$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa File: b5c5491b-02de-3284-8dbf-991476de5e11.roa (raw, json) Hash identifier: ydgo+U7Bn9cTPMBatmy1IoZmQViKs6F7KWZLInklhlo= Subject key identifier: 5A:3C:7B:45:CC:DA:58:4F:D5:B9:93:00:B3:E0:58:FE:30:49:B2:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A78F52D0DC273B8373EF8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 209.192.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:78:f5:2d:0d:c2:73:b8:37:3e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=188a5178-4573-4136-8aed-668842075d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:f4:49:de:0f:ad:92:ba:80:b9:36:87:e0: a2:af:d4:e4:fa:fc:68:11:f5:f3:36:9d:13:d0:87: 16:14:df:07:d9:8c:ac:81:dd:23:a8:9a:c6:ba:e1: 15:42:4c:3c:cc:b6:fa:a0:db:c5:d8:15:8c:c4:e3: 8f:d0:ce:e3:57:d6:24:87:4e:cf:f1:f0:83:55:be: cf:fe:08:4c:57:0c:d9:7c:01:32:39:27:0b:c3:50: 4b:5b:d6:4b:f8:0e:4d:4e:85:ee:70:a8:e5:fa:1a: 30:3c:a3:ea:fb:bf:2a:51:27:9e:ce:2d:cc:31:5f: 9c:5e:37:f3:e6:21:e9:1c:ef:41:c6:1c:d3:84:c2: 0d:4c:6d:f5:75:8c:34:c3:a4:d4:ab:68:cb:8c:d9: 2c:c4:0c:82:74:a8:9c:a0:cd:03:a9:2a:e4:fb:42: 86:6c:97:5b:d5:2c:73:3e:a9:3a:5d:0c:cc:7f:ae: 45:a7:22:ce:26:e7:c1:b0:73:26:e3:2b:76:0d:f5: 9d:9f:da:7c:01:6d:08:18:f8:5b:53:72:c0:99:22: a7:47:52:44:20:8a:c7:49:62:07:e3:69:81:9e:9b: 65:c9:86:72:c9:23:00:5e:03:ab:84:72:fe:e7:f4: 1b:70:1e:af:dd:7a:8a:c9:67:c2:78:12:c9:f8:17: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3C:7B:45:CC:DA:58:4F:D5:B9:93:00:B3:E0:58:FE:30:49:B2:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:02:76:c1:2c:20:9d:d0:7a:02:80:33:f8:f4:cf:af:24:9f: ba:e0:98:da:88:8d:0c:2c:af:eb:de:d5:d9:7f:bb:93:35:9b: 7e:e5:79:55:56:fc:85:bd:c8:12:f2:48:a3:c0:4e:a9:ff:68: ed:91:c7:56:c6:ce:a5:79:06:fb:df:79:4f:85:6f:88:70:fd: 4c:27:10:78:3c:8e:69:fd:ac:c3:4e:9f:06:a6:5b:d6:4e:fd: ea:2a:40:38:bc:ee:53:3f:a8:09:14:be:14:ac:5f:e8:a8:01: a1:5f:26:b5:75:1d:1e:f3:b8:cd:ad:c8:2d:86:ba:7b:7b:1b: df:2f:3b:38:55:04:00:5b:90:0f:79:ab:26:e7:0d:73:4e:21: ae:c3:33:b8:b2:2d:bd:48:1b:61:16:ee:b0:1e:d1:6b:35:dd: 49:be:d4:7d:66:7e:b7:6a:89:68:e4:4a:c2:79:da:31:f9:ea: eb:42:a2:b5:ee:05:3c:d2:e0:4b:70:e3:37:b8:4e:b8:6f:fb: 11:7f:ee:d6:90:da:1f:24:ce:7c:75:14:5d:8a:4c:72:cb:78: 95:93:e9:a1:00:5f:2c:f6:89:f9:04:26:93:ec:5a:cb:f4:d5: 96:9b:9d:46:59:ad:14:cb:b3:e7:2b:67:81:e7:73:65:cc:db: fb:04:31:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnj1LQ3Cc7g3PvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTg4YTUxNzgtNDU3My00MTM2LThhZWQtNjY4ODQyMDc1ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytv0Sd4PrZK6gLk2h+Cir9Tk+vxoEfXzNp0T 0IcWFN8H2Yysgd0jqJrGuuEVQkw8zLb6oNvF2BWMxOOP0M7jV9Ykh07P8fCDVb7P /ghMVwzZfAEyOScLw1BLW9ZL+A5NToXucKjl+howPKPq+78qUSeezi3MMV+cXjfz 5iHpHO9BxhzThMINTG31dYw0w6TUq2jLjNksxAyCdKicoM0DqSrk+0KGbJdb1Sxz Pqk6XQzMf65FpyLOJufBsHMm4yt2DfWdn9p8AW0IGPhbU3LAmSKnR1JEIIrHSWIH 42mBnptlyYZyySMAXgOrhHL+5/QbcB6v3XqKyWfCeBLJ+BekyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFo8e0XM2lhP1bmTALPgWP4wSbKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjVjNTQ5MWItMDJkZS0z Mjg0LThkYmYtOTkxNDc2ZGU1ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4CdsEsIJ3QegKAM/j0z68kn7rgmNqIjQwsr+ve1dl/u5M1m37leVVW /IW9yBLySKPATqn/aO2Rx1bGzqV5BvvfeU+Fb4hw/UwnEHg8jmn9rMNOnwamW9ZO /eoqQDi87lM/qAkUvhSsX+ioAaFfJrV1HR7zuM2tyC2Gunt7G98vOzhVBABbkA95 qybnDXNOIa7DM7iyLb1IG2EW7rAe0Ws13Um+1H1mfrdqiWjkSsJ52jH56utCorXu BTzS4Etw4ze4Trhv+xF/7taQ2h8kznx1FF2KTHLLeJWT6aEAXyz2ifkEJpPsWsv0 1ZabnUZZrRTLs+crZ4Hnc2XM2/sEMbQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:49 2026 by rpki-client