$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7b45522-19e4-3b2e-845e-1856072f9fd4.roa File: d7b45522-19e4-3b2e-845e-1856072f9fd4.roa (raw, json) Hash identifier: 6jydChGDS6p7CkA4bk+rsylCL/0oiMCtJLyWDAnbjLI= Subject key identifier: D8:EC:00:A5:19:34:E3:FC:CE:82:6E:FA:53:74:60:2A:8B:8F:62:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9EC8C2422BBB1DD3B680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7b45522-19e4-3b2e-845e-1856072f9fd4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 209.156.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9e:c8:c2:42:2b:bb:1d:d3:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e2676a3d-23bc-4c21-8922-3b9a1575efd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:08:48:2e:2b:75:65:42:98:da:29:ff:c9: fe:91:29:76:89:9a:b5:26:77:fe:a9:8e:a2:e0:70: 99:13:20:97:06:02:41:88:46:32:ed:d8:b3:14:a2: b9:a0:6f:5a:bc:a7:64:f9:ad:90:18:33:28:5f:a5: ba:2e:95:64:b8:19:ff:16:90:1b:96:c9:1c:3c:39: 0f:3e:d6:fd:ec:00:25:ec:d7:50:01:7a:e1:cb:f2: 7b:22:7f:ed:96:f1:fb:05:74:1d:9d:5d:c5:0e:fd: c6:36:69:57:2e:30:d9:90:bd:60:ac:7b:8f:e8:9f: 3c:13:15:bf:31:de:1f:ad:25:bf:ad:9d:67:eb:52: 78:dd:cb:c8:d4:dc:65:a0:15:9c:4a:cd:12:85:56: 2b:7d:cb:e4:3a:c3:f6:29:e3:be:36:03:93:3e:14: 3a:65:4c:63:80:48:55:b2:0e:36:a9:03:4d:cd:77: da:e6:b4:b7:70:9c:dc:b5:3a:98:ed:70:ad:0f:0d: 62:94:50:d6:f4:a4:f5:8b:cb:d3:73:24:1f:f9:e8: b6:c5:55:5f:1b:08:3d:3f:7c:f5:5e:60:08:a5:e3: 8b:e7:d2:6f:f8:09:cc:d1:e1:da:52:9b:29:7d:15: a3:28:b2:0d:a9:e4:bf:9e:1a:ee:82:dd:2f:91:2b: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EC:00:A5:19:34:E3:FC:CE:82:6E:FA:53:74:60:2A:8B:8F:62:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7b45522-19e4-3b2e-845e-1856072f9fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7b:c2:b0:20:98:90:8e:73:34:c5:9b:db:28:ce:b3:5e:b3: 78:41:d8:a8:b1:36:11:fe:22:41:63:d7:15:0e:f0:60:f8:b6: ed:6d:a6:5d:1c:f1:32:e7:48:98:d9:28:4f:64:6b:f4:e1:b1: 29:38:8d:f3:09:7e:bd:bd:8d:bd:11:29:8d:40:c6:fa:6b:0f: 39:92:89:29:cb:1d:f2:52:d3:d9:83:3d:a9:95:4e:ba:31:a0: 00:10:cc:41:af:90:ec:65:3f:ce:9b:44:a4:d3:95:a2:0c:73: 37:5e:05:8b:4f:f0:e2:f4:de:96:3f:30:4b:65:57:f8:5b:3c: da:e7:e7:3f:89:8d:86:21:94:5c:41:07:66:24:91:70:b1:5c: f7:80:dc:a0:70:18:f4:87:75:b2:65:87:54:71:76:6c:7e:55: 3b:36:f0:5c:09:89:16:eb:4c:91:28:45:d0:ff:88:08:81:d5: e9:ca:85:22:c9:1c:82:c0:ae:9b:05:25:6b:28:bc:be:f3:ab: 18:f2:e8:06:b9:e6:7d:bd:cb:f7:3d:7b:a0:0c:89:f9:12:22: 3d:ff:ee:a2:22:6a:00:d0:b5:b1:4b:53:6c:30:06:64:a4:41: e3:d0:35:e4:15:17:47:22:51:94:43:66:06:dc:8d:6d:f1:58: a3:8a:bd:89 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCp7IwkIrux3TtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTI2NzZhM2QtMjNiYy00YzIxLTg5MjItM2I5YTE1NzVlZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVgISC4rdWVCmNop/8n+kSl2iZq1Jnf+qY6i 4HCZEyCXBgJBiEYy7dizFKK5oG9avKdk+a2QGDMoX6W6LpVkuBn/FpAblskcPDkP Ptb97AAl7NdQAXrhy/J7In/tlvH7BXQdnV3FDv3GNmlXLjDZkL1grHuP6J88ExW/ Md4frSW/rZ1n61J43cvI1NxloBWcSs0ShVYrfcvkOsP2KeO+NgOTPhQ6ZUxjgEhV sg42qQNNzXfa5rS3cJzctTqY7XCtDw1ilFDW9KT1i8vTcyQf+ei2xVVfGwg9P3z1 XmAIpeOL59Jv+AnM0eHaUpspfRWjKLINqeS/nhrugt0vkSt6LwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNjsAKUZNOP8zoJu+lN0YCqLj2KZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdiNDU1MjItMTllNC0z YjJlLTg0NWUtMTg1NjA3MmY5ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0ZwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAW3vCsCCYkI5zNMWb2yjOs16zeEHYqLE2Ef4iQWPXFQ7wYPi27W2mXRzx MudImNkoT2Rr9OGxKTiN8wl+vb2NvREpjUDG+msPOZKJKcsd8lLT2YM9qZVOujGg ABDMQa+Q7GU/zptEpNOVogxzN14Fi0/w4vTelj8wS2VX+Fs82ufnP4mNhiGUXEEH ZiSRcLFc94DcoHAY9Id1smWHVHF2bH5VOzbwXAmJFutMkShF0P+ICIHV6cqFIskc gsCumwUlayi8vvOrGPLoBrnmfb3L9z17oAyJ+RIiPf/uoiJqANC1sUtTbDAGZKRB 49A15BUXRyJRlENmBtyNbfFYo4q9iQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:09:25 2026 by rpki-client