$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa File: 8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa (raw, json) Hash identifier: KQ7aO2WFc81h4xj9W/aXGuwACvTHQYEfr9uG5pPGiY0= Subject key identifier: 38:57:31:0C:2D:49:02:2E:FC:44:F5:FD:AA:C9:E5:90:33:DF:78:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D67DFB86FCD2D97E0005A5A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 7029 IP address blocks: 209.165.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b8:6f:cd:2d:97:e0:00:5a:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=7e78e627-8269-41d9-ae69-76f252c39146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0f:87:d1:66:9b:e8:3d:46:f2:23:2c:7f:8a: 17:6d:f4:10:49:0d:4e:35:8f:10:fa:42:05:d8:69: 60:af:af:9f:be:44:7b:82:3d:6e:2a:22:35:91:6c: 50:8f:01:c4:1e:42:bd:50:c9:aa:6a:7d:f7:5b:c8: 1b:11:3e:d7:27:84:d9:17:23:6f:84:eb:dd:b7:40: 81:76:d9:2b:9d:de:24:f2:e3:f3:ae:c4:fd:36:eb: 91:96:fc:7a:95:7e:77:e2:25:eb:b6:6a:e1:99:fa: 2e:b6:e8:e0:35:fe:33:c7:65:f3:ee:c2:8d:bb:65: 70:ab:0c:7d:a3:b9:aa:ea:5d:28:72:a3:ea:cc:01: 9f:66:30:7e:5d:4b:2d:90:e8:e8:30:fc:21:d7:e0: 48:8d:a9:a6:b1:82:91:8f:1a:d0:ea:2e:62:dd:1d: a8:4e:6f:9f:e0:f5:8f:c6:bf:8d:29:f5:12:52:29: da:d9:c5:6e:db:7d:b8:f8:50:26:94:5a:49:62:a8: 3c:3e:bc:9c:c6:56:70:66:f4:6c:5f:ce:1d:12:c4: 4e:8e:3b:62:64:9e:13:2c:83:00:77:1c:17:4f:0e: 88:e8:1a:c7:72:74:28:f0:3e:07:8c:92:3e:fb:59: d0:24:d5:9c:e5:9b:4c:e9:70:f8:a9:c1:6d:32:e7: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:57:31:0C:2D:49:02:2E:FC:44:F5:FD:AA:C9:E5:90:33:DF:78:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:0a:4d:2d:a5:94:08:9a:e8:0d:3a:9f:dc:c0:34:9f:31:e0: de:65:cd:6a:e2:50:0b:44:82:2a:74:c4:76:a0:d5:65:ee:55: 25:8b:76:ff:73:1c:0d:73:2b:67:be:c7:6c:29:b5:9a:c7:d1: cd:c2:b6:b2:fb:da:21:e3:19:51:7d:1f:e4:44:3b:b2:5c:c0: fa:40:eb:95:3a:ec:b1:bd:28:78:c3:0d:ed:20:5f:83:7b:b7: c8:30:49:df:05:6f:85:4d:9d:31:30:75:90:27:ef:66:db:49: 1d:5b:04:20:b1:35:5c:ad:34:1e:21:48:59:be:dd:a6:b4:28: 6c:5b:3e:77:f0:30:b4:f3:4d:83:9c:e3:cd:0c:e8:fa:4b:9d: e1:56:85:d1:3c:86:ad:6e:6a:bf:be:f1:fa:f0:1a:38:b2:d3: 64:81:e8:7b:58:f2:65:55:09:1b:e5:bc:d0:7e:2b:09:79:cf: 52:70:de:9c:3b:20:18:07:20:d3:07:47:f8:2a:1d:c0:dd:e4: 2b:70:b5:12:ca:34:54:df:41:ee:9c:74:3f:4b:a5:80:59:40: e9:58:3f:57:19:3e:0e:67:cd:42:7e:fa:b9:c3:f8:df:22:8c: ac:b0:94:41:b4:6c:d2:b0:78:4b:7c:aa:80:9a:90:fc:1e:f5: fb:9e:68:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37hvzS2X4ABaWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk N2U3OGU2MjctODI2OS00MWQ5LWFlNjktNzZmMjUyYzM5MTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw+H0Wab6D1G8iMsf4oXbfQQSQ1ONY8Q+kIF 2Glgr6+fvkR7gj1uKiI1kWxQjwHEHkK9UMmqan33W8gbET7XJ4TZFyNvhOvdt0CB dtkrnd4k8uPzrsT9NuuRlvx6lX534iXrtmrhmfoutujgNf4zx2Xz7sKNu2Vwqwx9 o7mq6l0ocqPqzAGfZjB+XUstkOjoMPwh1+BIjammsYKRjxrQ6i5i3R2oTm+f4PWP xr+NKfUSUina2cVu2324+FAmlFpJYqg8PrycxlZwZvRsX84dEsROjjtiZJ4TLIMA dxwXTw6I6BrHcnQo8D4HjJI++1nQJNWc5ZtM6XD4qcFtMuc1lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhXMQwtSQIu/ET1/arJ5ZAz33jnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGMyOGNhMzUtNWExNi0z MTdkLTkwY2EtZjU1ZDBjYmZiZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwKTS2llAia6A06n9zANJ8x4N5lzWriUAtEgip0xHag1WXuVSWLdv9z HA1zK2e+x2wptZrH0c3CtrL72iHjGVF9H+REO7JcwPpA65U67LG9KHjDDe0gX4N7 t8gwSd8Fb4VNnTEwdZAn72bbSR1bBCCxNVytNB4hSFm+3aa0KGxbPnfwMLTzTYOc 480M6PpLneFWhdE8hq1uar++8frwGjiy02SB6HtY8mVVCRvlvNB+Kwl5z1Jw3pw7 IBgHINMHR/gqHcDd5CtwtRLKNFTfQe6cdD9LpYBZQOlYP1cZPg5nzUJ++rnD+N8i jKywlEG0bNKweEt8qoCakPwe9fueaLs= -----END CERTIFICATE-----Generated at Mon Apr 13 11:42:02 2026 by rpki-client