$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa File: 0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa (raw, json) Hash identifier: pY+Xc8BYrrjDGeEL0T7/M8molkCLsXzDU+PQm9LsWo8= Subject key identifier: 93:F4:1A:02:3E:C9:47:55:A4:36:C4:16:7B:7F:FD:6C:03:DA:C8:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D79306647C6D9CA9B9DF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 209.252.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:79:30:66:47:c6:d9:ca:9b:9d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=f31b907d-7dec-4e7c-919d-08ada16d1798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:1e:d6:0c:b1:74:c8:c2:ba:d8:a5:10:77: 8e:23:57:7d:46:56:4d:aa:66:96:16:72:0b:01:35: 60:cf:75:19:aa:0a:31:ae:cd:4b:79:e4:1e:06:04: 6f:88:c5:ee:c4:a4:ad:2f:23:06:6a:d9:39:4a:97: a5:97:d3:71:42:b9:aa:78:db:4b:ba:72:69:4b:cc: 54:78:cc:8a:08:d6:c0:76:5d:3a:33:0b:21:b4:69: 46:e8:cd:01:0e:6b:27:4a:01:3e:19:a5:2e:c3:dc: 5b:af:1a:a9:df:f6:66:85:09:fc:aa:bb:a9:ca:b8: e2:f5:0d:51:76:02:24:e7:b6:59:84:e1:91:61:59: cc:06:b1:6b:ef:56:f5:98:87:a5:e5:18:e2:f3:bd: 3c:da:5b:ae:32:ef:be:b0:a4:f3:f4:51:bc:4f:6d: c4:13:e7:7d:f4:52:89:e4:a6:ba:ba:a4:df:23:16: b8:00:ef:5b:28:98:1a:fe:77:7e:7d:0e:7e:69:4f: db:81:51:b1:bb:f1:6a:4f:13:84:90:40:15:30:04: 94:bd:fe:ed:9d:52:35:be:1c:41:25:61:62:78:c4: 17:66:0e:92:8a:26:fe:9a:a8:2c:b7:a5:15:00:6b: 91:3a:3e:0f:6d:8b:5b:15:94:7b:2e:ae:c2:a2:73: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F4:1A:02:3E:C9:47:55:A4:36:C4:16:7B:7F:FD:6C:03:DA:C8:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d1:d6:01:67:71:83:ac:4d:4f:dc:2f:32:d9:4a:f8:f5:7f: fc:36:9c:3d:b6:76:9a:3c:7b:ec:46:fe:8d:63:b2:6c:9b:3a: 32:a1:be:7d:a5:e2:ba:6c:f3:90:f9:89:61:4c:2e:2b:5c:7e: 2b:38:f0:98:1e:e9:40:f6:28:a5:a7:9e:b2:0f:9d:7d:83:17: 23:28:b2:cd:d4:18:cd:9e:fa:86:df:a0:79:4c:37:a1:11:4d: e9:94:a6:d2:7f:26:aa:c0:14:a6:14:06:24:3d:2a:67:92:ab: 39:9b:f2:d3:e2:e4:ef:4b:ad:ce:23:a7:54:4f:05:9d:85:46: 74:0b:35:2f:6b:24:33:7d:24:7a:52:7d:11:6b:8a:93:67:41: 52:7c:b6:d5:0e:ee:a4:cd:63:68:e0:36:4c:e1:62:3d:6f:e6: c7:78:d6:f7:ee:1c:ed:dd:da:7a:33:1d:4c:2b:20:6b:a2:ea: 78:1a:40:d6:24:da:3f:fb:44:60:64:b5:ae:2b:c8:82:f2:39: 4e:2d:66:a9:7d:01:4c:09:d5:fc:70:1f:e0:9c:8d:be:8a:57: e5:82:2b:45:73:1e:71:d4:3e:2b:f3:01:9b:06:cc:0b:e1:fa: b0:9e:b9:d7:a1:df:8a:16:b1:0f:18:a9:01:39:5b:2b:8f:d1: 61:36:b4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXkwZkfG2cqbnfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZjMxYjkwN2QtN2RlYy00ZTdjLTkxOWQtMDhhZGExNmQxNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxMe1gyxdMjCutilEHeOI1d9RlZNqmaWFnIL ATVgz3UZqgoxrs1LeeQeBgRviMXuxKStLyMGatk5Spell9NxQrmqeNtLunJpS8xU eMyKCNbAdl06MwshtGlG6M0BDmsnSgE+GaUuw9xbrxqp3/ZmhQn8qrupyrji9Q1R dgIk57ZZhOGRYVnMBrFr71b1mIel5Rji87082luuMu++sKTz9FG8T23EE+d99FKJ 5Ka6uqTfIxa4AO9bKJga/nd+fQ5+aU/bgVGxu/FqTxOEkEAVMASUvf7tnVI1vhxB JWFieMQXZg6Siib+mqgst6UVAGuROj4PbYtbFZR7Lq7ConMXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP0GgI+yUdVpDbEFnt//WwD2siLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGY3Zjk5ZWYtOTkyOC0z YzE3LWJmNWMtY2NjYzk1YTA5ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArR1gFncYOsTU/cLzLZSvj1f/w2nD22dpo8e+xG/o1jsmybOjKhvn2l 4rps85D5iWFMLitcfis48Jge6UD2KKWnnrIPnX2DFyMoss3UGM2e+obfoHlMN6ER TemUptJ/JqrAFKYUBiQ9KmeSqzmb8tPi5O9Lrc4jp1RPBZ2FRnQLNS9rJDN9JHpS fRFripNnQVJ8ttUO7qTNY2jgNkzhYj1v5sd41vfuHO3d2nozHUwrIGui6ngaQNYk 2j/7RGBkta4ryILyOU4tZql9AUwJ1fxwH+Ccjb6KV+WCK0VzHnHUPivzAZsGzAvh +rCeudeh34oWsQ8YqQE5WyuP0WE2tHo= -----END CERTIFICATE-----Generated at Tue Oct 13 18:44:26 2026 by rpki-client