$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c16413ed-6122-30f6-8082-e5b7db4dbf17.roa File: c16413ed-6122-30f6-8082-e5b7db4dbf17.roa (raw, json) Hash identifier: AX7XYXEJU6QXlrysAr/MBt5QtCzvtxxGa6i0cOdnwwo= Subject key identifier: 66:26:57:C6:3D:8E:02:27:57:B5:67:73:E9:22:0F:22:10:88:E5:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA68850B1F18237B54180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c16413ed-6122-30f6-8082-e5b7db4dbf17.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 32185 IP address blocks: 209.60.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a6:88:50:b1:f1:82:37:b5:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ef83f5b1-b1d9-4ea3-b51e-e94c47ee88f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ee:1e:7e:33:0b:07:02:39:cc:ba:49:18:6e: 16:0d:00:23:38:53:15:c3:9d:0a:dd:36:c0:14:27: 96:60:61:90:db:58:79:8e:20:e6:83:b7:85:66:f1: 96:40:cc:dd:ab:19:db:25:f1:9f:57:f4:6e:51:48: 1e:c1:01:5c:81:c6:5f:c8:f9:e9:70:3e:d6:60:96: b4:44:32:90:94:ea:94:4b:69:ff:39:c0:9a:ac:43: 20:b4:23:fa:a3:0d:0a:2c:5a:d8:9f:2a:df:b3:f7: 6b:07:43:29:6d:e4:03:2b:d9:9a:03:ce:8c:91:35: 8a:16:fa:24:1e:e9:8a:48:11:16:b7:c6:cf:bc:ce: c5:2f:d0:32:3f:64:b8:62:40:a9:09:33:a9:e2:98: 8b:3f:74:40:9f:29:e6:98:26:17:52:ef:53:07:3e: 7d:f2:18:d4:a0:b7:6e:bf:16:59:e8:0f:bb:d3:69: 87:be:42:74:28:26:8d:69:5e:43:97:9d:4e:15:eb: 42:ab:f1:26:c3:00:1a:36:3f:23:5a:27:7c:4c:e4: ba:2c:01:32:f6:e2:b5:ef:dc:c1:3a:64:9f:82:98: 83:37:15:2c:14:9e:73:11:27:94:7c:d3:e7:7d:64: 98:e7:96:d5:9c:33:60:7d:02:3d:3b:e9:b8:b1:37: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:26:57:C6:3D:8E:02:27:57:B5:67:73:E9:22:0F:22:10:88:E5:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c16413ed-6122-30f6-8082-e5b7db4dbf17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5e:b9:60:07:77:e7:0f:5f:d1:15:45:00:8a:91:c3:46:c8: aa:d3:3a:34:40:7b:b0:3a:b6:ab:4e:3e:04:28:dd:3b:b2:5a: 61:55:1a:c6:96:b7:87:e9:e7:c8:95:70:ee:39:c6:6b:59:0c: 8e:1a:a9:63:b6:16:95:3c:17:ce:2f:fe:69:0c:52:2d:bb:4b: f6:55:de:0a:8f:eb:54:c9:de:e7:57:67:3f:2e:ca:05:f0:9e: cd:22:9a:7d:9f:1d:de:ac:fe:02:42:1f:89:a8:71:69:c8:c7: b6:c4:b6:30:59:c2:97:3d:2f:96:7e:cc:72:74:b1:ab:d7:55: d1:f7:6b:55:04:3a:ea:79:5b:ec:4c:b7:d1:4a:f7:23:c5:d4: 6b:9d:6c:6e:66:32:34:25:3d:31:09:5f:b0:72:15:8b:6f:96: 28:de:ec:33:21:bf:28:18:61:2a:ec:c4:5e:a2:17:4f:86:49: c2:e6:97:43:aa:ad:98:90:4b:f7:f1:ad:76:bc:08:a3:96:07: d9:03:93:3f:c6:93:05:7e:6a:ed:ab:e0:e8:a5:03:e5:04:a3: 1f:d1:31:75:18:64:ba:f3:74:75:e1:7b:c3:ca:06:29:8d:90: f2:90:6b:22:35:23:a1:eb:a2:9e:15:ef:4f:29:a2:2e:26:b9: 12:44:96:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqaIULHxgje1QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWY4M2Y1YjEtYjFkOS00ZWEzLWI1MWUtZTk0YzQ3ZWU4OGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu4efjMLBwI5zLpJGG4WDQAjOFMVw50K3TbA FCeWYGGQ21h5jiDmg7eFZvGWQMzdqxnbJfGfV/RuUUgewQFcgcZfyPnpcD7WYJa0 RDKQlOqUS2n/OcCarEMgtCP6ow0KLFrYnyrfs/drB0MpbeQDK9maA86MkTWKFvok HumKSBEWt8bPvM7FL9AyP2S4YkCpCTOp4piLP3RAnynmmCYXUu9TBz598hjUoLdu vxZZ6A+702mHvkJ0KCaNaV5Dl51OFetCq/EmwwAaNj8jWid8TOS6LAEy9uK179zB OmSfgpiDNxUsFJ5zESeUfNPnfWSY55bVnDNgfQI9O+m4sTcmvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYmV8Y9jgInV7Vnc+kiDyIQiOV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzE2NDEzZWQtNjEyMi0z MGY2LTgwODItZTViN2RiNGRiZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TzvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5euWAHd+cPX9EVRQCKkcNGyKrTOjRAe7A6tqtOPgQo3TuyWmFVGsaW t4fp58iVcO45xmtZDI4aqWO2FpU8F84v/mkMUi27S/ZV3gqP61TJ3udXZz8uygXw ns0imn2fHd6s/gJCH4mocWnIx7bEtjBZwpc9L5Z+zHJ0savXVdH3a1UEOup5W+xM t9FK9yPF1GudbG5mMjQlPTEJX7ByFYtvlije7DMhvygYYSrsxF6iF0+GScLml0Oq rZiQS/fxrXa8CKOWB9kDkz/GkwV+au2r4OilA+UEox/RMXUYZLrzdHXhe8PKBimN kPKQayI1I6Hrop4V708poi4muRJElsE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:42:05 2026 by rpki-client