$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa File: 1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa (raw, json) Hash identifier: gKk7N5iIjREo/7qc6DSuE9H3yoyfkU3EnLP7OiDRAus= Subject key identifier: F5:78:B4:06:9A:1F:40:12:81:88:64:12:CC:03:E9:7E:46:96:24:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D67DFB2A51CCA322F3447B450 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 7029 IP address blocks: 209.165.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b2:a5:1c:ca:32:2f:34:47:b4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=42b4097f-f7d1-4bb8-bc44-e86095d10127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:7b:29:9d:a7:94:f9:74:ab:a1:f6:a8:21: 5f:d4:61:01:6d:12:3d:bf:da:46:b3:85:28:a2:ee: 6e:84:c5:e8:c0:62:8a:e3:88:c9:e4:4f:4a:57:3a: 13:d6:96:7a:c6:2b:22:fa:b1:80:8a:6d:e9:2e:fb: c9:56:a8:56:a2:69:78:26:e1:b6:4d:13:06:32:56: f4:81:1a:d2:c1:19:11:7a:44:28:a4:55:70:19:28: 5a:7e:4a:a6:e4:54:a4:a0:0e:b1:af:c8:8a:6d:27: 95:dd:74:c1:3e:03:f0:4e:16:5e:38:ae:2d:c0:16: 17:b4:2b:8c:a0:c5:65:40:a0:d6:40:ad:ca:1b:d1: 6d:b2:68:3e:0e:fd:d1:00:83:3f:34:b9:87:98:e3: 36:2a:4b:dd:7f:2a:63:7f:bd:66:a5:aa:b7:57:2e: 16:2a:bf:02:87:58:46:d0:8d:7a:3c:7f:41:03:4b: 82:1e:a7:c5:1f:7f:8f:fb:95:10:95:99:08:62:4c: 0c:2b:8e:a6:57:8c:84:27:92:e3:60:63:aa:56:fb: df:ea:1c:33:e2:f9:79:72:3a:ef:50:14:56:5b:cb: 97:f4:b0:53:21:a9:07:67:32:7b:83:34:fd:46:51: 2d:d8:fd:9a:be:9b:55:a1:d3:b5:f4:f0:c7:3f:fe: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:78:B4:06:9A:1F:40:12:81:88:64:12:CC:03:E9:7E:46:96:24:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:38:01:20:cc:89:ff:00:f0:29:5c:43:be:6c:6a:4e:80:f6: f3:b6:1f:ef:86:87:2f:41:a6:df:f8:af:99:dd:72:14:fe:8f: 61:db:e6:49:17:b0:a4:5f:99:ef:0f:21:3c:f6:29:71:e4:93: b8:b1:8b:02:8e:e5:e7:42:8b:2c:1a:6e:7c:60:0d:c6:d0:0b: f6:d7:3d:c2:56:98:6b:f8:56:c5:78:5d:96:92:61:ed:55:33: ce:ef:7e:b8:84:ad:bb:29:3f:43:f3:e5:41:31:54:10:c0:9d: 37:a2:20:e2:c6:bb:15:fd:39:6f:39:43:4c:c3:d5:5b:7e:63: 60:87:70:f1:c9:a2:79:39:b6:7c:a3:e3:80:a4:5b:5c:12:82: 6b:a7:d7:8f:b5:18:43:91:6c:a2:dd:22:46:d3:51:2f:45:49: 24:79:02:73:ef:d0:17:4d:cd:88:f5:53:fa:e3:90:ec:54:41: d5:ea:34:d5:22:81:4b:2e:3d:6e:1b:cc:a5:6e:8b:c5:78:bc: 3c:29:c6:15:b2:be:71:22:2a:ce:b9:4e:96:ee:e3:dc:f4:19: f3:21:0e:e2:77:5f:21:ef:2f:49:39:d3:99:74:33:b3:fa:b7: 90:ee:41:37:a1:b5:48:42:a4:4f:c0:38:43:56:33:b3:2a:e9: 5b:e6:5a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37KlHMoyLzRHtFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NDJiNDA5N2YtZjdkMS00YmI4LWJjNDQtZTg2MDk1ZDEwMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzft7KZ2nlPl0q6H2qCFf1GEBbRI9v9pGs4Uo ou5uhMXowGKK44jJ5E9KVzoT1pZ6xisi+rGAim3pLvvJVqhWoml4JuG2TRMGMlb0 gRrSwRkRekQopFVwGShafkqm5FSkoA6xr8iKbSeV3XTBPgPwThZeOK4twBYXtCuM oMVlQKDWQK3KG9Ftsmg+Dv3RAIM/NLmHmOM2Kkvdfypjf71mpaq3Vy4WKr8Ch1hG 0I16PH9BA0uCHqfFH3+P+5UQlZkIYkwMK46mV4yEJ5LjYGOqVvvf6hwz4vl5cjrv UBRWW8uX9LBTIakHZzJ7gzT9RlEt2P2avptVodO19PDHP/4SvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPV4tAaaH0ASgYhkEswD6X5GliSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRkYzYzNjYtYTlmNi0z YWI1LTgzZTUtN2E3MTA0MDMxZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA04ASDMif8A8ClcQ75sak6A9vO2H++Ghy9Bpt/4r5ndchT+j2Hb5kkX sKRfme8PITz2KXHkk7ixiwKO5edCiywabnxgDcbQC/bXPcJWmGv4VsV4XZaSYe1V M87vfriErbspP0Pz5UExVBDAnTeiIOLGuxX9OW85Q0zD1Vt+Y2CHcPHJonk5tnyj 44CkW1wSgmun14+1GEORbKLdIkbTUS9FSSR5AnPv0BdNzYj1U/rjkOxUQdXqNNUi gUsuPW4bzKVui8V4vDwpxhWyvnEiKs65Tpbu49z0GfMhDuJ3XyHvL0k505l0M7P6 t5DuQTehtUhCpE/AOENWM7Mq6VvmWsI= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:59 2026 by rpki-client