$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa File: 21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa (raw, json) Hash identifier: qKG9JbuG5+VwRw/LTTRmze7bcgBO/mkKdO4yGyrIaK4= Subject key identifier: 9A:94:42:95:3E:A7:32:9C:E1:51:7B:2A:F8:A7:AB:7A:FC:AE:89:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E8A7CD3DF4617F84DF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 209.41.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e8:a7:cd:3d:f4:61:7f:84:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=594ad321-2fce-4c9d-89c3-30ca5bb56897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:49:24:7f:f9:5f:90:a7:02:3b:26:65:8d: f2:c7:9d:84:c3:1a:4e:52:19:01:bc:54:d4:f3:69: 1b:2d:a2:2d:c7:46:3e:c2:95:ca:ea:fe:fc:c3:b2: e7:29:6a:3f:9d:34:be:c7:4b:2f:ca:cc:37:76:69: cf:f9:72:56:ea:26:bb:79:c2:7b:c4:d0:ea:7c:a4: 6a:cc:06:ca:80:b6:8f:46:73:70:e7:b0:bf:dc:54: 0f:af:38:fb:9d:97:12:bc:0d:b0:80:0c:28:40:e7: 5c:fd:33:53:88:46:40:2f:17:a2:b2:5b:9e:46:3f: 65:09:b0:ef:40:ca:66:be:99:f6:db:6b:0f:be:aa: 5e:4c:0e:52:ae:ae:0b:0b:ab:3c:94:ac:e8:6f:05: 95:47:22:4e:3b:05:b9:63:df:1c:61:68:94:68:be: 0e:89:6e:b0:ff:c7:67:a0:b4:d4:b7:64:4b:86:01: f2:79:0b:26:a3:c2:d5:c8:b2:ad:7b:e6:05:22:2b: 94:67:91:e9:16:e7:1f:c6:1b:73:75:61:3f:c6:13: e9:12:a6:d9:97:ec:0f:d1:65:a8:32:f3:52:95:b4: 33:a9:41:1e:55:47:88:51:73:7c:1d:e2:ce:fc:f6: 38:b2:e2:80:9c:9f:d5:92:16:fe:22:82:84:d5:7b: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:94:42:95:3E:A7:32:9C:E1:51:7B:2A:F8:A7:AB:7A:FC:AE:89:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.41.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b3:ee:c1:6a:ce:88:29:18:fe:0e:bd:99:e1:31:6a:d7:87: fa:e8:7c:bc:1c:2c:2f:a3:77:89:17:4d:3f:36:22:7d:a1:30: 70:16:87:e3:3e:24:be:4e:2e:ea:02:9f:e9:25:64:da:d5:51: 31:88:98:2a:32:6d:ae:9f:fd:ec:9d:20:00:eb:b9:53:61:a8: f0:6c:5a:5d:bf:0e:3f:ff:6e:9c:ff:c5:8c:95:35:a0:d1:bd: 39:c8:8e:fd:bd:44:22:a5:05:26:ff:76:ff:4a:e3:6e:bc:4b: b9:b8:94:e2:e2:36:cb:b3:ec:ab:d2:f7:34:a4:b6:2b:1f:34: 2a:0f:b6:fb:89:2f:dc:8b:e5:4c:67:b9:9f:ae:42:01:a3:0d: 05:12:27:88:e5:34:92:f4:b2:aa:2e:f6:ef:4b:08:1b:dc:fc: 61:d2:5b:4f:96:d8:90:b4:6c:a7:42:a3:95:ff:4f:62:79:c4: a1:59:08:ed:f6:78:c4:f6:fb:5b:09:b2:23:02:86:21:21:de: 4c:1c:0e:e7:1a:f0:59:ff:1d:89:ae:0a:4c:61:b6:1b:db:35: a6:6d:4c:6a:af:3b:4b:c9:20:3d:d9:db:d9:5e:fb:70:2d:e9: 6b:2b:fa:1b:0c:6b:5b:ae:02:05:62:7b:81:c7:3f:9a:67:1b: ba:83:29:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseinzT30YX+E34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NTk0YWQzMjEtMmZjZS00YzlkLTg5YzMtMzBjYTViYjU2ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzRJJH/5X5CnAjsmZY3yx52EwxpOUhkBvFTU 82kbLaItx0Y+wpXK6v78w7LnKWo/nTS+x0svysw3dmnP+XJW6ia7ecJ7xNDqfKRq zAbKgLaPRnNw57C/3FQPrzj7nZcSvA2wgAwoQOdc/TNTiEZALxeislueRj9lCbDv QMpmvpn222sPvqpeTA5Srq4LC6s8lKzobwWVRyJOOwW5Y98cYWiUaL4OiW6w/8dn oLTUt2RLhgHyeQsmo8LVyLKte+YFIiuUZ5HpFucfxhtzdWE/xhPpEqbZl+wP0WWo MvNSlbQzqUEeVUeIUXN8HeLO/PY4suKAnJ/Vkhb+IoKE1XtEfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqUQpU+pzKc4VF7Kvinq3r8romVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE3MTRkMjgtYjc0Ny0z YzI5LTk2NTMtNGZiMGZmYTNhNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0SlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOz7sFqzogpGP4OvZnhMWrXh/rofLwcLC+jd4kXTT82In2hMHAWh+M+ JL5OLuoCn+klZNrVUTGImCoyba6f/eydIADruVNhqPBsWl2/Dj//bpz/xYyVNaDR vTnIjv29RCKlBSb/dv9K4268S7m4lOLiNsuz7KvS9zSktisfNCoPtvuJL9yL5Uxn uZ+uQgGjDQUSJ4jlNJL0sqou9u9LCBvc/GHSW0+W2JC0bKdCo5X/T2J5xKFZCO32 eMT2+1sJsiMChiEh3kwcDuca8Fn/HYmuCkxhthvbNaZtTGqvO0vJID3Z29le+3At 6Wsr+hsMa1uuAgVie4HHP5pnG7qDKVo= -----END CERTIFICATE-----Generated at Thu Aug 27 12:30:28 2026 by rpki-client