$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/423a77a2-51d9-3cf8-b05f-e6646c8cb327.roa File: 423a77a2-51d9-3cf8-b05f-e6646c8cb327.roa (raw, json) Hash identifier: La9OOcP8eqrrxc/o5dum6l2pXgdFvjyupmp3jL12b2g= Subject key identifier: A8:2D:CB:AC:B6:9F:75:1E:91:20:9F:DE:C3:8C:7A:80:1A:04:19:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6C584FE0DF0A341CE56454C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/423a77a2-51d9-3cf8-b05f-e6646c8cb327.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 209.2.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:4f:e0:df:0a:34:1c:e5:64:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=423b8673-bd36-4f62-9871-f9c896c51344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:18:e3:b4:79:ce:db:d2:96:14:24:ad:bd:72: 94:2e:46:8b:d3:3c:7d:fc:a7:e3:0e:e2:6c:73:47: 28:f8:95:ca:f6:bd:e3:0d:85:97:cf:6e:06:ec:b7: 96:0a:10:32:28:7a:c6:4b:62:88:15:f4:c9:5e:41: 01:2c:d4:bb:1c:da:f3:64:0b:e4:e8:f0:46:e1:15: 63:33:4a:1d:d3:57:b3:14:b3:ee:95:70:e5:3a:91: cb:c6:cb:af:34:b6:dd:01:0d:13:e9:3a:ae:32:f7: 51:26:22:74:d7:c9:c1:e3:74:62:83:c5:07:93:e4: 90:52:76:6d:a9:00:3f:9c:90:f0:3e:7f:f0:f5:61: 78:e2:6b:6b:ed:c7:3d:24:09:d9:e2:2c:dc:d2:2a: a6:cb:69:c7:7f:85:0b:d0:b6:d6:31:41:25:ea:aa: 0e:ad:e7:cc:59:0a:50:34:1b:4b:cd:a6:aa:b7:80: b0:f0:3f:31:5c:bd:1d:47:0a:9f:37:61:bd:03:8a: 7e:bf:a9:b7:ca:4c:4f:0a:47:f8:f7:10:e0:39:e8: ef:65:c0:29:ae:99:2f:15:09:3a:57:f6:cd:c6:37: 8a:d5:b5:7c:e4:bb:8e:cd:42:b9:25:3f:b4:6a:f5: 27:8f:24:99:9a:3b:8a:1c:42:f4:43:8b:4b:f5:5d: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2D:CB:AC:B6:9F:75:1E:91:20:9F:DE:C3:8C:7A:80:1A:04:19:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/423a77a2-51d9-3cf8-b05f-e6646c8cb327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a7:f6:34:ea:6c:08:48:3e:f2:b6:42:f3:0f:14:56:b0:90: f6:84:0f:a7:9d:0e:e8:6a:a8:ca:9f:e8:4d:1e:50:9f:58:39: 95:80:62:92:48:3f:b5:5e:0a:29:11:c3:96:93:59:70:2d:5e: 5d:5a:ee:1c:e9:8e:65:42:84:10:0a:bc:a1:71:f7:06:c5:45: 40:bb:23:f7:8e:ef:d9:81:f1:22:65:2e:6f:43:cb:c7:95:aa: d8:6d:e8:36:e3:a8:4b:5e:f9:0f:c7:ee:0e:aa:5e:a2:dd:d9: 86:0b:7f:b8:a6:8b:5b:21:0f:72:34:b7:5b:10:23:49:58:32: b3:44:84:8f:8a:2d:31:54:bf:89:d3:8f:4d:da:06:b9:da:7f: be:c3:a9:16:61:02:77:ff:6c:fa:7d:59:50:76:c2:4e:33:d2: 61:f1:f0:ee:bd:4a:aa:03:5c:d2:ee:63:cd:eb:0b:cb:59:bf: f9:a8:a4:7b:e4:24:b6:40:ba:85:ef:23:54:49:a3:8e:f7:4e: 9d:17:4f:04:65:c3:8b:80:52:a8:6b:be:79:3c:56:a9:dc:94: f3:bf:64:24:25:79:a5:59:28:83:d5:8f:af:d5:bb:2d:d0:f4: c2:3a:2a:9f:81:d2:e0:89:25:92:54:c5:e9:e7:b0:13:fb:67: 45:b4:88:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWE/g3wo0HOVkVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NDIzYjg2NzMtYmQzNi00ZjYyLTk4NzEtZjljODk2YzUxMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxjjtHnO29KWFCStvXKULkaL0zx9/KfjDuJs c0co+JXK9r3jDYWXz24G7LeWChAyKHrGS2KIFfTJXkEBLNS7HNrzZAvk6PBG4RVj M0od01ezFLPulXDlOpHLxsuvNLbdAQ0T6TquMvdRJiJ018nB43Rig8UHk+SQUnZt qQA/nJDwPn/w9WF44mtr7cc9JAnZ4izc0iqmy2nHf4UL0LbWMUEl6qoOrefMWQpQ NBtLzaaqt4Cw8D8xXL0dRwqfN2G9A4p+v6m3ykxPCkf49xDgOejvZcAprpkvFQk6 V/bNxjeK1bV85LuOzUK5JT+0avUnjySZmjuKHEL0Q4tL9V2DzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgty6y2n3UekSCf3sOMeoAaBBmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDIzYTc3YTItNTFkOS0z Y2Y4LWIwNWYtZTY2NDZjOGNiMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0QIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGen9jTqbAhIPvK2QvMPFFawkPaED6edDuhqqMqf6E0eUJ9YOZWAYpJI P7VeCikRw5aTWXAtXl1a7hzpjmVChBAKvKFx9wbFRUC7I/eO79mB8SJlLm9Dy8eV qtht6DbjqEte+Q/H7g6qXqLd2YYLf7imi1shD3I0t1sQI0lYMrNEhI+KLTFUv4nT j03aBrnaf77DqRZhAnf/bPp9WVB2wk4z0mHx8O69SqoDXNLuY83rC8tZv/mopHvk JLZAuoXvI1RJo473Tp0XTwRlw4uAUqhrvnk8VqnclPO/ZCQleaVZKIPVj6/Vuy3Q 9MI6Kp+B0uCJJZJUxennsBP7Z0W0iII= -----END CERTIFICATE-----Generated at Mon Oct 19 19:43:31 2026 by rpki-client