$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b034b285-5373-34b9-838f-174cb0c76488.roa File: b034b285-5373-34b9-838f-174cb0c76488.roa (raw, json) Hash identifier: OArtI95oU5xixcGS7IEuhbFQGRL2UfvoVjM9NoN3E4A= Subject key identifier: D2:01:D2:70:9C:23:6B:78:75:F6:15:C2:36:FC:7A:FA:C0:7E:DD:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7103CB058E0C9AD9E000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b034b285-5373-34b9-838f-174cb0c76488.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 209.253.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:71:03:cb:05:8e:0c:9a:d9:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=b9a7ce4d-9d8d-480f-9416-f82fe5f71399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:ba:81:65:b0:6a:50:d2:cf:e1:d7:da:81: d0:9a:99:70:6d:2a:0d:64:06:10:f2:87:60:76:be: ad:64:ac:d9:2e:35:5e:e1:9c:a6:38:e8:3a:ad:2d: a5:75:ee:58:0d:fc:f8:69:dd:55:eb:68:b7:8f:75: 99:22:10:03:11:00:14:ac:07:9e:29:2e:1d:c9:f6: aa:4f:29:60:87:8a:db:b9:19:0e:f0:fe:8e:bb:c8: aa:02:f6:a6:38:91:26:1a:a5:8c:8a:31:b7:29:bc: ca:42:50:e7:19:2a:28:3f:ba:c0:6a:30:61:60:d9: 6b:24:20:81:3b:87:1f:b1:9d:85:4c:d0:7d:6e:92: 9c:09:e6:48:13:4b:56:fa:e9:6d:82:f0:f1:bf:23: de:6d:4f:e1:ce:14:c8:9a:85:b9:c3:4b:bf:13:fa: 14:98:f5:61:6b:15:eb:96:c5:76:89:ea:64:2d:12: a6:6e:05:21:df:e9:02:bf:ef:64:ce:45:a9:09:92: 94:f2:ab:4a:1a:84:44:59:b1:e1:ed:11:8f:25:68: 61:78:6a:f1:e5:b7:e0:2b:a2:25:f5:f0:ea:e8:23: dc:44:e4:64:7c:06:65:45:8e:ae:27:32:0d:aa:c2: d6:8f:2b:42:fc:1b:8c:b4:14:aa:73:59:63:eb:fe: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:01:D2:70:9C:23:6B:78:75:F6:15:C2:36:FC:7A:FA:C0:7E:DD:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b034b285-5373-34b9-838f-174cb0c76488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:17:55:fa:0e:4f:cb:24:41:db:cb:16:8e:a9:0b:11:3f:7b: 82:7d:5d:47:31:98:1a:98:6a:df:d8:22:f8:8f:55:28:55:72: 1b:30:37:e3:92:43:7d:9c:e7:2c:72:0d:99:75:88:a2:b4:83: 83:c7:d7:a5:de:b2:15:99:dd:9c:ce:61:61:5b:c1:b6:83:eb: c0:ca:68:60:c7:e6:b5:cf:b3:55:a8:6d:51:07:33:eb:1c:3a: 9f:87:db:8e:1d:88:73:ee:3a:cf:f3:67:cd:a0:d2:60:9f:ab: 26:b8:83:bf:06:5f:68:5c:d5:94:3d:58:62:3a:d1:05:ab:5e: a7:5a:c7:4e:6c:b3:5f:f7:d0:44:88:0c:31:f1:07:1e:dd:05: 0d:40:cc:c1:12:7f:d2:c0:34:ce:3b:62:13:26:b6:de:a1:85: 76:32:8c:6c:4e:2a:84:4d:06:b5:80:de:67:26:3a:33:d1:da: 18:fc:34:99:24:79:58:bd:07:16:7d:88:89:cd:f0:24:e0:4a: 71:12:0c:3b:6e:0f:7a:af:f3:2f:04:80:82:4d:96:2f:0d:7c: b2:65:37:80:39:cc:39:81:00:2e:df:19:2e:8f:9c:8e:b5:6e: 0b:8e:e2:cb:0b:1a:31:72:1a:12:e5:1b:9a:b9:3a:6e:53:f9: 13:44:45:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnEDywWODJrZ4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YjlhN2NlNGQtOWQ4ZC00ODBmLTk0MTYtZjgyZmU1ZjcxMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJK6gWWwalDSz+HX2oHQmplwbSoNZAYQ8odg dr6tZKzZLjVe4ZymOOg6rS2lde5YDfz4ad1V62i3j3WZIhADEQAUrAeeKS4dyfaq Tylgh4rbuRkO8P6Ou8iqAvamOJEmGqWMijG3KbzKQlDnGSooP7rAajBhYNlrJCCB O4cfsZ2FTNB9bpKcCeZIE0tW+ultgvDxvyPebU/hzhTImoW5w0u/E/oUmPVhaxXr lsV2iepkLRKmbgUh3+kCv+9kzkWpCZKU8qtKGoREWbHh7RGPJWhheGrx5bfgK6Il 9fDq6CPcRORkfAZlRY6uJzINqsLWjytC/BuMtBSqc1lj6/4FLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIB0nCcI2t4dfYVwjb8evrAft3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjAzNGIyODUtNTM3My0z NGI5LTgzOGYtMTc0Y2IwYzc2NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoXVfoOT8skQdvLFo6pCxE/e4J9XUcxmBqYat/YIviPVShVchswN+OS Q32c5yxyDZl1iKK0g4PH16XeshWZ3ZzOYWFbwbaD68DKaGDH5rXPs1WobVEHM+sc Op+H244diHPuOs/zZ82g0mCfqya4g78GX2hc1ZQ9WGI60QWrXqdax05ss1/30ESI DDHxBx7dBQ1AzMESf9LANM47YhMmtt6hhXYyjGxOKoRNBrWA3mcmOjPR2hj8NJkk eVi9BxZ9iInN8CTgSnESDDtuD3qv8y8EgIJNli8NfLJlN4A5zDmBAC7fGS6PnI61 bguO4ssLGjFyGhLlG5q5Om5T+RNERWw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:35:19 2026 by rpki-client