$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f6e8455-3669-3fdc-b367-1809444eef20.roa File: 2f6e8455-3669-3fdc-b367-1809444eef20.roa (raw, json) Hash identifier: pKRd0XQgsnD3Uso+v8JP7R4HG31SIGpDhfY2GAU2H+Q= Subject key identifier: 65:AB:69:15:EF:C4:BE:3D:03:2D:93:03:D0:0F:73:3A:45:2B:E4:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1D08C7E78C4A02E1AEF40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f6e8455-3669-3fdc-b367-1809444eef20.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 46783 IP address blocks: 209.255.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:d0:8c:7e:78:c4:a0:2e:1a:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=bc9c77b4-d83f-4ee4-acd8-9c158d89d600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:01:34:0e:9e:ad:a4:bd:f1:6b:51:b9:8f: ed:e8:97:2d:93:3b:b7:13:f5:0c:f5:b9:56:79:bd: c0:9a:86:ae:25:48:fb:ca:f9:f6:2d:80:e1:30:98: 75:78:31:b4:13:0b:fb:2e:ed:42:3f:49:c7:de:f5: 19:e6:bb:b5:d9:df:4e:74:1c:7f:45:40:df:09:09: c0:23:c2:2d:d6:28:40:ad:d0:c9:bb:b2:e0:d7:49: 2f:93:ac:4d:7d:5d:69:95:5c:e6:4d:d3:88:50:11: 61:c3:8a:d7:d2:73:61:21:df:eb:8b:31:de:6f:dc: be:52:33:94:7a:e9:ac:77:23:e4:dc:10:ae:90:59: 27:b8:c8:c9:29:3e:25:d8:de:f9:3c:6a:b6:1d:cf: ee:f0:e8:22:50:be:16:00:c3:74:e8:e6:0b:b3:61: ac:34:fa:47:5d:dd:7a:15:17:55:c0:69:8f:3d:11: 1a:88:15:0f:0c:0d:67:f9:72:d9:16:e1:1f:99:cb: d6:5e:1a:d6:32:41:14:c8:c9:f1:27:5a:cf:1b:46: dd:12:1a:11:93:14:26:78:56:9b:5b:b0:1a:4e:68: 76:c8:95:db:0a:60:3a:9f:60:f8:b9:66:1c:28:c8: b1:2b:09:c2:d0:2d:f4:a5:64:ec:a9:79:cf:46:3b: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:69:15:EF:C4:BE:3D:03:2D:93:03:D0:0F:73:3A:45:2B:E4:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f6e8455-3669-3fdc-b367-1809444eef20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cb:4d:c9:d3:74:71:cf:55:5b:82:fd:ec:1f:f4:5a:23:da: 10:5c:e2:7f:62:75:74:81:64:6f:e8:a6:df:7f:18:ac:81:36: ac:70:8e:5e:b7:cf:5a:c4:97:11:a9:46:73:7b:5a:d9:74:a4: d2:06:08:1e:36:08:b1:1b:94:c7:fe:7a:06:e7:f5:ee:ca:4a: 65:4f:27:9e:df:bf:3c:d9:d0:d8:4b:14:bb:28:93:af:bc:76: 49:17:2a:e6:43:81:e9:f2:9e:78:6e:89:ad:6b:3c:9f:5e:82: 91:46:96:66:53:d1:62:03:11:f5:fb:14:44:68:27:63:d2:71: 71:df:61:bf:1f:0c:78:f5:12:0a:5e:4a:de:2c:da:dc:32:3e: 4e:ea:c0:f4:28:04:bc:f0:ba:c1:30:fb:5e:c9:e4:45:fc:db: 71:d4:90:f5:a3:82:bf:76:c1:9d:63:86:b7:8a:de:64:e4:bf: 5d:31:a6:d8:8a:41:be:73:dd:f2:35:73:13:0a:b6:6e:fa:64: 15:c5:ba:7e:7a:f7:a4:c2:69:d4:6a:39:34:22:a2:91:38:61: 93:11:6f:ce:37:1d:3b:7b:ff:07:2d:76:e8:70:35:bc:3b:12: 79:b7:e5:b5:8b:bf:9e:ff:18:f3:a6:fe:3b:8a:a6:78:78:1a: 37:cc:fa:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysdCMfnjEoC4a70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk YmM5Yzc3YjQtZDgzZi00ZWU0LWFjZDgtOWMxNThkODlkNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2gBNA6eraS98WtRuY/t6Jctkzu3E/UM9blW eb3AmoauJUj7yvn2LYDhMJh1eDG0Ewv7Lu1CP0nH3vUZ5ru12d9OdBx/RUDfCQnA I8It1ihArdDJu7Lg10kvk6xNfV1plVzmTdOIUBFhw4rX0nNhId/rizHeb9y+UjOU eumsdyPk3BCukFknuMjJKT4l2N75PGq2Hc/u8OgiUL4WAMN06OYLs2GsNPpHXd16 FRdVwGmPPREaiBUPDA1n+XLZFuEfmcvWXhrWMkEUyMnxJ1rPG0bdEhoRkxQmeFab W7AaTmh2yJXbCmA6n2D4uWYcKMixKwnC0C30pWTsqXnPRjvfywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWraRXvxL49Ay2TA9APczpFK+SvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY2ZTg0NTUtMzY2OS0z ZmRjLWIzNjctMTgwOTQ0NGVlZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDLTcnTdHHPVVuC/ewf9Foj2hBc4n9idXSBZG/opt9/GKyBNqxwjl63 z1rElxGpRnN7Wtl0pNIGCB42CLEblMf+egbn9e7KSmVPJ57fvzzZ0NhLFLsok6+8 dkkXKuZDgenynnhuia1rPJ9egpFGlmZT0WIDEfX7FERoJ2PScXHfYb8fDHj1Egpe St4s2twyPk7qwPQoBLzwusEw+17J5EX823HUkPWjgr92wZ1jhreK3mTkv10xptiK Qb5z3fI1cxMKtm76ZBXFun5696TCadRqOTQiopE4YZMRb843HTt7/wctduhwNbw7 Enm35bWLv57/GPOm/juKpnh4GjfM+jQ= -----END CERTIFICATE-----Generated at Thu Aug 27 16:09:09 2026 by rpki-client