$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abb74859-f7d9-3f80-ba20-7449911df681.roa File: abb74859-f7d9-3f80-ba20-7449911df681.roa (raw, json) Hash identifier: hihKTpPeY0p5O88kF5AcVTJLMwPQopHEcC8FOua0Otc= Subject key identifier: 5B:12:8E:A3:F2:4C:17:28:15:73:3B:D4:AE:BB:D2:F2:A8:D5:B1:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7C39A8DC98BB8DCD2640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abb74859-f7d9-3f80-ba20-7449911df681.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 393238 IP address blocks: 209.252.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7c:39:a8:dc:98:bb:8d:cd:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=593903fa-b903-41b9-bbd6-6de5a2a36487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:94:e7:12:fb:14:53:06:af:5f:4c:3e:34:8e: 11:48:51:b5:28:31:eb:93:3f:18:7a:aa:2f:10:a0: f6:c6:cd:a0:3c:2c:ea:ea:f0:33:52:f8:b6:29:36: be:f7:bb:d8:40:79:75:fd:18:1b:02:d8:31:d1:af: 98:9d:70:65:70:29:0a:f3:88:19:3a:96:14:e2:35: f4:bb:69:5c:95:33:fa:84:65:7d:0f:7c:f6:da:bb: 68:5f:20:22:ac:f1:1f:b7:cd:36:7d:86:d7:5e:ef: 72:fc:fd:e8:23:e8:91:c8:d2:34:94:95:47:06:4b: ea:b4:43:d9:3c:b6:43:ae:e2:b7:b3:79:7b:d1:e2: cd:1e:4c:f4:fa:af:4c:c8:61:ee:be:eb:ae:b8:b6: a3:5d:58:fa:c5:71:2c:24:4c:b6:91:d4:08:39:b2: f1:b5:d3:ca:a2:4a:68:ef:ba:80:c4:87:33:4d:44: 51:42:0b:24:8f:08:e1:8d:12:e6:0c:94:e9:af:b3: 83:2e:d6:88:2f:5d:aa:bb:cc:cf:71:54:a2:5e:9c: 9f:cb:2f:84:48:82:0c:d4:d5:ee:38:31:31:97:58: 68:c5:5b:23:12:f7:65:cc:ef:4b:40:0b:54:b2:7b: 2f:6c:ec:97:0e:cb:5a:09:76:6f:14:d4:80:bb:e1: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:12:8E:A3:F2:4C:17:28:15:73:3B:D4:AE:BB:D2:F2:A8:D5:B1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abb74859-f7d9-3f80-ba20-7449911df681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:07:a0:ac:4c:c7:41:00:c9:03:9a:81:16:c4:4c:51:9f:b9: bb:06:e2:12:11:82:b5:3c:93:cb:c0:75:57:e9:6c:20:ff:7b: e3:5d:7d:3f:b2:71:71:3d:1f:c3:fd:d8:06:6b:95:5c:16:79: 7f:61:ed:7f:3e:c3:34:31:7a:dc:5f:c9:eb:b6:f1:dc:cd:3f: 6b:41:fc:d6:87:83:5e:db:12:23:f1:7e:f4:81:ab:e4:04:55: 92:cf:50:db:dc:75:06:d7:59:da:39:02:28:e6:16:31:bb:55: 17:b6:87:4e:90:99:98:61:eb:c1:78:5b:3c:9c:a4:9f:82:e1: c9:10:7b:41:60:65:69:90:fa:2c:f6:d9:08:9e:4c:0b:fb:c7: 27:96:1c:a9:db:38:ef:82:07:a5:2a:1f:7f:bf:b8:bb:21:9d: c6:99:1c:48:89:85:55:99:3e:fa:09:19:3c:93:d7:e8:fd:3b: 8b:5a:af:81:2f:d7:76:d4:a0:e7:21:a8:24:10:ae:5b:24:06: 9b:97:cc:2c:5d:fe:9e:f0:d7:bb:2d:0e:ce:35:64:d2:61:08: a1:22:00:4d:59:01:21:41:41:75:da:ab:c6:83:7d:8d:01:cc: ee:3b:c0:41:63:ea:b8:1a:14:cb:26:c0:45:9e:45:f4:c7:2c: e4:32:fc:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnw5qNyYu43NJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTkzOTAzZmEtYjkwMy00MWI5LWJiZDYtNmRlNWEyYTM2NDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZTnEvsUUwavX0w+NI4RSFG1KDHrkz8Yeqov EKD2xs2gPCzq6vAzUvi2KTa+97vYQHl1/RgbAtgx0a+YnXBlcCkK84gZOpYU4jX0 u2lclTP6hGV9D3z22rtoXyAirPEft802fYbXXu9y/P3oI+iRyNI0lJVHBkvqtEPZ PLZDruK3s3l70eLNHkz0+q9MyGHuvuuuuLajXVj6xXEsJEy2kdQIObLxtdPKokpo 77qAxIczTURRQgskjwjhjRLmDJTpr7ODLtaIL12qu8zPcVSiXpyfyy+ESIIM1NXu ODExl1hoxVsjEvdlzO9LQAtUsnsvbOyXDstaCXZvFNSAu+FOQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsSjqPyTBcoFXM71K670vKo1bEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWJiNzQ4NTktZjdkOS0z ZjgwLWJhMjAtNzQ0OTkxMWRmNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0fyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8HoKxMx0EAyQOagRbETFGfubsG4hIRgrU8k8vAdVfpbCD/e+NdfT+y cXE9H8P92AZrlVwWeX9h7X8+wzQxetxfyeu28dzNP2tB/NaHg17bEiPxfvSBq+QE VZLPUNvcdQbXWdo5AijmFjG7VRe2h06QmZhh68F4WzycpJ+C4ckQe0FgZWmQ+iz2 2QieTAv7xyeWHKnbOO+CB6UqH3+/uLshncaZHEiJhVWZPvoJGTyT1+j9O4tar4Ev 13bUoOchqCQQrlskBpuXzCxd/p7w17stDs41ZNJhCKEiAE1ZASFBQXXaq8aDfY0B zO47wEFj6rgaFMsmwEWeRfTHLOQy/Bg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:17 2026 by rpki-client