$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa File: c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa (raw, json) Hash identifier: JDMKbUjUqf2Sg3CPdHKaHDYkK98tZds07y2F7akKaW8= Subject key identifier: C3:BA:BB:2A:3D:B5:B8:AD:CF:A6:FA:84:7C:FA:6F:95:A3:BA:20:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A700842C22817E1B0A980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 209.92.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:70:08:42:c2:28:17:e1:b0:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9ea7902c-ffca-4e95-aae4-ebb2c6ecf205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a5:7c:f3:b3:2b:f4:38:59:1f:69:90:2c:7d: c2:d2:16:05:18:7b:f6:69:a4:d6:14:51:95:73:d0: d8:41:f4:6a:ca:2d:86:82:21:42:48:2a:09:9b:a6: 80:dc:0b:27:26:41:07:99:dc:b6:96:85:e2:21:e4: 0f:4a:3b:5b:bf:7b:8e:cd:dd:9f:1d:34:5c:3b:87: 18:a6:08:5b:42:ab:f5:c1:4d:b1:32:5d:c8:93:54: 1c:22:0a:a6:4a:a0:ac:b9:d2:e9:f5:70:7a:3b:c3: a7:b6:46:81:37:5e:78:a9:ad:ff:e2:4e:b1:7b:ca: 20:db:48:8a:a0:37:79:13:f9:49:cc:2e:b5:31:80: 1e:e0:00:8f:54:e1:d2:2e:74:b3:2c:87:4c:b1:07: dd:e3:81:fc:21:54:22:98:2a:fe:1d:97:00:17:ab: 90:b3:08:e2:bd:7b:a5:77:fd:e9:dd:b4:6f:d5:a5: 71:80:36:5d:c6:81:89:40:99:07:51:20:1e:37:6b: dd:f8:14:64:0e:56:21:86:d7:49:8c:9c:aa:dc:52: 1e:97:a0:a0:21:3d:21:6d:8a:a4:8f:77:78:dd:b1: e9:fd:25:bc:96:84:87:b0:8a:42:f0:96:e9:42:11: 92:11:e9:b8:be:60:d5:bd:ec:61:21:99:dc:23:90: 22:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BA:BB:2A:3D:B5:B8:AD:CF:A6:FA:84:7C:FA:6F:95:A3:BA:20:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0b:f2:88:88:dd:c5:5b:84:f9:03:3b:52:27:a1:cd:21:c9: 1f:07:66:7a:44:54:5a:53:32:48:bf:a0:5f:a5:60:9e:23:70: 74:87:a1:13:cc:5b:d5:18:c7:93:71:e3:99:23:33:02:21:ab: fc:46:b8:bf:37:d0:75:4c:0c:cd:a2:69:7b:e1:8c:f3:48:a2: 34:39:e7:af:bb:28:17:55:c7:22:d9:d5:52:cc:6d:0c:87:d8: d9:72:2f:14:a9:1d:77:a3:a7:d6:02:1f:b7:c1:31:ec:72:6b: cf:13:2e:98:dc:b6:a6:fb:32:5a:41:2d:02:c9:23:e1:4b:99: 3e:af:52:81:a3:d0:9c:24:32:6f:ed:85:49:42:53:7c:bf:f7: 6b:c4:8c:ba:77:1a:80:64:7a:01:a2:72:c8:eb:09:09:b7:4d: 8f:05:43:fc:af:13:ce:75:38:82:00:ff:60:6e:26:fb:b6:9e: bf:fb:56:6c:8c:f2:65:e2:d0:44:18:39:64:a7:37:73:59:aa: 6c:f6:37:21:92:0c:fd:41:58:c0:bd:19:a0:89:e5:51:52:9f: 42:e6:c0:36:29:15:3e:6f:9a:2a:09:17:c7:b0:48:f3:a8:58: 16:0a:1e:01:73:2d:af:1a:af:d2:4c:3f:c5:84:14:7b:7b:63: 76:56:55:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnAIQsIoF+GwqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OWVhNzkwMmMtZmZjYS00ZTk1LWFhZTQtZWJiMmM2ZWNmMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqV887Mr9DhZH2mQLH3C0hYFGHv2aaTWFFGV c9DYQfRqyi2GgiFCSCoJm6aA3AsnJkEHmdy2loXiIeQPSjtbv3uOzd2fHTRcO4cY pghbQqv1wU2xMl3Ik1QcIgqmSqCsudLp9XB6O8OntkaBN154qa3/4k6xe8og20iK oDd5E/lJzC61MYAe4ACPVOHSLnSzLIdMsQfd44H8IVQimCr+HZcAF6uQswjivXul d/3p3bRv1aVxgDZdxoGJQJkHUSAeN2vd+BRkDlYhhtdJjJyq3FIel6CgIT0hbYqk j3d43bHp/SW8loSHsIpC8JbpQhGSEem4vmDVvexhIZncI5AiPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO6uyo9tbitz6b6hHz6b5WjuiBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdjMDk3MTktOGE3Yi0z ODBkLWI3MmUtZjNhMDFiYzJiNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0VwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsL8oiI3cVbhPkDO1Inoc0hyR8HZnpEVFpTMki/oF+lYJ4jcHSHoRPM W9UYx5Nx45kjMwIhq/xGuL830HVMDM2iaXvhjPNIojQ556+7KBdVxyLZ1VLMbQyH 2NlyLxSpHXejp9YCH7fBMexya88TLpjctqb7MlpBLQLJI+FLmT6vUoGj0JwkMm/t hUlCU3y/92vEjLp3GoBkegGicsjrCQm3TY8FQ/yvE851OIIA/2BuJvu2nr/7VmyM 8mXi0EQYOWSnN3NZqmz2NyGSDP1BWMC9GaCJ5VFSn0LmwDYpFT5vmioJF8ewSPOo WBYKHgFzLa8ar9JMP8WEFHt7Y3ZWVWk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:45 2026 by rpki-client