$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a54fd373-08fe-3548-a890-b345203aaa0d.roa File: a54fd373-08fe-3548-a890-b345203aaa0d.roa (raw, json) Hash identifier: fpPfOokb+lCKRG6oYRBqP9dXSABwlrqt0JAQ2rpISng= Subject key identifier: B3:28:AC:CF:6F:6F:D2:61:1C:7C:D2:F5:74:53:8C:F0:58:1D:3E:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A786E3677A3D7F671FE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a54fd373-08fe-3548-a890-b345203aaa0d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 209.192.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:78:6e:36:77:a3:d7:f6:71:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=23bb9a62-8f18-42f2-9e98-3aacf05d4278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:a0:cc:04:a1:0e:9c:be:8a:4e:b7:70:f4: 09:e3:b1:3c:19:8c:d5:d7:28:1f:64:b3:b2:47:1f: 63:35:f2:a4:48:15:ac:bb:8a:f0:92:88:36:8e:d8: f2:80:1f:3d:e0:d9:b3:78:7d:18:92:0c:54:48:02: 1e:6b:4f:74:97:14:cb:44:8a:1d:6d:64:f4:b6:5d: 40:76:4a:e5:21:26:2b:89:ec:42:a1:a1:f6:aa:d0: 30:e5:de:b5:d9:92:17:7a:05:4c:28:20:8b:c8:c9: e3:f3:00:a9:45:7b:aa:40:dd:06:35:13:64:f2:17: 91:17:d5:d9:1f:37:bf:bb:f6:8c:80:70:b9:d7:6d: e6:22:9f:a3:41:e8:68:70:81:48:49:6b:82:bd:8f: 35:b0:0d:76:22:60:44:01:15:31:f8:a9:6a:72:2c: 25:28:8e:6a:bd:b7:58:53:94:c1:ad:6d:6b:47:fc: 94:56:44:73:fc:ed:83:b5:f0:e1:97:b3:62:14:ba: b1:47:12:f7:cb:03:af:86:45:98:bd:b8:57:0c:d7: 17:ee:a4:ee:6b:af:2c:1e:ae:98:76:48:24:20:de: 20:1d:62:37:65:91:38:b9:c4:95:0b:11:b9:39:2b: 59:e7:4d:13:5b:80:f1:40:fc:18:0a:61:c1:08:ce: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:28:AC:CF:6F:6F:D2:61:1C:7C:D2:F5:74:53:8C:F0:58:1D:3E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a54fd373-08fe-3548-a890-b345203aaa0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:58:57:c5:21:dc:e1:97:93:92:71:e0:08:6a:57:ca:57:ee: 79:5c:5f:26:b6:b0:40:f9:23:07:fd:5e:42:58:3b:aa:ab:1d: 88:c5:49:8a:95:7c:8d:8c:70:b0:f2:76:5b:cc:85:d7:f3:f7: 84:05:7e:4c:c4:d7:e1:0b:a2:48:8b:c6:af:d1:25:32:e0:d0: b3:0d:49:9b:2a:69:84:82:2d:0e:3a:a8:e4:5f:bb:07:59:fe: 79:21:30:80:58:bf:58:43:ff:53:f9:ab:8f:95:76:1c:b0:ed: cb:0b:07:e6:ce:0b:35:52:9a:c3:0b:53:91:b8:65:62:1e:f2: 43:72:c6:04:c0:0c:15:02:3c:04:72:44:a7:75:a9:13:11:a8: b4:dd:34:a3:24:b7:38:fc:74:97:82:96:af:bb:7f:cf:64:32: bf:58:f9:bb:1e:82:a5:be:9c:6b:9f:ee:bc:c3:4a:ca:e2:86: ad:63:45:b6:15:ca:3b:a5:36:a5:7f:5b:5a:be:15:39:37:fa: f0:6c:04:39:9e:c5:68:a8:10:5b:b8:c9:10:a7:df:4e:b0:ef: 84:fc:9e:98:fd:99:35:4f:d2:4c:8c:ec:08:9f:57:47:2d:d8: ae:98:d9:c1:7a:53:f8:ae:bb:7c:c9:13:b2:5e:cb:4b:ec:43: 7f:c7:60:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnhuNnej1/Zx/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjNiYjlhNjItOGYxOC00MmYyLTllOTgtM2FhY2YwNWQ0Mjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx6gzAShDpy+ik63cPQJ47E8GYzV1ygfZLOy Rx9jNfKkSBWsu4rwkog2jtjygB894NmzeH0YkgxUSAIea090lxTLRIodbWT0tl1A dkrlISYriexCoaH2qtAw5d612ZIXegVMKCCLyMnj8wCpRXuqQN0GNRNk8heRF9XZ Hze/u/aMgHC5123mIp+jQehocIFISWuCvY81sA12ImBEARUx+KlqciwlKI5qvbdY U5TBrW1rR/yUVkRz/O2DtfDhl7NiFLqxRxL3ywOvhkWYvbhXDNcX7qTua68sHq6Y dkgkIN4gHWI3ZZE4ucSVCxG5OStZ500TW4DxQPwYCmHBCM4qPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMorM9vb9JhHHzS9XRTjPBYHT7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU0ZmQzNzMtMDhmZS0z NTQ4LWE4OTAtYjM0NTIwM2FhYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdYV8Uh3OGXk5Jx4AhqV8pX7nlcXya2sED5Iwf9XkJYO6qrHYjFSYqV fI2McLDydlvMhdfz94QFfkzE1+ELokiLxq/RJTLg0LMNSZsqaYSCLQ46qORfuwdZ /nkhMIBYv1hD/1P5q4+Vdhyw7csLB+bOCzVSmsMLU5G4ZWIe8kNyxgTADBUCPARy RKd1qRMRqLTdNKMktzj8dJeClq+7f89kMr9Y+bsegqW+nGuf7rzDSsrihq1jRbYV yjulNqV/W1q+FTk3+vBsBDmexWioEFu4yRCn306w74T8npj9mTVP0kyM7AifV0ct 2K6Y2cF6U/iuu3zJE7Jey0vsQ3/HYKs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:31 2026 by rpki-client