$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa File: bb391dc9-1f19-3e65-be6c-947a5db5500a.roa (raw, json) Hash identifier: 8fQyRgGpxMO5K455Gb4rNMTgzDfi0wiSECJ0CUO0gG0= Subject key identifier: C0:F4:FD:10:C7:1C:2E:D1:89:F7:D4:32:68:C7:D9:0F:48:2B:AB:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA5D793C80D69B76DFBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 209.192.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a5:d7:93:c8:0d:69:b7:6d:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=17f7188d-c8d0-47b6-94d2-28627e42887a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:00:f8:ed:1b:ef:1a:67:86:77:0a:f5:ad:71: 01:3c:a5:d3:08:1e:83:6e:29:f5:ee:18:7a:ab:c5: 35:73:e4:27:3d:4a:b8:7c:e5:41:61:d9:90:e2:3e: b0:48:71:e0:ad:66:8a:f1:a8:2c:06:24:a4:87:d4: b6:a6:ba:26:15:74:14:7f:9f:eb:58:a3:03:46:01: ea:97:e1:5a:81:ff:a2:03:f8:5c:56:68:92:7e:83: f5:b1:7d:0c:d8:e4:d0:76:8b:f6:f8:12:4e:b4:7e: 9e:c0:c2:cf:4a:ec:43:f3:f1:72:b8:06:f0:77:fa: f6:b6:8a:12:6b:c4:b7:8d:76:71:ea:eb:b9:f5:79: e5:6a:1b:b6:e0:9c:7f:1a:71:5f:cc:48:c1:f8:e3: 86:f1:e1:ce:5b:df:7e:39:23:4a:b0:cb:d0:75:cd: 93:e9:64:4e:16:4f:1a:40:01:5b:6a:31:33:6b:4e: ea:49:48:73:f4:4f:c5:51:05:af:3a:7e:de:a7:07: ab:82:64:22:94:28:2e:6f:6f:ad:21:86:aa:14:2d: 20:a5:51:d3:c4:55:29:88:5d:87:0f:23:70:ee:47: 6d:de:d4:5a:79:19:81:6b:bc:20:82:56:3b:c0:18: 42:db:35:83:20:15:d9:49:03:71:07:0d:b2:19:c2: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F4:FD:10:C7:1C:2E:D1:89:F7:D4:32:68:C7:D9:0F:48:2B:AB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3a:1b:18:90:61:51:bf:13:2d:dd:4c:8c:04:4e:24:55:08: 19:aa:50:2f:e4:00:bd:42:59:22:73:01:a7:11:26:bc:11:0e: 54:d8:2a:d5:97:df:da:21:c5:09:cf:5b:34:7a:d7:45:6b:ce: 72:f4:c1:fd:5b:69:4b:be:4e:3b:2f:93:16:03:ea:03:9f:64: e4:3a:25:de:6f:e3:da:a1:f9:8c:16:19:46:bc:c2:38:ca:05: 7d:31:6d:8a:13:0e:2c:bc:27:79:76:44:24:14:86:7b:2d:62: 91:1b:e2:ab:ee:5c:14:6a:b6:1b:c6:74:b2:b3:52:7d:c9:15: 92:8d:0d:f4:63:86:c6:b5:54:b9:1b:42:42:06:7b:5c:48:ee: 1f:65:c5:55:31:6b:8e:58:4c:6b:0c:c5:10:7e:23:ab:a3:40: df:e0:21:04:ea:78:48:a7:56:c2:f5:89:34:eb:6e:d6:b8:1a: 00:b6:f1:15:84:ca:c5:a7:34:a5:93:9e:5d:1a:ca:a2:00:0a: 5d:f4:98:0b:32:b5:3a:09:34:27:ea:fb:90:23:b0:25:79:1e: 84:ec:db:c7:b4:8d:3c:b3:25:66:a9:50:9a:15:d7:ba:5a:b1: c4:37:48:46:42:11:62:3c:58:bb:73:b2:f3:74:a8:d5:15:0f: 4e:d4:a2:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqXXk8gNabdt+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTdmNzE4OGQtYzhkMC00N2I2LTk0ZDItMjg2MjdlNDI4ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAD47RvvGmeGdwr1rXEBPKXTCB6Dbin17hh6 q8U1c+QnPUq4fOVBYdmQ4j6wSHHgrWaK8agsBiSkh9S2promFXQUf5/rWKMDRgHq l+Fagf+iA/hcVmiSfoP1sX0M2OTQdov2+BJOtH6ewMLPSuxD8/FyuAbwd/r2tooS a8S3jXZx6uu59Xnlahu24Jx/GnFfzEjB+OOG8eHOW99+OSNKsMvQdc2T6WROFk8a QAFbajEza07qSUhz9E/FUQWvOn7epwergmQilCgub2+tIYaqFC0gpVHTxFUpiF2H DyNw7kdt3tRaeRmBa7wgglY7wBhC2zWDIBXZSQNxBw2yGcKy3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD0/RDHHC7RiffUMmjH2Q9IK6uXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmIzOTFkYzktMWYxOS0z ZTY1LWJlNmMtOTQ3YTVkYjU1MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw6GxiQYVG/Ey3dTIwETiRVCBmqUC/kAL1CWSJzAacRJrwRDlTYKtWX 39ohxQnPWzR610VrznL0wf1baUu+TjsvkxYD6gOfZOQ6Jd5v49qh+YwWGUa8wjjK BX0xbYoTDiy8J3l2RCQUhnstYpEb4qvuXBRqthvGdLKzUn3JFZKNDfRjhsa1VLkb QkIGe1xI7h9lxVUxa45YTGsMxRB+I6ujQN/gIQTqeEinVsL1iTTrbta4GgC28RWE ysWnNKWTnl0ayqIACl30mAsytToJNCfq+5AjsCV5HoTs28e0jTyzJWapUJoV17pa scQ3SEZCEWI8WLtzsvN0qNUVD07Uol8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:40:16 2026 by rpki-client