$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf762eaa-fcc3-3ecb-8e18-e62c7ce0ec7e.roa File: cf762eaa-fcc3-3ecb-8e18-e62c7ce0ec7e.roa (raw, json) Hash identifier: Tgl3cWby1b6TUx8FOHc0Z6ex+Bxu4AJ14zVDVEuPoXQ= Subject key identifier: 82:0A:F1:DB:2C:D2:12:6D:24:9D:10:0D:09:6F:F2:DD:6F:83:40:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A70A120DEA25441FFB400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf762eaa-fcc3-3ecb-8e18-e62c7ce0ec7e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 209.192.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:70:a1:20:de:a2:54:41:ff:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=65c251cf-4930-4699-bc98-6f386a524c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:4f:b1:9d:04:7d:8b:f0:d8:23:c9:f5:89: f2:78:9e:24:ab:be:16:c7:fc:d6:a9:4c:4d:d4:8c: 24:b8:b2:92:89:52:7b:f6:5b:48:b2:dc:01:e1:84: fb:c7:47:89:0b:a2:5c:0a:f3:c2:43:ae:ad:84:45: 14:5d:84:c3:d6:9f:d2:5c:e6:e2:b6:99:11:9a:12: 38:b5:70:ec:4f:33:99:69:a8:c8:6a:63:6f:aa:0f: 98:32:58:b3:f7:d6:1d:b8:d5:c3:c1:90:47:62:15: 30:e1:ff:ee:e6:97:af:40:f9:b7:67:ae:65:8f:3f: 61:4b:b7:9a:ed:be:b0:23:21:a8:53:5e:37:ee:12: 84:fa:b8:0f:7d:4b:fe:7c:c6:46:57:7c:0f:24:7e: c0:7c:be:c5:f8:7d:1f:34:9d:e4:45:23:a9:5d:45: 7e:37:63:fc:2a:52:25:3a:9e:3b:fe:27:56:b1:bd: 18:42:6e:8c:08:ba:97:af:95:40:e2:db:1e:d9:59: bd:56:1e:f3:58:80:aa:57:65:30:95:79:ef:f2:17: 28:73:4a:87:72:af:6d:a2:de:a6:a4:69:fa:72:a5: 93:65:68:b8:38:30:22:f6:9f:c4:36:75:20:83:00: 65:08:22:35:95:f8:a5:a9:6d:23:7c:50:60:f4:8f: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0A:F1:DB:2C:D2:12:6D:24:9D:10:0D:09:6F:F2:DD:6F:83:40:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf762eaa-fcc3-3ecb-8e18-e62c7ce0ec7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6f:72:10:72:8d:f1:24:bb:eb:7e:39:fb:20:68:8f:32:15: 8c:a7:df:0d:b5:10:50:f3:c7:ad:d1:98:d0:d8:dc:92:6f:1a: 5d:fc:1c:c3:b8:c4:f8:65:2d:bf:95:83:80:fb:08:5c:b9:b1: 3b:ab:62:4b:6b:fc:c5:49:79:27:a8:8a:24:7d:27:39:af:51: d9:e6:87:85:ff:e6:1d:da:23:51:9f:ed:81:e9:70:78:39:50: b8:b6:2b:79:ce:27:75:13:ef:11:4b:81:c5:ee:8b:56:0e:1f: 86:85:22:fe:2c:27:f0:bb:66:f2:4c:19:24:61:5d:8f:02:a2: 3a:92:a6:e0:18:86:22:de:08:f2:7d:86:1c:e7:0d:6d:b7:ce: 36:38:a8:c4:70:dd:68:cf:55:05:fc:f8:b5:01:5a:ed:3f:ab: e4:a8:9e:d4:68:91:c3:57:aa:5d:ac:81:96:f1:0c:f6:08:b8: 61:37:21:1b:c1:4f:07:c2:f6:0f:14:d2:64:45:a2:84:93:a2: 0d:5d:79:da:cd:ab:58:7a:02:a0:71:9b:82:39:90:b4:0d:47: a3:e0:b6:4d:15:eb:00:68:b8:e0:91:7e:6e:65:a9:65:2a:12: f1:17:28:3d:ee:f5:96:d5:83:10:b5:3d:29:e8:c0:ea:b0:bc: 68:2c:83:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnChIN6iVEH/tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjVjMjUxY2YtNDkzMC00Njk5LWJjOTgtNmYzODZhNTI0YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo1PsZ0EfYvw2CPJ9YnyeJ4kq74Wx/zWqUxN 1IwkuLKSiVJ79ltIstwB4YT7x0eJC6JcCvPCQ66thEUUXYTD1p/SXObitpkRmhI4 tXDsTzOZaajIamNvqg+YMliz99YduNXDwZBHYhUw4f/u5pevQPm3Z65ljz9hS7ea 7b6wIyGoU1437hKE+rgPfUv+fMZGV3wPJH7AfL7F+H0fNJ3kRSOpXUV+N2P8KlIl Op47/idWsb0YQm6MCLqXr5VA4tse2Vm9Vh7zWICqV2UwlXnv8hcoc0qHcq9tot6m pGn6cqWTZWi4ODAi9p/ENnUggwBlCCI1lfilqW0jfFBg9I9zAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIK8dss0hJtJJ0QDQlv8t1vg0D2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Y3NjJlYWEtZmNjMy0z ZWNiLThlMTgtZTYyYzdjZTBlYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0cAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtvchByjfEku+t+OfsgaI8yFYyn3w21EFDzx63RmNDY3JJvGl38HMO4 xPhlLb+Vg4D7CFy5sTurYktr/MVJeSeoiiR9JzmvUdnmh4X/5h3aI1Gf7YHpcHg5 ULi2K3nOJ3UT7xFLgcXui1YOH4aFIv4sJ/C7ZvJMGSRhXY8CojqSpuAYhiLeCPJ9 hhznDW23zjY4qMRw3WjPVQX8+LUBWu0/q+SontRokcNXql2sgZbxDPYIuGE3IRvB TwfC9g8U0mRFooSTog1dedrNq1h6AqBxm4I5kLQNR6Pgtk0V6wBouOCRfm5lqWUq EvEXKD3u9ZbVgxC1PSnowOqwvGgsg+s= -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:50 2026 by rpki-client