$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0e58f37-3aef-3162-be54-6d4a5b3f5e02.roa File: b0e58f37-3aef-3162-be54-6d4a5b3f5e02.roa (raw, json) Hash identifier: Elf3NGJiYt/GKaNmlkN8OOR/60/UW+/e6u0jFAxzmnc= Subject key identifier: 1F:9B:00:8D:FD:C0:32:E5:FB:BF:73:FD:39:2F:60:BC:40:77:33:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9D80C5BC1C55D3DAA780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0e58f37-3aef-3162-be54-6d4a5b3f5e02.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 207.92.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9d:80:c5:bc:1c:55:d3:da:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=b0b461af-c856-437f-8ac7-8c9d2cfc1245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:8d:2e:8e:b8:8f:64:81:43:0f:6a:20:91: 95:b8:ec:52:7b:d0:46:83:f1:b4:39:b5:73:4f:4e: b8:d1:a0:cf:8d:bd:bf:02:2c:69:18:9e:9b:77:e5: be:51:10:18:b7:5c:d6:04:44:a2:65:a0:d7:e4:0d: a6:e1:4f:e3:59:61:79:6a:fa:16:20:e7:ee:f0:cf: 1d:dc:6e:1d:c0:a1:1e:8f:d5:cd:b0:f6:d6:c3:c7: 7b:b9:ce:e1:8e:d4:46:51:f8:7c:ed:f6:95:4d:50: 14:16:aa:b6:5a:60:a3:95:2c:90:60:86:e1:ac:1e: 8f:25:ad:33:b0:94:8f:21:bc:7e:a8:c9:f3:d4:b4: d1:47:ba:ae:14:0c:e5:32:75:cb:04:6b:9e:f3:b8: 7a:fe:5f:df:10:9d:42:d3:d5:d8:14:67:24:e0:de: 1f:3b:4c:1e:a8:6b:a8:25:9d:1e:17:f4:f5:6b:eb: 42:d4:d8:b9:90:a5:ea:83:f6:7e:85:9f:49:da:96: f5:45:85:bd:a5:72:2a:30:7b:2c:ea:e1:2f:84:2d: fb:f2:79:52:18:0e:b3:73:71:0a:94:b4:d5:40:01: 6d:f0:76:f2:d3:a0:e4:48:5a:36:90:b9:47:1a:fb: df:f0:88:3c:23:2a:01:7d:38:08:f3:e0:17:0a:4a: 92:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9B:00:8D:FD:C0:32:E5:FB:BF:73:FD:39:2F:60:BC:40:77:33:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0e58f37-3aef-3162-be54-6d4a5b3f5e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.92.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7f:5b:67:b9:80:26:95:b2:35:c8:29:90:73:dd:83:cf:2d: 45:0f:1a:22:d2:87:fd:f9:e8:f4:63:98:b7:fe:dc:1f:4e:d5: 24:9d:98:36:0d:e4:85:82:38:12:c4:b7:cd:47:f7:02:1f:f7: b0:86:39:2c:c5:0c:00:26:da:7a:01:d7:f7:3e:28:0c:3b:60: e1:75:1e:b0:30:ae:46:af:6a:e9:83:8b:58:66:b7:37:79:15: 7f:53:d1:ab:a6:ad:3b:f3:bf:6f:63:06:74:1d:47:b0:20:f3: 58:24:d6:52:c0:c0:af:fe:7c:9f:e0:f7:d0:e4:57:f8:68:a2: 54:63:b0:9c:c6:39:54:08:2d:55:84:c0:21:bb:c7:a3:6e:b5: 4c:46:60:34:6f:b7:e0:8f:40:fc:a9:19:46:3a:f3:24:4f:70: 66:44:cf:92:f9:86:56:f2:9a:91:d1:9a:f6:7b:c8:68:12:0a: c4:94:45:fe:96:d5:23:63:7f:74:70:65:fa:c1:e4:94:2b:35: a6:9a:db:1a:36:9c:68:1d:8f:91:2b:7e:a6:83:e1:d0:6d:62: 2c:6f:d7:d1:79:ca:28:19:2f:8e:f1:28:66:e4:23:b4:ee:19: 19:21:b0:76:af:b2:25:87:eb:ae:41:97:72:90:ab:fa:8a:78: 57:34:4e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCp2AxbwcVdPap4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YjBiNDYxYWYtYzg1Ni00MzdmLThhYzctOGM5ZDJjZmMxMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbmNLo64j2SBQw9qIJGVuOxSe9BGg/G0ObVz T0640aDPjb2/AixpGJ6bd+W+URAYt1zWBESiZaDX5A2m4U/jWWF5avoWIOfu8M8d 3G4dwKEej9XNsPbWw8d7uc7hjtRGUfh87faVTVAUFqq2WmCjlSyQYIbhrB6PJa0z sJSPIbx+qMnz1LTRR7quFAzlMnXLBGue87h6/l/fEJ1C09XYFGck4N4fO0weqGuo JZ0eF/T1a+tC1Ni5kKXqg/Z+hZ9J2pb1RYW9pXIqMHss6uEvhC378nlSGA6zc3EK lLTVQAFt8Hby06DkSFo2kLlHGvvf8Ig8IyoBfTgI8+AXCkqSOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+bAI39wDLl+79z/TkvYLxAdzMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjBlNThmMzctM2FlZi0z MTYyLWJlNTQtNmQ0YTViM2Y1ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz1wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB/W2e5gCaVsjXIKZBz3YPPLUUPGiLSh/356PRjmLf+3B9O1SSdmDYN 5IWCOBLEt81H9wIf97CGOSzFDAAm2noB1/c+KAw7YOF1HrAwrkavaumDi1hmtzd5 FX9T0aumrTvzv29jBnQdR7Ag81gk1lLAwK/+fJ/g99DkV/hoolRjsJzGOVQILVWE wCG7x6NutUxGYDRvt+CPQPypGUY68yRPcGZEz5L5hlbympHRmvZ7yGgSCsSURf6W 1SNjf3RwZfrB5JQrNaaa2xo2nGgdj5ErfqaD4dBtYixv19F5yigZL47xKGbkI7Tu GRkhsHavsiWH665Bl3KQq/qKeFc0TkE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:05 2026 by rpki-client