$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa File: 247e7628-8aa1-3d54-9913-d48b0ed908ec.roa (raw, json) Hash identifier: bVNYZvAz60N7VOjyGFcHkO9jgLqNNKdMcSPFGS/WMNc= Subject key identifier: 6B:CC:C6:47:EB:8C:3B:38:23:86:EC:9E:27:23:81:AB:FB:57:12:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D793BC749BBCEED211332 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 209.252.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:79:3b:c7:49:bb:ce:ed:21:13:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=98f17c3a-0f10-4aac-8f2f-e56e392516a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:d0:9d:ca:18:91:5b:df:be:fc:c3:37:f2: 1b:e7:77:23:ea:3c:8a:b8:05:65:95:b1:27:9c:64: 6a:7f:d0:c3:67:51:7a:26:15:ce:46:b9:8a:cb:09: bc:3e:55:a6:86:b1:cf:2f:af:4a:5f:26:47:75:28: 1e:c4:fc:d0:89:02:a1:85:7f:dd:e3:8c:21:e8:0f: 6d:43:4d:0f:e7:70:02:14:36:d7:d1:8b:7a:23:d6: 9d:c9:9a:51:0f:e8:cd:f3:e8:20:79:39:88:ea:89: 24:98:b7:6a:d8:91:49:3f:b7:ff:6a:2a:34:6c:f7: 5a:f6:e2:40:32:51:08:8d:40:fb:b6:dd:68:e0:fb: c7:73:ba:a2:d3:08:26:35:99:57:b6:14:f8:1c:27: a3:e0:72:29:7f:df:6a:a6:3c:f9:55:a3:24:0f:bb: fa:53:09:e1:f8:65:5f:a6:a8:19:11:4b:34:44:b5: c9:a5:93:42:df:d3:6a:da:ae:89:76:38:c1:82:c5: a1:80:0f:11:27:32:57:b3:1b:1c:af:1e:87:ca:e3: fb:73:4d:c1:0d:1e:66:65:09:ef:83:2c:79:89:29: 00:a9:60:0c:0d:30:b0:34:41:b9:21:97:93:49:ab: fd:33:9b:36:02:74:c6:53:6d:1f:a0:f7:11:23:86: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CC:C6:47:EB:8C:3B:38:23:86:EC:9E:27:23:81:AB:FB:57:12:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7b:3c:6c:b0:b6:42:7c:d0:20:f7:45:60:3d:8e:1c:50:2f: 65:06:68:12:cf:4c:86:9e:ce:6a:15:53:bd:81:66:c8:86:51: 93:2b:4e:67:d6:8e:6d:d9:ca:a8:d7:a8:d9:33:72:56:5a:ba: 71:59:f8:45:5a:3f:3e:85:49:b1:f5:1c:a9:8d:aa:b1:4d:41: 88:c4:bd:a8:d2:61:5c:d8:3b:7b:89:b8:3f:c4:12:b9:0c:82: 9f:a8:57:53:ae:a2:4a:d2:9d:2f:35:51:87:c3:15:85:87:62: 2a:75:ab:e1:9f:4f:cb:8b:40:12:72:37:38:5b:fb:77:e4:06: cf:1c:03:9d:e7:56:b8:2e:83:1a:0b:bd:0b:b3:87:55:2c:77: a1:77:bb:9d:ad:46:b0:f2:cb:45:cf:f8:a2:ee:30:27:64:04: ae:92:03:2f:43:0f:b8:22:11:17:37:1f:76:f5:12:62:ff:02: 8d:8c:04:49:c1:9c:f1:2c:a8:a8:17:17:a5:f6:75:6f:db:3f: 95:af:0d:ea:4d:ea:e4:55:50:a6:0c:7e:4c:08:97:de:8e:60: f7:1f:28:6b:c1:8c:cf:7e:a6:1f:48:e2:d4:6b:3f:03:e5:cd: 9f:56:4f:26:45:01:5a:e7:43:fc:f1:a9:cd:ec:c0:b1:39:3b: ad:66:b2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXk7x0m7zu0hEzIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OThmMTdjM2EtMGYxMC00YWFjLThmMmYtZTU2ZTM5MjUxNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtHQncoYkVvfvvzDN/Ib53cj6jyKuAVllbEn nGRqf9DDZ1F6JhXORrmKywm8PlWmhrHPL69KXyZHdSgexPzQiQKhhX/d44wh6A9t Q00P53ACFDbX0Yt6I9adyZpRD+jN8+ggeTmI6okkmLdq2JFJP7f/aio0bPda9uJA MlEIjUD7tt1o4PvHc7qi0wgmNZlXthT4HCej4HIpf99qpjz5VaMkD7v6Uwnh+GVf pqgZEUs0RLXJpZNC39Nq2q6JdjjBgsWhgA8RJzJXsxscrx6HyuP7c03BDR5mZQnv gyx5iSkAqWAMDTCwNEG5IZeTSav9M5s2AnTGU20foPcRI4YqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvMxkfrjDs4I4bsnicjgav7VxI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQ3ZTc2MjgtOGFhMS0z ZDU0LTk5MTMtZDQ4YjBlZDkwOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG57PGywtkJ80CD3RWA9jhxQL2UGaBLPTIaezmoVU72BZsiGUZMrTmfW jm3ZyqjXqNkzclZaunFZ+EVaPz6FSbH1HKmNqrFNQYjEvajSYVzYO3uJuD/EErkM gp+oV1OuokrSnS81UYfDFYWHYip1q+GfT8uLQBJyNzhb+3fkBs8cA53nVrgugxoL vQuzh1Usd6F3u52tRrDyy0XP+KLuMCdkBK6SAy9DD7giERc3H3b1EmL/Ao2MBEnB nPEsqKgXF6X2dW/bP5WvDepN6uRVUKYMfkwIl96OYPcfKGvBjM9+ph9I4tRrPwPl zZ9WTyZFAVrnQ/zxqc3swLE5O61msuw= -----END CERTIFICATE-----Generated at Wed Oct 14 13:08:38 2026 by rpki-client