$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa File: 21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa (raw, json) Hash identifier: 8zbac/imvbbGv3MiJpfv6N5NXqe5wD+mnuVSMzjGDj0= Subject key identifier: D7:72:1E:43:58:80:B9:1C:D7:97:41:50:8D:DF:DB:85:25:6A:23:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1AE959D81F9689CAFF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 209.41.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1a:e9:59:d8:1f:96:89:ca:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=ba51ca50-a852-4ddd-a98f-48a15576e2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:19:d4:1b:c1:e8:fc:b3:b1:54:a1:8d:39: c9:83:90:bd:9f:ce:e8:af:1d:a0:e2:ce:6d:17:aa: e7:6c:b9:8b:36:7b:89:88:af:46:01:e6:32:60:bd: aa:29:87:39:66:b2:cb:2b:74:ca:0a:ee:7e:10:cf: 0d:6b:c5:02:2d:7c:40:9c:26:a5:95:9d:fc:6f:46: 5f:9e:41:51:24:fd:6b:4a:a7:01:98:e1:9a:a8:0f: 33:9e:5e:67:70:0a:84:36:cd:df:58:0a:cc:9e:a8: e2:5e:7e:a7:c6:cb:57:4a:2f:04:ff:55:ad:1f:07: a2:c7:2f:25:6a:c0:8f:5f:f3:67:0a:18:b8:14:53: 5e:1c:f6:b2:5a:c9:d8:b4:e3:12:5d:0f:5e:5c:7f: 98:33:94:9c:b2:fe:57:8d:ef:0b:f6:c8:e8:ed:80: f8:6c:77:54:bf:b1:69:a9:c3:a1:e2:ee:ac:8c:c5: 3a:a3:7d:28:85:96:ce:c5:05:dc:af:4d:98:9e:bb: 45:4c:45:57:b2:d1:8f:c9:32:2d:b4:e7:e4:53:5f: 51:e1:d1:3c:db:b6:df:a2:4b:4f:5d:b1:b2:b6:49: b2:68:0f:60:a3:69:d2:cc:dd:b2:b4:00:3d:8a:61: 20:f9:fc:fa:e0:3e:70:2f:78:a8:dc:be:50:f3:cb: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:72:1E:43:58:80:B9:1C:D7:97:41:50:8D:DF:DB:85:25:6A:23:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.41.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:96:63:6a:36:45:01:d0:eb:fb:dc:22:97:33:06:2a:de:20: 98:9f:54:0a:a1:7b:50:e2:ed:b3:34:11:04:f0:7d:3e:7b:1b: 1f:6b:f9:3e:d9:9f:81:9e:42:d3:f2:08:f9:2a:75:8b:f7:f5: e6:18:6c:67:21:85:75:cf:84:b5:15:f5:01:2f:ab:44:b0:ef: 17:75:eb:b2:8e:e2:ee:ca:22:67:11:3c:0e:b7:71:9b:37:cd: e9:d4:03:83:a4:e0:ee:d4:b5:28:8c:5c:62:11:6b:f8:ff:ba: e3:e0:e2:b8:0e:73:8b:c0:ff:c8:3c:14:bc:ab:bb:b8:79:2e: 79:c9:fa:b9:31:75:b8:19:1e:3e:ff:40:36:62:25:62:c5:96: a9:0c:26:ec:df:fa:66:f0:a5:ca:aa:06:3d:6c:63:4a:30:c6: 82:ca:4d:a2:a5:31:31:6e:e5:99:49:0a:c0:c4:ef:4b:5b:18: 6f:e9:3c:9b:8a:bb:74:5c:55:b1:81:b6:a2:81:48:26:3c:44: 0e:af:bb:16:af:cf:15:41:d0:6f:b4:f8:2f:21:3c:d0:9c:57: c5:42:a9:42:b6:e2:78:ce:36:77:df:21:db:4f:78:1f:48:b3: ae:50:0d:ef:57:ea:98:74:fa:49:9d:dd:4c:ff:78:b4:b3:c3: 9d:da:47:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxrpWdgflonK/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YmE1MWNhNTAtYTg1Mi00ZGRkLWE5OGYtNDhhMTU1NzZlMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1wZ1BvB6PyzsVShjTnJg5C9n87orx2g4s5t F6rnbLmLNnuJiK9GAeYyYL2qKYc5ZrLLK3TKCu5+EM8Na8UCLXxAnCallZ38b0Zf nkFRJP1rSqcBmOGaqA8znl5ncAqENs3fWArMnqjiXn6nxstXSi8E/1WtHweixy8l asCPX/NnChi4FFNeHPayWsnYtOMSXQ9eXH+YM5Scsv5Xje8L9sjo7YD4bHdUv7Fp qcOh4u6sjMU6o30ohZbOxQXcr02YnrtFTEVXstGPyTIttOfkU19R4dE827bfoktP XbGytkmyaA9go2nSzN2ytAA9imEg+fz64D5wL3io3L5Q88uKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdyHkNYgLkc15dBUI3f24UlaiOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE3MTRkMjgtYjc0Ny0z YzI5LTk2NTMtNGZiMGZmYTNhNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0SlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWWY2o2RQHQ6/vcIpczBireIJifVAqhe1Di7bM0EQTwfT57Gx9r+T7Z n4GeQtPyCPkqdYv39eYYbGchhXXPhLUV9QEvq0Sw7xd167KO4u7KImcRPA63cZs3 zenUA4Ok4O7UtSiMXGIRa/j/uuPg4rgOc4vA/8g8FLyru7h5LnnJ+rkxdbgZHj7/ QDZiJWLFlqkMJuzf+mbwpcqqBj1sY0owxoLKTaKlMTFu5ZlJCsDE70tbGG/pPJuK u3RcVbGBtqKBSCY8RA6vuxavzxVB0G+0+C8hPNCcV8VCqUK24njONnffIdtPeB9I s65QDe9X6ph0+kmd3Uz/eLSzw53aRwI= -----END CERTIFICATE-----Generated at Sat Jun 13 06:04:48 2026 by rpki-client