$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa File: fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa (raw, json) Hash identifier: 4a47anlMUkVxMkOq9kII+nqRYHqlRmbGXD7DUORjSnA= Subject key identifier: 11:86:47:F7:96:2E:5D:27:F8:E6:0A:00:FF:36:C7:9F:E9:37:97:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A78A4F4844603AC74BEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 209.192.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:78:a4:f4:84:46:03:ac:74:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=81104075-62d3-4265-92e9-db2515104093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:90:2d:87:c4:4e:6e:82:7f:ca:16:60:eb: 37:9f:1f:01:df:73:31:3f:9b:17:b4:ca:07:c6:98: 48:b0:a4:62:99:a7:4f:13:f7:4e:76:2d:45:18:87: e3:34:f7:8a:aa:3a:da:13:7b:ff:41:ec:d1:fd:ef: d8:c6:eb:92:07:1e:5f:90:9c:7f:b9:a0:b5:8a:2a: d6:8f:16:d8:f9:14:2a:bb:a8:a6:92:67:8a:28:3c: f8:ff:66:28:e8:13:17:bb:b6:82:c8:6c:ab:f6:99: b4:94:16:9d:f8:22:98:ca:b0:bc:eb:75:4c:28:ed: d1:c0:f5:bc:73:21:1f:5c:67:47:fa:24:63:82:94: 82:d9:13:59:59:00:9a:6d:b0:39:ba:8b:b0:17:3e: 63:f5:c9:81:a1:d2:fb:92:00:a0:f2:56:d6:55:e7: 61:b1:61:75:8c:6d:62:a6:12:dd:21:42:de:2a:b6: a0:81:b4:b3:c2:5b:25:36:10:b1:4a:12:58:3b:cc: ac:b8:49:ae:61:fb:64:f0:f2:20:a5:6b:a7:57:7c: 1b:da:a1:d6:4b:8c:80:d8:6e:0f:9f:2f:f8:bc:f6: 3b:0a:f0:37:04:5d:dd:f0:c3:1a:a0:c8:a8:8f:c4: 0e:3d:72:37:a8:71:3a:17:a9:86:30:cf:ec:19:58: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:86:47:F7:96:2E:5D:27:F8:E6:0A:00:FF:36:C7:9F:E9:37:97:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:82:f2:47:11:80:cd:33:1a:2d:d8:24:e4:fc:2f:69:ad:57: 46:2c:8c:ab:38:98:04:ea:d4:e8:31:cc:a9:62:35:a0:4a:18: d3:af:8e:8f:34:46:7b:ed:1d:f2:0e:cf:23:63:6f:a3:20:0c: cb:12:c3:09:f8:66:a8:d1:6a:a4:35:a6:c3:bf:61:0e:59:dc: 23:79:2c:f5:f7:d6:51:77:6b:ff:a4:4f:8d:76:79:96:17:74: 0e:90:90:62:99:05:fe:5c:1b:0f:8c:08:19:ed:0d:69:18:33: fc:70:f2:17:d9:88:a9:1a:e1:52:23:41:98:a7:46:75:53:30: 2b:2e:7c:d4:f9:bc:ea:2d:9f:65:50:3a:b0:ab:19:02:55:e9: 8f:3e:85:75:7a:a0:03:3e:7a:c7:fe:40:97:b9:49:f3:c3:c4: 6d:46:cc:1d:f0:42:61:71:49:fb:20:9c:7b:66:db:6a:24:81: df:af:65:c2:97:2d:45:33:b8:b1:5b:bb:e4:dd:84:7c:f0:58: e9:c3:d0:6c:ce:b3:57:08:1d:10:50:85:96:5a:e5:a4:1d:7b: da:d3:45:f7:f2:b7:e2:7c:b3:08:c0:ef:0c:18:2a:07:b5:e7: c4:2e:05:58:30:6c:74:a0:7b:10:4b:a0:b7:bf:0a:6d:d7:1b: 48:6d:83:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnik9IRGA6x0vsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODExMDQwNzUtNjJkMy00MjY1LTkyZTktZGIyNTE1MTA0MDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYqQLYfETm6Cf8oWYOs3nx8B33MxP5sXtMoH xphIsKRimadPE/dOdi1FGIfjNPeKqjraE3v/QezR/e/YxuuSBx5fkJx/uaC1iirW jxbY+RQqu6imkmeKKDz4/2Yo6BMXu7aCyGyr9pm0lBad+CKYyrC863VMKO3RwPW8 cyEfXGdH+iRjgpSC2RNZWQCabbA5uouwFz5j9cmBodL7kgCg8lbWVedhsWF1jG1i phLdIULeKraggbSzwlslNhCxShJYO8ysuEmuYftk8PIgpWunV3wb2qHWS4yA2G4P ny/4vPY7CvA3BF3d8MMaoMioj8QOPXI3qHE6F6mGMM/sGVgpzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGGR/eWLl0n+OYKAP82x5/pN5enMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmUxM2E4NzAtMTI1YS0z MzNiLWFhMWMtN2U1YTVkN2Y3ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyC8kcRgM0zGi3YJOT8L2mtV0YsjKs4mATq1OgxzKliNaBKGNOvjo80 RnvtHfIOzyNjb6MgDMsSwwn4ZqjRaqQ1psO/YQ5Z3CN5LPX31lF3a/+kT412eZYX dA6QkGKZBf5cGw+MCBntDWkYM/xw8hfZiKka4VIjQZinRnVTMCsufNT5vOotn2VQ OrCrGQJV6Y8+hXV6oAM+esf+QJe5SfPDxG1GzB3wQmFxSfsgnHtm22okgd+vZcKX LUUzuLFbu+TdhHzwWOnD0GzOs1cIHRBQhZZa5aQde9rTRffyt+J8swjA7wwYKge1 58QuBVgwbHSgexBLoLe/Cm3XG0htgx4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:01 2026 by rpki-client