$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c03954f1-0f2a-3335-9930-f697c025b5fc.roa File: c03954f1-0f2a-3335-9930-f697c025b5fc.roa (raw, json) Hash identifier: C6+1WNk9UNbKJhpbyvoM0oH9UJb/pWR1rmzIAKaAM/o= Subject key identifier: 2E:E9:8A:D9:AD:F2:A8:B0:69:C8:A3:95:A7:DD:95:70:3F:AA:10:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7C84FDAA3569A4C1E8C8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c03954f1-0f2a-3335-9930-f697c025b5fc.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 394815 IP address blocks: 209.60.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7c:84:fd:aa:35:69:a4:c1:e8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=4c15ddee-c2a3-4259-a4e8-3e9a7f03a7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5d:51:a4:0a:c8:e7:76:e9:60:72:9d:02:09: 8c:6f:74:34:8b:2a:b4:db:34:c3:28:17:bf:f5:98: 6c:a8:1d:5c:11:a8:59:e8:06:42:9d:8e:26:f5:52: 9a:70:61:ce:58:22:0b:bb:1b:3b:dc:6c:e5:9b:89: 49:70:99:f9:18:8d:0e:0c:fd:66:07:d5:e1:32:ed: 11:0c:23:3c:63:58:b0:21:ea:cd:e9:29:86:a8:a9: 6d:f5:43:86:fb:80:7b:dd:8a:1d:0f:41:fa:37:38: ed:6f:56:4c:41:16:d4:35:a8:c1:80:6e:eb:59:3d: b0:bc:a6:4f:71:86:c6:96:6b:82:a1:99:02:94:3e: bc:c5:68:55:d5:4f:b8:19:0a:18:eb:e7:59:f0:88: 70:67:b4:dc:1c:46:1e:64:68:f3:55:64:88:97:0b: 65:ab:53:9c:73:f8:1e:4c:15:c8:be:c0:a4:21:f5: 44:2f:86:db:8b:24:26:c2:47:17:8d:84:74:88:76: d6:6e:67:a0:29:bb:b5:9b:04:4e:f8:2d:b5:c5:30: 8d:37:ac:c7:ba:bd:4f:91:c6:3d:94:2c:39:3e:05: 51:45:7f:40:75:c1:8a:e4:2b:40:d5:94:86:96:c2: 8a:99:ea:ab:a9:ad:7e:08:b1:54:86:24:e6:14:f4: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E9:8A:D9:AD:F2:A8:B0:69:C8:A3:95:A7:DD:95:70:3F:AA:10:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c03954f1-0f2a-3335-9930-f697c025b5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:40:fd:01:0b:72:f5:29:c9:77:40:c4:c9:49:e9:19:d3:e3: c6:a3:4f:59:b3:bb:30:22:70:e5:f9:30:ef:09:4c:9d:d9:c1: d1:f2:97:07:2f:6c:f4:68:1d:68:ce:9d:52:c2:77:94:90:e5: dc:61:6e:88:43:a5:c5:a3:11:ef:27:37:ff:be:a2:a9:7a:aa: 01:d3:44:64:7e:92:0f:be:8c:0c:69:b3:bd:22:88:32:37:e6: f6:7b:88:6f:15:4e:70:55:cd:bc:8b:79:b5:1f:2d:d9:b9:ec: 1e:39:29:f1:8c:4e:5c:e4:82:e9:0c:e0:0c:97:68:49:6c:2b: 43:92:41:cb:4e:9e:2c:ca:9f:6c:f1:91:d0:26:72:bb:51:1f: f7:e4:81:4d:69:60:6a:1e:eb:a6:de:a9:fc:72:b3:4c:4f:eb: ca:37:ae:20:c9:4e:a2:29:c3:20:e8:dc:8b:86:59:2c:2a:41: 8e:f5:eb:ee:09:66:d3:0b:2e:88:62:7b:d4:a1:26:79:21:5b: 76:e7:83:3e:44:d3:3b:ec:69:07:3e:ab:1e:56:43:2f:79:bf: e8:69:e9:0d:6a:69:6c:bf:c6:3d:be:cb:12:f9:d3:a0:7e:5d: 6a:e3:2c:63:d9:02:32:56:d6:6e:e5:c1:4b:b2:fd:46:5e:74: 1b:a1:2d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnyE/ao1aaTB6MgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NGMxNWRkZWUtYzJhMy00MjU5LWE0ZTgtM2U5YTdmMDNhN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj11RpArI53bpYHKdAgmMb3Q0iyq02zTDKBe/ 9ZhsqB1cEahZ6AZCnY4m9VKacGHOWCILuxs73Gzlm4lJcJn5GI0ODP1mB9XhMu0R DCM8Y1iwIerN6SmGqKlt9UOG+4B73YodD0H6Nzjtb1ZMQRbUNajBgG7rWT2wvKZP cYbGlmuCoZkClD68xWhV1U+4GQoY6+dZ8IhwZ7TcHEYeZGjzVWSIlwtlq1Occ/ge TBXIvsCkIfVEL4bbiyQmwkcXjYR0iHbWbmegKbu1mwRO+C21xTCNN6zHur1PkcY9 lCw5PgVRRX9AdcGK5CtA1ZSGlsKKmeqrqa1+CLFUhiTmFPRcpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7pitmt8qiwacijlafdlXA/qhDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzAzOTU0ZjEtMGYyYS0z MzM1LTk5MzAtZjY5N2MwMjViNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJA/QELcvUpyXdAxMlJ6RnT48ajT1mzuzAicOX5MO8JTJ3ZwdHylwcv bPRoHWjOnVLCd5SQ5dxhbohDpcWjEe8nN/++oql6qgHTRGR+kg++jAxps70iiDI3 5vZ7iG8VTnBVzbyLebUfLdm57B45KfGMTlzkgukM4AyXaElsK0OSQctOnizKn2zx kdAmcrtRH/fkgU1pYGoe66beqfxys0xP68o3riDJTqIpwyDo3IuGWSwqQY716+4J ZtMLLohie9ShJnkhW3bngz5E0zvsaQc+qx5WQy95v+hp6Q1qaWy/xj2+yxL506B+ XWrjLGPZAjJW1m7lwUuy/UZedBuhLQA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:54 2026 by rpki-client