$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00a28f1-230a-3255-a993-48c56b482c51.roa File: d00a28f1-230a-3255-a993-48c56b482c51.roa (raw, json) Hash identifier: VeY377wjAviQ9KZd9lCs2XzUg8vkMOfzDaPZLv/r8Kk= Subject key identifier: 38:4E:71:0F:C3:F9:8A:C8:64:1B:7F:24:E1:FA:0B:7E:24:25:13:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A78894C57100F068FE0A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00a28f1-230a-3255-a993-48c56b482c51.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 209.192.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:78:89:4c:57:10:0f:06:8f:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=43e9131b-4964-48c7-9617-dd7e3c9d06b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:f3:06:3f:dc:b1:47:08:b0:d1:cc:98:3c: 77:66:1a:04:2e:d8:e8:d5:af:a2:b0:f6:7f:6d:68: 27:70:e3:65:05:98:43:d0:9c:39:0b:3e:58:ef:02: d9:ba:5f:8a:8a:a7:d3:47:31:55:b1:95:6f:be:9c: ae:56:49:2f:63:96:e5:f6:bd:a4:f2:f9:e7:95:cb: 80:a9:1b:e2:ba:b8:ee:3f:7e:80:cd:57:13:4d:a9: 45:eb:d9:e4:3d:f5:6e:65:97:91:8e:13:4a:6a:1a: 26:fa:8e:d2:33:f9:fd:5b:e4:59:91:98:85:11:b1: ad:b9:c7:6a:7f:f9:43:d0:5b:35:bb:87:b8:61:ab: 92:87:87:76:bc:3c:66:2e:31:09:29:0c:12:e0:3e: 57:d3:dd:22:bd:e8:b4:38:64:54:8e:48:be:d3:65: 2b:0b:69:26:ef:8b:8d:d4:53:a4:56:a1:19:5d:ba: db:f2:38:29:11:8d:b6:67:a8:14:3c:08:21:32:22: 9c:d0:ed:e8:e1:e1:e1:f1:82:d2:1d:c7:f4:e8:4c: 2a:f0:6a:48:c0:f1:15:cb:57:fc:2d:9f:e0:4f:81: 8f:41:af:4f:60:c5:cd:90:9e:3b:9f:49:d3:f1:a1: 52:df:9c:38:bf:70:56:a4:df:b4:91:d5:8b:89:1a: 6a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4E:71:0F:C3:F9:8A:C8:64:1B:7F:24:E1:FA:0B:7E:24:25:13:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00a28f1-230a-3255-a993-48c56b482c51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:04:05:1a:b6:5f:10:60:ee:fe:9c:91:ce:46:07:00:88:00: b2:8c:a4:32:ca:db:a8:2b:0a:cb:1e:cb:78:39:ce:c4:a4:9a: a9:f9:bd:28:57:44:71:ff:e0:57:f6:6e:38:ef:8b:52:11:5e: 13:f1:36:61:99:86:a6:ab:6c:f2:cc:35:0c:bd:be:e9:45:f0: 0f:45:cb:48:55:7e:71:1e:8b:d6:b9:e5:0a:19:05:cd:52:d7: 72:d9:cf:2d:10:22:e0:db:8b:86:d0:c4:b1:4b:f0:44:09:36: 3c:c9:29:5c:87:93:87:4b:11:7c:b4:03:88:95:4a:fe:8a:25: f8:22:99:07:26:43:a5:c9:6d:a9:4f:4d:4c:85:87:36:83:4d: 6a:eb:0a:20:57:af:04:be:11:8e:28:f5:25:0b:e5:d4:d4:e1: 2b:3b:89:cc:f4:80:8a:59:28:4d:27:40:3b:73:d7:7a:77:6e: 76:9b:6c:1f:0c:ad:ef:32:e2:27:69:3a:ac:84:a5:0c:a4:a5: 65:06:30:80:3d:a4:05:7a:52:49:dd:d0:38:38:36:c9:75:6c: 9a:ba:57:12:43:1a:f8:b1:8a:d7:e0:8d:ec:c7:3d:59:50:ea: 4a:da:8f:6c:b3:d6:da:1a:ef:f6:03:66:42:0f:21:60:45:53: a4:d9:22:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCniJTFcQDwaP4KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDNlOTEzMWItNDk2NC00OGM3LTk2MTctZGQ3ZTNjOWQwNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmErzBj/csUcIsNHMmDx3ZhoELtjo1a+isPZ/ bWgncONlBZhD0Jw5Cz5Y7wLZul+KiqfTRzFVsZVvvpyuVkkvY5bl9r2k8vnnlcuA qRviurjuP36AzVcTTalF69nkPfVuZZeRjhNKahom+o7SM/n9W+RZkZiFEbGtucdq f/lD0Fs1u4e4YauSh4d2vDxmLjEJKQwS4D5X090ivei0OGRUjki+02UrC2km74uN 1FOkVqEZXbrb8jgpEY22Z6gUPAghMiKc0O3o4eHh8YLSHcf06Ewq8GpIwPEVy1f8 LZ/gT4GPQa9PYMXNkJ47n0nT8aFS35w4v3BWpN+0kdWLiRpqNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhOcQ/D+YrIZBt/JOH6C34kJRO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDAwYTI4ZjEtMjMwYS0z MjU1LWE5OTMtNDhjNTZiNDgyYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYEBRq2XxBg7v6ckc5GBwCIALKMpDLK26grCssey3g5zsSkmqn5vShX RHH/4Ff2bjjvi1IRXhPxNmGZhqarbPLMNQy9vulF8A9Fy0hVfnEei9a55QoZBc1S 13LZzy0QIuDbi4bQxLFL8EQJNjzJKVyHk4dLEXy0A4iVSv6KJfgimQcmQ6XJbalP TUyFhzaDTWrrCiBXrwS+EY4o9SUL5dTU4Ss7icz0gIpZKE0nQDtz13p3bnabbB8M re8y4idpOqyEpQykpWUGMIA9pAV6Uknd0Dg4Nsl1bJq6VxJDGvixitfgjezHPVlQ 6kraj2yz1toa7/YDZkIPIWBFU6TZItU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:51 2026 by rpki-client