$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97af1e92-cf58-377c-a664-b27a46a70cff.roa File: 97af1e92-cf58-377c-a664-b27a46a70cff.roa (raw, json) Hash identifier: NmwE2JT3hBey0KOX5qOnIPaXKusRwSS3XYaYP3Nll1Y= Subject key identifier: B5:CA:B8:AE:5C:33:F2:C5:E6:BB:BE:82:02:BF:77:08:3B:36:CF:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D4D5A3243AB7CE8A09677D380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97af1e92-cf58-377c-a664-b27a46a70cff.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7029 IP address blocks: 162.40.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:32:43:ab:7c:e8:a0:96:77:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=6e603cd8-00fe-4f56-a6de-632cbee4e2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:49:ba:9b:28:a4:ba:c3:ed:8e:b5:51:55:ce: af:08:13:79:01:c2:34:1a:2f:13:53:b3:01:92:3f: 28:c0:0d:4e:df:de:fb:59:7b:4b:86:2d:ba:18:a9: 17:bd:ef:ff:a7:a9:79:b8:37:c5:16:f2:6b:ef:bd: be:9c:2b:91:20:f1:e7:49:a8:c3:d8:89:25:eb:d0: 7d:cd:d1:a6:b2:0e:82:ca:81:d1:94:05:c9:dc:04: a5:1f:06:d0:ca:10:21:d5:3d:67:f0:39:58:bc:bc: 5f:36:ff:fe:7f:db:dc:45:96:28:13:d0:fb:30:1a: ca:c6:26:4e:29:e7:7c:fc:d1:a2:17:6f:46:f5:5d: 2c:bd:2b:50:9e:5d:bc:60:e6:2e:e3:fe:3b:10:5c: 6d:57:87:43:d6:3e:45:fe:ae:50:d0:59:09:84:17: 4e:9f:81:b9:52:42:7d:13:1a:c0:72:e5:24:6c:3e: ff:2d:6d:6d:fb:f4:90:17:5f:8c:17:9e:f7:cf:03: a7:ba:af:55:f5:2c:cf:52:41:c7:d1:b0:9f:8f:6b: 6b:d6:8d:18:0c:a7:a9:aa:a6:ec:99:11:8e:59:da: d2:4d:13:75:2f:3e:79:94:3b:d9:ab:63:a8:33:15: 7d:06:7c:c5:b1:f8:9f:58:92:08:51:14:8a:fc:e9: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CA:B8:AE:5C:33:F2:C5:E6:BB:BE:82:02:BF:77:08:3B:36:CF:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97af1e92-cf58-377c-a664-b27a46a70cff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e3:3a:3f:df:81:00:ca:62:9c:39:76:96:a2:cc:a3:a0:ec: 90:7c:ca:d7:b7:d1:bf:67:34:9f:71:fe:b4:27:3c:0f:18:d7: 87:b3:8e:98:9b:24:5f:aa:f2:82:85:43:45:e1:ca:d9:a1:be: ba:d3:8c:b0:33:63:68:54:2a:c7:40:30:f9:c3:6d:d0:4b:24: 32:e2:5c:4c:f9:1c:82:80:68:09:94:38:a5:0b:f5:cf:00:ad: 3e:6d:e9:fc:0a:e3:f1:01:34:20:d0:8a:95:df:13:91:4d:46: 42:0c:5e:b7:a3:bd:0e:0a:b5:86:e4:f2:db:85:a8:1a:fa:a3: 89:c8:a7:e9:b7:c7:96:89:2f:7e:30:eb:a5:7c:9b:8b:1a:62: 23:7a:2e:06:3d:2e:2f:1b:e7:f9:77:47:2d:e5:b1:94:0d:df: 84:c8:6c:c3:02:78:32:ee:4c:f9:f8:db:d5:57:df:5c:8a:9a: c0:19:1f:83:6d:89:ff:1f:39:00:28:c9:69:bd:a2:1b:a0:a2: 20:fd:1b:3e:9a:99:06:97:d0:c9:1f:7b:d4:a9:de:6d:f6:1f: b3:11:9c:c8:38:ec:29:25:29:0c:a5:e5:07:e6:32:0b:0a:7f: eb:85:f6:82:09:18:1b:7a:30:82:5a:39:cc:74:6c:af:23:3f: 39:a8:8b:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWjJDq3zooJZ304AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NmU2MDNjZDgtMDBmZS00ZjU2LWE2ZGUtNjMyY2JlZTRlMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0m6myikusPtjrVRVc6vCBN5AcI0Gi8TU7MB kj8owA1O3977WXtLhi26GKkXve//p6l5uDfFFvJr772+nCuRIPHnSajD2Ikl69B9 zdGmsg6CyoHRlAXJ3ASlHwbQyhAh1T1n8DlYvLxfNv/+f9vcRZYoE9D7MBrKxiZO Ked8/NGiF29G9V0svStQnl28YOYu4/47EFxtV4dD1j5F/q5Q0FkJhBdOn4G5UkJ9 ExrAcuUkbD7/LW1t+/SQF1+MF573zwOnuq9V9SzPUkHH0bCfj2tr1o0YDKepqqbs mRGOWdrSTRN1Lz55lDvZq2OoMxV9BnzFsfifWJIIURSK/OmwewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXKuK5cM/LF5ru+ggK/dwg7Ns+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTdhZjFlOTItY2Y1OC0z NzdjLWE2NjQtYjI3YTQ2YTcwY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoijUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPjOj/fgQDKYpw5dpaizKOg7JB8yte30b9nNJ9x/rQnPA8Y14ezjpib JF+q8oKFQ0XhytmhvrrTjLAzY2hUKsdAMPnDbdBLJDLiXEz5HIKAaAmUOKUL9c8A rT5t6fwK4/EBNCDQipXfE5FNRkIMXrejvQ4KtYbk8tuFqBr6o4nIp+m3x5aJL34w 66V8m4saYiN6LgY9Li8b5/l3Ry3lsZQN34TIbMMCeDLuTPn429VX31yKmsAZH4Nt if8fOQAoyWm9ohugoiD9Gz6amQaX0Mkfe9Sp3m32H7MRnMg47CklKQyl5QfmMgsK f+uF9oIJGBt6MIJaOcx0bK8jPzmoixM= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:35 2026 by rpki-client