$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b42f7567-8eaa-3310-82f0-c49a4b66f0f3.roa File: b42f7567-8eaa-3310-82f0-c49a4b66f0f3.roa (raw, json) Hash identifier: iu6BVFujx1nSy41v3d+wyq8+MpnJSEcb8utTQS88ihY= Subject key identifier: 5D:C9:E7:45:F1:29:6F:20:52:11:D5:EC:D1:F8:8F:41:5B:D5:75:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C4D730CF4B19A1B5536480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b42f7567-8eaa-3310-82f0-c49a4b66f0f3.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.2.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:d7:30:cf:4b:19:a1:b5:53:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=64bc5f12-9c09-4d02-9291-c10aaffcc605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:c6:70:41:38:81:91:33:78:90:da:71:ca: 27:35:19:63:63:67:e6:a3:b5:7e:33:fb:38:33:a5: ad:30:7c:03:2a:33:76:f4:3f:39:fe:d5:5c:71:3f: c2:7a:01:3c:29:65:34:f5:8e:fc:8a:06:65:81:dd: 66:1f:70:ee:17:f4:16:90:65:a1:ec:a7:67:db:f5: 00:92:0d:51:de:fa:a9:26:b8:47:04:70:2a:92:a9: bd:13:45:81:d3:55:c0:da:21:1b:f1:ef:e0:13:89: c3:9e:d4:9c:f8:f2:d0:6e:d8:8e:f1:23:6c:00:de: 06:5c:5b:8c:01:eb:df:4c:50:04:8a:31:f3:bd:4f: 43:7d:6a:09:0a:45:ac:63:1c:71:eb:d8:af:df:14: b1:3d:0f:17:54:f2:ba:83:14:57:7c:62:5d:5d:b7: 9d:b3:28:98:48:bf:fa:1f:48:c4:e2:6f:d4:b0:77: b7:29:6e:33:37:a2:53:48:9d:0d:30:6a:05:44:e3: 77:09:4d:7a:cd:57:c7:78:6e:41:d4:cc:10:5d:e7: 74:11:8a:3e:3d:16:60:cc:90:fd:a2:6a:d3:59:ce: 0b:ec:d5:1b:f2:70:64:40:4f:f2:e1:20:5b:95:f6: df:a8:ab:10:47:32:a0:68:39:f4:a6:45:5a:21:78: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C9:E7:45:F1:29:6F:20:52:11:D5:EC:D1:F8:8F:41:5B:D5:75:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b42f7567-8eaa-3310-82f0-c49a4b66f0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b4:47:ab:2e:1e:0b:eb:e4:8a:1f:38:eb:2a:ba:28:db:ce: eb:d8:58:83:7b:dd:db:ba:3e:26:c5:2d:2a:5c:93:c7:81:cb: 91:67:e9:94:49:25:35:9d:c5:1e:de:41:1c:d2:6b:d3:27:a5: 72:24:b7:73:70:9b:61:30:ac:62:e0:cc:68:cb:b6:cd:3a:33: 7a:6d:a7:d6:1c:64:64:11:1e:03:b0:ca:c5:2f:7a:7f:30:17: 52:97:ed:40:2b:df:53:f8:fe:e4:33:da:bb:d6:f2:06:72:19: da:b6:5a:72:39:75:e9:ec:1f:38:16:e2:95:6a:9a:87:a6:83: 79:96:8c:e7:27:8c:2d:09:6c:ef:5b:9d:98:42:c4:51:3d:e5: 79:69:28:4e:02:24:fb:91:d9:0a:25:ee:17:f9:00:76:58:f0: 62:48:da:7a:d0:65:53:16:66:ee:37:4a:2b:4e:5c:c7:9a:f0: ee:d1:e0:39:72:5f:e5:1d:19:80:04:4e:73:db:27:96:dc:c3: 34:5b:88:03:c1:aa:6c:7f:81:a5:de:c7:e2:8e:92:49:99:3b: b7:96:4a:84:55:e0:2d:1e:b9:cd:cb:b1:39:0b:08:c2:5e:d9: 13:8e:3c:46:55:52:bb:f1:4a:75:f3:b5:27:b8:12:69:6d:16: 37:24:34:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxNcwz0sZobVTZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NjRiYzVmMTItOWMwOS00ZDAyLTkyOTEtYzEwYWFmZmNjNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpjGcEE4gZEzeJDacconNRljY2fmo7V+M/s4 M6WtMHwDKjN29D85/tVccT/CegE8KWU09Y78igZlgd1mH3DuF/QWkGWh7Kdn2/UA kg1R3vqpJrhHBHAqkqm9E0WB01XA2iEb8e/gE4nDntSc+PLQbtiO8SNsAN4GXFuM AevfTFAEijHzvU9DfWoJCkWsYxxx69iv3xSxPQ8XVPK6gxRXfGJdXbedsyiYSL/6 H0jE4m/UsHe3KW4zN6JTSJ0NMGoFRON3CU16zVfHeG5B1MwQXed0EYo+PRZgzJD9 omrTWc4L7NUb8nBkQE/y4SBblfbfqKsQRzKgaDn0pkVaIXhxqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3J50XxKW8gUhHV7NH4j0Fb1XW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQyZjc1NjctOGVhYS0z MzEwLTgyZjAtYzQ5YTRiNjZmMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu0R6suHgvr5IofOOsquijbzuvYWIN73du6PibFLSpck8eBy5Fn6ZRJ JTWdxR7eQRzSa9MnpXIkt3Nwm2EwrGLgzGjLts06M3ptp9YcZGQRHgOwysUven8w F1KX7UAr31P4/uQz2rvW8gZyGdq2WnI5densHzgW4pVqmoemg3mWjOcnjC0JbO9b nZhCxFE95XlpKE4CJPuR2Qol7hf5AHZY8GJI2nrQZVMWZu43SitOXMea8O7R4Dly X+UdGYAETnPbJ5bcwzRbiAPBqmx/gaXex+KOkkmZO7eWSoRV4C0euc3LsTkLCMJe 2ROOPEZVUrvxSnXztSe4EmltFjckNNc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:19 2026 by rpki-client