$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa File: d8204647-1d71-34d9-8c5a-17c50fa10403.roa (raw, json) Hash identifier: rcqQywWAxSFYMyihLHaiZyTDkgKu49FdUMvGJjPafpM= Subject key identifier: F6:97:C6:58:BD:8A:49:71:84:2C:74:54:00:D3:BA:B0:A1:37:92:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7A5B8872077A6CF07F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 36471 IP address blocks: 209.255.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7a:5b:88:72:07:7a:6c:f0:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f79ddddb-c3ef-4be7-9ba7-28dc3b9e241b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:07:47:07:e9:f7:a7:8a:ef:21:67:98:b6: 64:8d:4d:bd:1a:2b:db:bc:5e:20:9f:c0:74:7b:b8: 1f:2e:20:93:c5:b6:69:d1:f3:48:77:a4:03:9e:ed: 3e:9f:b1:1c:b3:9a:fa:77:9c:6a:31:f8:ce:d8:4a: 47:f7:ab:b9:19:79:e6:87:44:d4:e3:98:dc:8c:8e: ea:cb:70:a9:15:2c:6e:de:61:c0:95:18:fc:5a:28: 27:ca:6d:99:27:69:12:1a:79:55:cc:f4:08:fc:17: 8d:89:3b:b4:21:10:cd:e2:2b:af:0f:71:50:0d:5c: be:f5:bd:ae:83:45:d2:18:4e:a9:c9:de:bf:9f:fe: a6:23:28:20:fc:2b:63:fc:24:53:fe:81:9d:c3:f6: 23:44:cd:56:bf:d6:80:37:d1:2d:1d:33:8e:9c:4d: 8e:b3:b9:5a:ba:27:11:f0:fc:94:ba:1e:85:80:43: 24:a4:83:1a:dc:13:c5:81:06:6d:b9:8d:4f:29:c5: 54:f4:61:b1:5a:53:3c:f1:4d:4e:d1:35:24:59:07: c0:68:92:db:04:05:e3:9f:2d:3a:f1:cb:83:5c:30: c1:94:4a:1d:29:63:43:d5:fa:41:02:d5:e4:b6:c7: 47:5e:01:d8:cb:da:b1:da:8c:82:ec:e9:b6:81:f7: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:97:C6:58:BD:8A:49:71:84:2C:74:54:00:D3:BA:B0:A1:37:92:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3b:8a:a7:1f:33:0c:eb:f9:bc:44:4e:9f:0c:be:79:bd:f8: 06:d4:a2:22:22:2f:2d:fd:df:0c:9e:3d:e0:46:96:4f:90:40: af:f9:05:f8:8e:22:0b:12:2f:16:71:02:70:e6:8b:35:59:ab: 79:54:e6:2e:7d:05:e1:dd:b4:62:98:54:fb:10:3f:1d:30:ee: a3:96:94:7e:54:14:1f:e8:cf:18:35:5f:de:a3:63:ad:33:0f: 67:b4:0a:ae:fa:1e:15:cb:9c:3d:50:c0:05:2c:c4:ee:f7:30: e2:aa:5f:2b:50:0e:4f:5d:00:91:ea:38:a4:a2:2f:d0:33:ab: b5:52:22:63:44:b4:39:ac:91:66:f6:e3:ab:55:15:2b:f8:c9: 51:44:5f:ee:f8:be:23:3a:5c:d0:e0:d6:aa:d1:68:72:bd:21: 8a:4f:18:1a:a2:81:6a:49:59:8d:da:43:b6:17:9b:c6:f0:35: 8d:de:8c:a7:a3:fa:09:d2:da:bb:e1:4e:1a:4f:6e:ad:ca:71: 50:cf:3e:71:bc:5b:62:6b:ed:aa:ae:c2:1d:63:b0:8d:cf:ab: f5:a3:c8:61:14:11:6e:0c:12:08:c8:62:24:b6:67:9c:30:48: a3:e9:04:3c:6d:fd:ca:74:15:01:4b:04:7e:f0:51:56:37:3c: 05:16:42:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnpbiHIHemzwfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Zjc5ZGRkZGItYzNlZi00YmU3LTliYTctMjhkYzNiOWUyNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNIHRwfp96eK7yFnmLZkjU29GivbvF4gn8B0 e7gfLiCTxbZp0fNId6QDnu0+n7Ecs5r6d5xqMfjO2EpH96u5GXnmh0TU45jcjI7q y3CpFSxu3mHAlRj8Wignym2ZJ2kSGnlVzPQI/BeNiTu0IRDN4iuvD3FQDVy+9b2u g0XSGE6pyd6/n/6mIygg/Ctj/CRT/oGdw/YjRM1Wv9aAN9EtHTOOnE2Os7lauicR 8PyUuh6FgEMkpIMa3BPFgQZtuY1PKcVU9GGxWlM88U1O0TUkWQfAaJLbBAXjny06 8cuDXDDBlEodKWND1fpBAtXktsdHXgHYy9qx2oyC7Om2gfersQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaXxli9iklxhCx0VADTurChN5LqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDgyMDQ2NDctMWQ3MS0z NGQ5LThjNWEtMTdjNTBmYTEwNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA7iqcfMwzr+bxETp8Mvnm9+AbUoiIiLy393wyePeBGlk+QQK/5BfiO IgsSLxZxAnDmizVZq3lU5i59BeHdtGKYVPsQPx0w7qOWlH5UFB/ozxg1X96jY60z D2e0Cq76HhXLnD1QwAUsxO73MOKqXytQDk9dAJHqOKSiL9Azq7VSImNEtDmskWb2 46tVFSv4yVFEX+74viM6XNDg1qrRaHK9IYpPGBqigWpJWY3aQ7YXm8bwNY3ejKej +gnS2rvhThpPbq3KcVDPPnG8W2Jr7aquwh1jsI3Pq/WjyGEUEW4MEgjIYiS2Z5ww SKPpBDxt/cp0FQFLBH7wUVY3PAUWQlU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:20 2026 by rpki-client