$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd90f217-825c-3ec0-84d2-d22078c2d6c9.roa File: dd90f217-825c-3ec0-84d2-d22078c2d6c9.roa (raw, json) Hash identifier: OGO8qKxF+xY5Vkc5XjGXgwrZ0EznCiyKytPiPLTibwY= Subject key identifier: 5A:20:9D:2C:1A:1C:7E:2C:4E:0D:6F:46:72:77:8D:8F:D9:B7:68:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D67DFF7809DE6BD2785DE25C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd90f217-825c-3ec0-84d2-d22078c2d6c9.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 7029 IP address blocks: 209.165.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f7:80:9d:e6:bd:27:85:de:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=1842c607-28c1-4de9-9fa0-07c8aa0724b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:07:56:85:9e:b5:ad:97:e9:7d:11:c6:e8: 5f:06:c9:82:d0:4b:59:dd:44:df:fc:b6:b3:44:1a: 28:c6:de:46:dd:9b:a5:22:b9:c9:e6:3b:d5:05:41: 4f:b5:f5:ff:aa:79:f0:a9:d1:5c:01:c7:1e:61:89: 97:21:67:b6:14:49:e9:b9:7d:99:ca:57:22:41:af: 52:fc:e5:fd:18:ae:9b:0c:87:f7:62:cd:7d:fa:2c: db:41:39:b9:a8:9e:9f:14:3f:2b:b8:33:82:5d:fd: 47:c5:5d:13:0b:53:0a:fb:93:37:2b:a8:e8:60:b8: 3e:2b:d4:47:83:1a:66:83:3e:36:e8:02:34:83:47: d6:ef:b3:68:61:5b:25:56:a0:bb:2d:c4:7a:64:ce: cc:0a:6b:b5:6a:73:c7:c8:ad:c3:a3:ec:2e:30:32: c6:79:ce:0f:e8:59:e4:06:92:6a:cd:d1:9c:81:90: 23:27:32:9b:42:59:51:65:a9:ea:62:56:1c:c1:74: 66:9b:25:b4:1c:0b:0d:b8:7e:21:fb:67:23:bf:ea: de:d9:50:d1:7c:44:3d:98:65:53:15:0c:fc:05:02: 9b:8c:4b:45:ea:e1:4a:d9:fc:71:64:8a:60:b9:34: 2c:99:8b:88:2a:e8:55:d6:07:52:2b:dc:87:a7:f7: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:20:9D:2C:1A:1C:7E:2C:4E:0D:6F:46:72:77:8D:8F:D9:B7:68:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd90f217-825c-3ec0-84d2-d22078c2d6c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:db:ff:0d:71:ae:92:c9:4c:79:9a:72:90:1d:cf:6e:2b:2c: ad:0c:46:b0:83:c6:51:a8:e9:71:86:6f:74:9a:88:58:0d:d8: eb:51:e8:f0:2c:ed:04:da:75:26:6e:cc:54:9e:cc:dc:92:d7: a5:39:39:54:2c:b4:1c:77:cb:ed:98:5f:f7:c7:2a:ed:45:2b: 0c:06:c2:6f:be:7e:8a:f8:8a:37:14:a6:d8:09:53:55:ea:a2: 8a:d0:11:8e:d1:2e:7a:fd:cc:f2:3d:31:ed:b8:4b:e4:16:ca: 26:0e:f6:38:fd:c2:8c:36:f1:c2:90:18:ef:ef:f7:fc:14:53: a2:fb:d9:9f:e9:06:c9:bd:73:5f:55:0a:0d:c2:b0:bd:a3:35: a3:5b:aa:01:a2:6b:32:d2:6a:b8:80:5b:e7:e4:23:a4:94:0a: 57:10:f4:f2:b7:75:94:ad:a1:60:2f:ab:9d:04:fc:29:ee:ca: 79:8d:ad:e8:e6:aa:4b:c2:ef:7b:96:6b:4e:59:34:6d:4d:14: 6e:e2:f7:3b:2e:8f:64:85:49:56:1e:e5:a0:f1:20:54:7d:b4: 6e:5e:24:e4:99:ee:4d:c8:e5:17:59:3b:cf:79:90:c9:ff:15: 55:1a:24:a5:62:30:9d:64:39:e7:ce:1d:ad:e5:39:47:3c:19: 09:07:c1:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/eAnea9J4XeJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MTg0MmM2MDctMjhjMS00ZGU5LTlmYTAtMDdjOGFhMDcyNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhsHVoWeta2X6X0RxuhfBsmC0EtZ3UTf/Laz RBooxt5G3ZulIrnJ5jvVBUFPtfX/qnnwqdFcAcceYYmXIWe2FEnpuX2ZylciQa9S /OX9GK6bDIf3Ys19+izbQTm5qJ6fFD8ruDOCXf1HxV0TC1MK+5M3K6joYLg+K9RH gxpmgz426AI0g0fW77NoYVslVqC7LcR6ZM7MCmu1anPHyK3Do+wuMDLGec4P6Fnk BpJqzdGcgZAjJzKbQllRZanqYlYcwXRmmyW0HAsNuH4h+2cjv+re2VDRfEQ9mGVT FQz8BQKbjEtF6uFK2fxxZIpguTQsmYuIKuhV1gdSK9yHp/fPNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFognSwaHH4sTg1vRnJ3jY/Zt2iDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGQ5MGYyMTctODI1Yy0z ZWMwLTg0ZDItZDIyMDc4YzJkNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTb/w1xrpLJTHmacpAdz24rLK0MRrCDxlGo6XGGb3SaiFgN2OtR6PAs 7QTadSZuzFSezNyS16U5OVQstBx3y+2YX/fHKu1FKwwGwm++for4ijcUptgJU1Xq oorQEY7RLnr9zPI9Me24S+QWyiYO9jj9wow28cKQGO/v9/wUU6L72Z/pBsm9c19V Cg3CsL2jNaNbqgGiazLSariAW+fkI6SUClcQ9PK3dZStoWAvq50E/CnuynmNrejm qkvC73uWa05ZNG1NFG7i9zsuj2SFSVYe5aDxIFR9tG5eJOSZ7k3I5RdZO895kMn/ FVUaJKViMJ1kOefOHa3lOUc8GQkHwS4= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:25 2026 by rpki-client