$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa File: b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa (raw, json) Hash identifier: nZyOmFiS8kxX4V3RtkOxxnc6VtKSFhmRUIAf0Xa9ksg= Subject key identifier: 48:72:44:2D:02:F7:10:5C:98:38:05:ED:4F:5B:6C:0C:6B:48:B3:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A787CDE73F5ED80CA7B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 209.192.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:78:7c:de:73:f5:ed:80:ca:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d808c57d-d22a-4aa7-beb5-b4d8e7613e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:4c:b5:71:c3:df:88:2a:d5:a2:8f:d1:f5: 61:01:a6:64:01:16:bd:ea:42:6a:bd:49:cf:de:68: 2b:cc:5e:6a:43:56:c6:c7:ac:aa:61:17:5d:2e:0a: 7b:8f:ca:07:6b:cd:81:cb:07:ef:f5:9e:10:a3:6c: 61:76:96:22:d6:36:e4:f9:80:b4:0c:3d:98:10:4e: 4e:8c:ef:96:17:17:52:c9:78:dc:2f:5f:d3:9d:9d: e8:56:4d:10:1d:24:61:12:c0:b5:59:e1:4d:e1:85: 22:bb:fa:bb:6e:db:02:c5:cf:53:16:81:29:ee:f5: d5:9e:fd:76:2a:b2:91:f1:11:d2:d3:d3:d1:fa:b1: 20:d3:df:d3:f8:6f:fb:99:53:19:d3:92:39:a4:7e: 4c:4b:c1:4d:7e:f5:a5:ef:db:9d:68:a2:91:4c:b7: 53:8c:75:49:7e:e1:d5:7f:df:1e:ce:23:23:49:8e: f9:7f:58:b8:e3:51:f9:c0:8a:cf:b6:32:14:20:e4: d4:10:80:ec:f0:9f:e1:30:26:80:43:42:06:9a:3a: cf:87:29:ba:5d:09:6d:8d:f7:fe:05:4c:7e:df:63: 8d:ba:0a:ca:3e:35:6f:ef:97:7a:b6:15:c0:94:f3: 4b:83:f8:b4:17:1d:54:58:4e:03:75:a3:67:77:1a: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:72:44:2D:02:F7:10:5C:98:38:05:ED:4F:5B:6C:0C:6B:48:B3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b09f1c95-1eda-332f-bd25-cd2845cdbfed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c8:09:02:3e:40:ab:8b:46:95:1a:1f:00:7e:7d:91:1d:07: 68:5d:86:1c:5d:46:cf:0e:b8:15:16:4e:3c:76:61:42:67:e0: 90:d1:6b:4c:af:11:7d:42:9e:b8:4a:bb:f7:5e:88:52:1e:4b: e8:b9:6e:de:d0:bb:51:e4:6c:9e:70:06:9b:de:06:49:20:16: dd:5d:ba:c4:c7:a4:59:41:4c:db:3c:2b:69:c0:4b:5f:58:0a: fb:80:ad:d3:0a:dd:0c:dc:50:36:bc:b4:f5:f2:d7:26:cc:17: 60:36:21:fc:e9:6e:5f:ef:b1:e4:71:1d:20:89:7c:3e:79:38: e1:73:f5:0c:93:ae:03:29:82:6b:b3:7e:20:80:47:7d:53:70: 80:e1:d1:7e:d2:75:a7:69:64:ee:fe:2e:f9:f6:49:e9:86:67: 8e:b9:1e:d2:ef:60:34:cc:d4:80:a1:3b:25:1f:7e:ff:ca:c7: f5:55:b0:a2:36:08:0d:c4:a6:58:f4:ed:f1:23:60:27:51:ac: c7:25:d1:db:0e:88:90:79:d3:46:2b:6c:e7:5a:5b:ba:86:1e: 8c:2d:c6:95:d0:8b:c2:e9:a4:ad:78:86:d8:11:65:2a:1b:a2: 1a:c0:5f:2c:72:9a:25:2e:1f:8d:0a:c0:c2:6a:7b:32:ed:49: 91:7c:da:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnh83nP17YDKe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDgwOGM1N2QtZDIyYS00YWE3LWJlYjUtYjRkOGU3NjEzZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwtMtXHD34gq1aKP0fVhAaZkARa96kJqvUnP 3mgrzF5qQ1bGx6yqYRddLgp7j8oHa82Bywfv9Z4Qo2xhdpYi1jbk+YC0DD2YEE5O jO+WFxdSyXjcL1/TnZ3oVk0QHSRhEsC1WeFN4YUiu/q7btsCxc9TFoEp7vXVnv12 KrKR8RHS09PR+rEg09/T+G/7mVMZ05I5pH5MS8FNfvWl79udaKKRTLdTjHVJfuHV f98eziMjSY75f1i441H5wIrPtjIUIOTUEIDs8J/hMCaAQ0IGmjrPhym6XQltjff+ BUx+32ONugrKPjVv75d6thXAlPNLg/i0Fx1UWE4DdaNndxpTewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhyRC0C9xBcmDgF7U9bbAxrSLP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjA5ZjFjOTUtMWVkYS0z MzJmLWJkMjUtY2QyODQ1Y2RiZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrICQI+QKuLRpUaHwB+fZEdB2hdhhxdRs8OuBUWTjx2YUJn4JDRa0yv EX1CnrhKu/deiFIeS+i5bt7Qu1HkbJ5wBpveBkkgFt1dusTHpFlBTNs8K2nAS19Y CvuArdMK3QzcUDa8tPXy1ybMF2A2Ifzpbl/vseRxHSCJfD55OOFz9QyTrgMpgmuz fiCAR31TcIDh0X7SdadpZO7+Lvn2SemGZ465HtLvYDTM1IChOyUffv/Kx/VVsKI2 CA3Eplj07fEjYCdRrMcl0dsOiJB500YrbOdaW7qGHowtxpXQi8LppK14htgRZSob ohrAXyxymiUuH40KwMJqezLtSZF82iE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:47 2026 by rpki-client