$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e413b458-e8a3-3f16-85f4-de34e87709bf.roa File: e413b458-e8a3-3f16-85f4-de34e87709bf.roa (raw, json) Hash identifier: Z9gyD3quffnGBHmw8ZXlGRCI0KNhRZThphjGtfFvd2k= Subject key identifier: B5:2C:0F:9E:35:84:23:BE:B7:7E:83:93:76:85:BC:37:EE:B0:BB:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C503B5ED4F60574E20E800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e413b458-e8a3-3f16-85f4-de34e87709bf.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.2.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:03:b5:ed:4f:60:57:4e:20:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=6a537b53-984f-42d1-b440-967964b759c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:4c:41:08:6a:58:2a:80:de:7b:c5:fa:f4: 75:ae:5b:ae:ec:d9:4c:e5:09:24:1b:59:b2:96:45: ec:d8:7a:49:32:34:fd:b1:c0:bc:de:d2:31:ea:41: 58:49:10:42:55:e2:84:ca:47:74:1a:3e:91:0d:a2: f6:31:2b:af:a7:d4:28:ec:75:91:a2:44:37:06:d0: 3b:57:6d:73:f7:aa:f1:d4:8e:82:5c:ad:0b:46:dd: 4c:e6:85:13:97:c1:e7:d2:4b:eb:b9:b5:e7:d5:ba: 42:2b:05:cf:5f:25:d1:c4:8a:7f:b0:60:85:1c:9b: 90:46:84:af:6b:68:c0:bb:3c:04:26:ff:10:e5:e3: 94:45:2d:b0:35:d8:29:cc:ff:df:fc:c9:02:c6:84: f8:a4:3d:2f:29:a1:bf:4b:94:69:40:a6:d1:f7:cb: c6:2e:fd:c7:f9:1f:73:ae:81:ec:2f:94:78:eb:4a: 32:d5:3d:c2:59:76:34:43:f9:06:fd:2d:2d:80:ad: a8:54:5c:89:f2:c5:76:46:9a:e9:c2:b9:9c:cd:af: 3e:89:3c:5c:84:46:50:97:24:74:dd:b5:c4:cb:5c: 22:6d:60:36:41:e6:f5:b5:0a:76:b0:f8:a5:d3:a7: 61:86:f0:7a:90:62:ef:99:1a:31:bd:1a:b4:e5:34: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2C:0F:9E:35:84:23:BE:B7:7E:83:93:76:85:BC:37:EE:B0:BB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e413b458-e8a3-3f16-85f4-de34e87709bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9b:30:f3:ba:bc:15:a9:4f:e9:4a:bf:58:91:12:a9:5b:63: 1b:bc:f1:62:14:c7:f1:e2:22:ed:3f:d6:fd:d7:ec:cf:63:41: 71:c2:e5:49:1c:46:5e:f8:42:06:fe:00:36:26:84:ab:ca:60: 80:40:2c:74:8a:c7:b1:e0:4e:c0:d9:f7:d3:ce:c3:25:9f:a3: 97:66:cf:97:ed:42:d8:1b:2e:f9:5e:86:cb:e9:e7:ec:64:46: 8b:1d:b8:dc:d7:e7:b8:25:c0:74:5d:27:64:05:8f:bd:ea:88: ac:12:16:15:5c:55:5c:68:23:79:b1:73:c0:81:e9:33:71:8c: c2:ac:e2:4d:b6:4a:10:c8:73:26:ad:11:fb:bd:1f:7f:06:5f: 56:62:9a:fb:44:ab:ad:e7:22:e6:c3:9d:35:25:47:f2:e7:47: e3:ff:c2:1a:a6:0d:68:93:0d:6f:5b:be:d8:e0:34:90:78:1c: 82:e4:a6:85:7f:e2:18:15:13:89:77:24:fe:5c:7c:d7:86:82: 74:02:31:e6:87:27:9b:95:e7:03:ba:46:21:40:ed:8b:38:d3: 4f:1f:b0:f4:3f:c8:8b:22:07:46:83:31:f7:45:39:08:59:68: 5c:01:6c:5b:b4:2e:a6:d5:79:25:a8:b9:2f:fd:05:86:91:ef: 5e:69:54:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQO17U9gV04g6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NmE1MzdiNTMtOTg0Zi00MmQxLWI0NDAtOTY3OTY0Yjc1OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAtMQQhqWCqA3nvF+vR1rluu7NlM5QkkG1my lkXs2HpJMjT9scC83tIx6kFYSRBCVeKEykd0Gj6RDaL2MSuvp9Qo7HWRokQ3BtA7 V21z96rx1I6CXK0LRt1M5oUTl8Hn0kvrubXn1bpCKwXPXyXRxIp/sGCFHJuQRoSv a2jAuzwEJv8Q5eOURS2wNdgpzP/f/MkCxoT4pD0vKaG/S5RpQKbR98vGLv3H+R9z roHsL5R460oy1T3CWXY0Q/kG/S0tgK2oVFyJ8sV2Rprpwrmcza8+iTxchEZQlyR0 3bXEy1wibWA2Qeb1tQp2sPil06dhhvB6kGLvmRoxvRq05TTt/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUsD541hCO+t36Dk3aFvDfusLvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTQxM2I0NTgtZThhMy0z ZjE2LTg1ZjQtZGUzNGU4NzcwOWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGbMPO6vBWpT+lKv1iREqlbYxu88WIUx/HiIu0/1v3X7M9jQXHC5Ukc Rl74Qgb+ADYmhKvKYIBALHSKx7HgTsDZ99POwyWfo5dmz5ftQtgbLvlehsvp5+xk RosduNzX57glwHRdJ2QFj73qiKwSFhVcVVxoI3mxc8CB6TNxjMKs4k22ShDIcyat Efu9H38GX1ZimvtEq63nIubDnTUlR/LnR+P/whqmDWiTDW9bvtjgNJB4HILkpoV/ 4hgVE4l3JP5cfNeGgnQCMeaHJ5uV5wO6RiFA7Ys4008fsPQ/yIsiB0aDMfdFOQhZ aFwBbFu0LqbVeSWouS/9BYaR715pVBU= -----END CERTIFICATE-----Generated at Thu Mar 26 07:00:53 2026 by rpki-client