$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa File: 844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa (raw, json) Hash identifier: dibKW5pombUMldzOnUU1o49Yc243dXlXOCW4BVM5zdM= Subject key identifier: A8:3D:80:F4:F5:2A:3D:74:ED:39:97:A0:0D:98:65:CB:0B:4F:BB:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1F5B2E65D7AD960BAA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 20458 IP address blocks: 216.204.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1f:5b:2e:65:d7:ad:96:0b:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=ffe5ed9d-23e3-4730-94c8-869fc7a9e2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d3:a5:5c:3c:2a:af:47:0d:5c:b6:a3:80:56: be:49:db:a5:88:25:23:e5:6d:64:e4:9f:c8:41:98: 9d:aa:70:0e:ec:01:ce:9f:b4:9c:28:cf:06:d3:60: ed:5e:d3:c0:62:4a:44:05:5d:85:dd:3d:3f:ae:f8: af:62:d3:09:f5:b9:0b:b3:96:39:91:52:8d:80:7a: 76:cc:c7:b6:db:8e:fc:cb:6f:89:22:6f:a2:82:d5: 22:97:73:0b:79:28:ce:4d:99:3c:cc:7d:66:6b:24: 4a:3a:87:b1:c5:3b:1f:c5:24:b2:a9:b6:45:9d:ba: 3c:76:de:26:44:cc:ac:89:26:97:2c:a5:57:25:0b: cf:6b:c9:52:25:d2:4d:19:e7:b1:8a:c7:7c:55:d5: 99:6f:66:c1:29:a1:f4:23:af:8b:49:07:90:3c:24: de:f2:e4:e6:e4:20:7d:f1:75:de:e4:6c:dc:a2:8c: 1c:6e:f4:22:3b:59:1d:ad:cf:df:5a:22:c7:78:bc: c8:23:c6:d9:a4:9d:85:16:ca:dc:f5:da:89:51:37: f7:59:bc:c5:95:15:5a:0f:98:d9:96:b2:d8:e3:b9: 24:fa:ed:7d:23:7a:3e:7d:b1:ec:61:27:90:0a:f6: 2a:ca:29:96:e6:c9:98:32:a4:d0:4e:d6:ad:ad:06: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3D:80:F4:F5:2A:3D:74:ED:39:97:A0:0D:98:65:CB:0B:4F:BB:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.204.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:31:2a:fe:38:73:44:22:4e:9a:21:70:86:f4:2e:f3:4d:a0: 76:6a:e7:b1:a0:a5:f5:ae:bb:ed:1b:2f:94:b4:37:db:31:f9: 9a:c1:82:0d:0f:fa:77:23:63:65:fd:f5:b4:92:7a:86:21:86: 5b:34:c7:8b:02:51:d9:87:f4:11:9e:47:ee:4f:5a:b8:e3:79: b6:fc:15:f2:0a:df:e5:b2:d5:4c:ca:3d:e1:30:35:f3:b8:94: 3d:99:c4:9f:af:e3:89:c7:73:a8:d3:52:8c:5f:06:4f:1a:65: 38:14:1f:8f:e4:d8:f0:79:2d:1c:40:a0:8f:c7:b4:fa:ae:9b: 20:d3:41:1c:f6:b8:78:5d:b0:fb:64:f3:6b:35:a3:bc:71:d8: e9:d6:9a:39:5c:f9:7f:53:9f:da:98:82:9d:54:34:dc:e2:f2: ed:12:49:f2:31:46:c9:f6:b6:09:be:b3:23:83:4a:85:e6:30: 6d:9a:13:cb:67:f8:a8:fd:0c:31:dd:6e:1c:c5:6f:d8:ba:96: 9a:cf:77:3f:8c:fa:ed:90:b6:c7:74:a5:a0:df:c1:16:da:71: 97:b4:35:81:4e:d8:04:51:80:f9:51:d1:67:d2:5c:f0:8b:fd: fe:fc:a1:96:7f:0a:f3:5a:bd:ad:db:b4:b1:60:89:ec:95:b1: c8:1d:10:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTx9bLmXXrZYLqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZmZlNWVkOWQtMjNlMy00NzMwLTk0YzgtODY5ZmM3YTllMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dOlXDwqr0cNXLajgFa+SduliCUj5W1k5J/I QZidqnAO7AHOn7ScKM8G02DtXtPAYkpEBV2F3T0/rvivYtMJ9bkLs5Y5kVKNgHp2 zMe22478y2+JIm+igtUil3MLeSjOTZk8zH1mayRKOoexxTsfxSSyqbZFnbo8dt4m RMysiSaXLKVXJQvPa8lSJdJNGeexisd8VdWZb2bBKaH0I6+LSQeQPCTe8uTm5CB9 8XXe5GzcoowcbvQiO1kdrc/fWiLHeLzII8bZpJ2FFsrc9dqJUTf3WbzFlRVaD5jZ lrLY47kk+u19I3o+fbHsYSeQCvYqyimW5smYMqTQTtatrQbWcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg9gPT1Kj107TmXoA2YZcsLT7tNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ0ZDBiNDItMWYzMC0z ZTI3LWE3M2EtNmE2ZDhmMDRjMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MyTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoxKv44c0QiTpohcIb0LvNNoHZq57GgpfWuu+0bL5S0N9sx+ZrBgg0P +ncjY2X99bSSeoYhhls0x4sCUdmH9BGeR+5PWrjjebb8FfIK3+Wy1UzKPeEwNfO4 lD2ZxJ+v44nHc6jTUoxfBk8aZTgUH4/k2PB5LRxAoI/HtPqumyDTQRz2uHhdsPtk 82s1o7xx2OnWmjlc+X9Tn9qYgp1UNNzi8u0SSfIxRsn2tgm+syODSoXmMG2aE8tn +Kj9DDHdbhzFb9i6lprPdz+M+u2Qtsd0paDfwRbacZe0NYFO2ARRgPlR0WfSXPCL /f78oZZ/CvNava3btLFgieyVscgdEOM= -----END CERTIFICATE-----Generated at Sat Jun 13 19:01:02 2026 by rpki-client