$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa File: fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa (raw, json) Hash identifier: mDVq50I6nmDum7XSanhyr5AAw7bxLAWsp34ciSeNtoM= Subject key identifier: 04:E3:BC:D0:01:2C:4A:DF:03:72:53:BF:B4:50:9E:1B:07:9B:53:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6EEC2BA7003044922E20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 199.119.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6e:ec:2b:a7:00:30:44:92:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=500039ee-f285-4e00-89e9-bc23d623eafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:c9:76:3a:4b:0e:25:81:af:52:58:92:e3: 75:20:12:1b:b8:3a:73:dc:bf:5f:4b:93:89:b2:6d: 8d:b5:43:39:57:c6:41:bc:5a:0d:33:04:be:b0:ee: e7:6b:07:d3:eb:a1:1e:af:98:5e:f4:f3:28:b2:dd: 6c:b6:2e:a5:2d:75:f2:6d:a3:d8:49:52:85:e5:10: 38:2e:4a:a8:69:f1:55:59:1d:de:64:dd:2e:5e:5a: 90:68:22:f9:18:0c:58:7f:49:2f:79:50:0a:64:d8: 9a:fc:50:8c:e7:b0:7b:a2:1a:62:6c:c5:e9:41:50: 26:40:34:09:db:b1:a2:92:7b:fe:0c:b9:87:da:66: 74:50:22:94:ee:7b:68:26:ac:e8:e1:6c:66:3a:85: b1:c6:17:74:7f:be:ce:d2:b5:d5:db:87:ce:af:0c: e7:31:ee:d6:c0:97:61:06:45:2e:9d:5d:8e:9d:da: 83:cf:97:52:b6:72:f2:ad:a3:25:2d:18:d3:44:f7: 12:1c:b0:07:da:18:1d:21:cf:44:cf:c7:55:23:a0: c9:31:41:ca:ee:79:a8:ac:71:be:7c:e7:a4:49:02: a3:bc:5e:8e:f1:7a:02:3c:ab:57:ca:93:34:a9:5d: 38:49:e5:c0:e7:fd:5d:d4:29:62:09:54:a2:31:da: ad:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E3:BC:D0:01:2C:4A:DF:03:72:53:BF:B4:50:9E:1B:07:9B:53:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.119.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:80:24:a6:5d:b1:4e:37:52:30:71:e1:40:b4:f2:c2:08:b8: 33:cb:b6:6e:ed:d2:3e:29:73:67:81:a2:e9:54:c0:d3:ca:f2: f2:19:64:8b:69:c3:a5:b2:8f:86:9b:2e:c4:48:c2:d1:68:cf: 00:54:28:5c:fd:63:17:c3:d6:60:00:3e:28:cd:6a:ee:7d:b6: 8b:b2:aa:d5:6a:96:24:17:1a:e8:4c:03:ec:a8:8a:c1:af:ea: 84:4f:82:4f:ce:ae:16:0e:f3:91:41:16:31:76:f3:7b:f9:bb: 2c:3a:ff:cd:fe:13:71:a4:09:4c:4f:a0:e2:9f:a0:cd:0e:ee: 4d:06:9e:11:65:17:1c:c8:62:1b:08:54:02:0d:dc:b9:b9:aa: 2a:8c:50:24:f5:8b:1c:4d:84:2b:2e:26:0e:26:20:e3:64:d7: b9:33:e0:44:25:68:1f:10:1e:d8:54:32:6f:c8:f8:27:16:a4: 97:2f:08:6f:c7:10:68:66:33:62:8e:a9:fd:51:89:af:6c:6d: 78:3b:ef:48:06:c2:b6:dc:cf:55:dc:34:85:58:a4:96:b7:b5: ea:0b:89:03:22:03:4d:a4:1c:6c:09:69:40:98:94:42:a3:e3: 4c:fd:73:20:be:6d:4a:97:6b:93:3b:32:19:2f:9c:ae:76:57: d6:b1:69:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCm7sK6cAMESSLiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTAwMDM5ZWUtZjI4NS00ZTAwLTg5ZTktYmMyM2Q2MjNlYWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA3JdjpLDiWBr1JYkuN1IBIbuDpz3L9fS5OJ sm2NtUM5V8ZBvFoNMwS+sO7nawfT66Eer5he9PMost1sti6lLXXybaPYSVKF5RA4 LkqoafFVWR3eZN0uXlqQaCL5GAxYf0kveVAKZNia/FCM57B7ohpibMXpQVAmQDQJ 27Giknv+DLmH2mZ0UCKU7ntoJqzo4WxmOoWxxhd0f77O0rXV24fOrwznMe7WwJdh BkUunV2OndqDz5dStnLyraMlLRjTRPcSHLAH2hgdIc9Ez8dVI6DJMUHK7nmorHG+ fOekSQKjvF6O8XoCPKtXypM0qV04SeXA5/1d1CliCVSiMdqt3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATjvNABLErfA3JTv7RQnhsHm1NsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFiZDlmYmUtM2VmOC0z ZDNkLTlkODEtNzkxZjdhMDU3YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3fwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeAJKZdsU43UjBx4UC08sIIuDPLtm7t0j4pc2eBoulUwNPK8vIZZItp w6Wyj4abLsRIwtFozwBUKFz9YxfD1mAAPijNau59touyqtVqliQXGuhMA+yoisGv 6oRPgk/OrhYO85FBFjF283v5uyw6/83+E3GkCUxPoOKfoM0O7k0GnhFlFxzIYhsI VAIN3Lm5qiqMUCT1ixxNhCsuJg4mIONk17kz4EQlaB8QHthUMm/I+CcWpJcvCG/H EGhmM2KOqf1Ria9sbXg770gGwrbcz1XcNIVYpJa3teoLiQMiA02kHGwJaUCYlEKj 40z9cyC+bUqXa5M7MhkvnK52V9axadU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:51:21 2026 by rpki-client