pNCoaUhL9SrHlilQfO05VeaCKBAzI0cOECpgX08nnR7YDWI1K9 G/zqpLJGInXGblq26kl1+4jruhabSWU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:56 2026 by rpki-client