$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa File: 1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa (raw, json) Hash identifier: St6qMynbB3qPlYA6tf18Fgdv1tiiBcFnj6Siz+zn4lk= Subject key identifier: 2C:AF:35:80:3F:BB:42:0B:68:B3:21:6F:33:69:9C:C3:E1:7A:A6:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E48247C01C1F26CDEAFB0D9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 209.165.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:7c:01:c1:f2:6c:de:af:b0:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=a49b9874-3e5d-4538-a34b-62924585c890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:3c:33:b0:4a:dd:f3:ea:70:f1:2d:69:1c: f2:c4:ed:fa:14:20:c3:ab:2e:99:ef:55:3e:d2:4a: 24:e0:a8:24:d4:49:f4:3d:1e:05:f9:c8:3e:cc:be: 6f:c6:d9:2a:bd:a0:19:bf:4b:cc:c7:6c:eb:44:77: 30:2d:9b:19:c2:c9:e9:b6:5c:f8:49:41:f4:10:fe: bd:11:93:b9:22:7c:75:79:71:79:a1:20:c6:5a:6f: b6:17:05:47:63:98:6a:f4:aa:89:22:0a:0f:90:fc: e9:7f:56:93:2e:29:a1:f8:8e:8b:3b:47:a3:89:7d: ab:8e:c6:ea:1d:da:30:08:5b:c6:76:27:8f:3f:e7: 08:b5:d4:7b:40:19:32:17:72:9f:6f:ac:17:be:09: a4:89:16:9f:04:cc:3d:dc:03:79:9e:61:00:0a:86: b5:02:8a:08:48:e4:f2:88:58:24:cb:c8:0d:e4:b4: 6e:dd:3f:c0:c3:ad:a4:56:70:f7:55:87:e6:b2:0a: 03:8c:78:0d:64:2c:ca:14:55:1d:7f:0a:8c:ae:c4: 34:4f:24:b9:0b:46:3e:ff:10:4e:a9:e6:91:41:64: 3b:e4:6b:c0:4d:c2:d9:e6:c8:7e:a3:57:73:df:a0: fd:cc:b7:53:8f:a0:af:5e:cc:df:e2:c4:93:1b:3c: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AF:35:80:3F:BB:42:0B:68:B3:21:6F:33:69:9C:C3:E1:7A:A6:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddc6366-a9f6-3ab5-83e5-7a7104031ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fd:5d:9c:51:c2:37:6d:01:aa:b5:03:60:13:5d:54:f4:78: 29:87:8c:6f:85:0d:d9:ee:f5:9f:d0:ed:8b:4a:6d:7a:a6:3a: 1d:92:39:60:43:1b:76:2d:5e:3e:cd:f5:6b:6d:e5:57:5d:78: ca:0f:de:6e:a8:93:ce:c6:fd:ac:4b:7d:d8:80:bf:31:30:0c: 60:bd:41:5f:37:ed:6a:3a:35:26:31:ff:4d:ef:2a:a8:78:52: 83:fb:55:3e:b1:fa:ea:52:88:a0:6b:43:b0:3c:7b:db:60:99: 19:a9:7d:83:3e:05:78:7d:e2:c7:c7:da:ce:da:1e:cd:86:e5: a5:a0:ae:c8:a1:c3:9f:8a:05:9b:b3:68:af:75:fa:f7:37:a9: 7b:07:6e:3c:e1:ec:c6:0d:44:04:27:a3:98:de:ec:28:58:01: 46:0f:9f:99:d0:be:b4:06:0c:1b:5d:c2:91:fd:02:a7:3d:77: c1:ab:73:3d:16:90:f0:5b:dc:f6:87:1a:3e:c9:5b:72:c1:e6: 9c:67:cf:a9:0c:59:a5:b8:bb:df:75:07:bf:c0:95:7c:cf:3b: b2:ea:26:d5:03:af:23:45:51:d5:83:f0:ea:c0:18:52:bb:bb: 76:de:e1:1c:3e:f4:ad:c5:b0:4c:e9:4e:20:ba:01:27:e9:25: 36:da:f8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJHwBwfJs3q+w2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk YTQ5Yjk4NzQtM2U1ZC00NTM4LWEzNGItNjI5MjQ1ODVjODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpk8M7BK3fPqcPEtaRzyxO36FCDDqy6Z71U+ 0kok4Kgk1En0PR4F+cg+zL5vxtkqvaAZv0vMx2zrRHcwLZsZwsnptlz4SUH0EP69 EZO5Inx1eXF5oSDGWm+2FwVHY5hq9KqJIgoPkPzpf1aTLimh+I6LO0ejiX2rjsbq HdowCFvGdiePP+cItdR7QBkyF3Kfb6wXvgmkiRafBMw93AN5nmEACoa1AooISOTy iFgky8gN5LRu3T/Aw62kVnD3VYfmsgoDjHgNZCzKFFUdfwqMrsQ0TyS5C0Y+/xBO qeaRQWQ75GvATcLZ5sh+o1dz36D9zLdTj6CvXszf4sSTGzyrRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyvNYA/u0ILaLMhbzNpnMPheqY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRkYzYzNjYtYTlmNi0z YWI1LTgzZTUtN2E3MTA0MDMxZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP9XZxRwjdtAaq1A2ATXVT0eCmHjG+FDdnu9Z/Q7YtKbXqmOh2SOWBD G3YtXj7N9Wtt5VddeMoP3m6ok87G/axLfdiAvzEwDGC9QV837Wo6NSYx/03vKqh4 UoP7VT6x+upSiKBrQ7A8e9tgmRmpfYM+BXh94sfH2s7aHs2G5aWgrsihw5+KBZuz aK91+vc3qXsHbjzh7MYNRAQno5je7ChYAUYPn5nQvrQGDBtdwpH9Aqc9d8Grcz0W kPBb3PaHGj7JW3LB5pxnz6kMWaW4u991B7/AlXzPO7LqJtUDryNFUdWD8OrAGFK7 u3be4Rw+9K3FsEzpTiC6ASfpJTba+Ek= -----END CERTIFICATE-----Generated at Mon Jul 13 05:54:52 2026 by rpki-client