$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa File: 5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa (raw, json) Hash identifier: B5744jts9GXGm9/zaEZG2bvZok7zqHzC0/nhCv6LSlY= Subject key identifier: A7:75:51:BF:23:B0:35:14:B9:43:92:9A:A2:61:82:5A:72:DA:C1:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6C585295B8115364A36D9B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 209.2.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:52:95:b8:11:53:64:a3:6d:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=6d4fa539-80c8-4b67-817f-e3204b37b78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:3e:ff:6e:cc:af:23:63:14:ec:43:a9:29: 9a:e0:60:e0:b1:90:01:7c:c1:8e:1d:7c:e2:be:94: 20:96:a5:79:61:fc:e8:80:be:5a:50:32:01:19:8d: 1f:6f:d4:5e:7c:c3:70:52:ff:98:b9:06:54:0e:5f: e2:6d:41:fb:f2:da:ad:9a:83:48:d2:87:39:01:39: a0:90:49:bf:b6:0a:06:ff:03:74:90:53:13:4f:de: 0a:84:c8:ce:b0:d5:1e:c8:73:d5:c0:32:ba:7e:f6: 4c:48:bf:02:00:57:9c:8c:a7:a9:89:0a:0c:80:58: b6:a3:97:26:ba:74:2f:48:9f:4d:89:87:57:27:ab: 89:fa:f6:49:93:60:15:71:18:19:6e:83:99:cf:a4: 81:d7:f6:a7:9e:f8:d6:76:a8:6e:6a:9c:ee:41:3f: 29:40:3a:46:1f:ba:0c:03:fa:73:cf:0d:48:17:e1: 7c:1b:71:7e:4a:09:69:b3:49:32:74:9f:46:fb:2d: eb:3c:5e:3b:dc:8e:0b:ad:a9:12:ee:f4:92:aa:c4: 9f:ed:59:e9:fc:85:6e:09:91:2d:67:cd:65:82:bb: 34:e9:d7:0f:09:84:97:3a:51:0b:de:ea:a1:89:95: af:df:2a:91:cd:c3:1c:74:2d:12:eb:66:8d:79:f3: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:75:51:BF:23:B0:35:14:B9:43:92:9A:A2:61:82:5A:72:DA:C1:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:80:6c:1a:9d:c6:b4:87:7c:1e:ef:50:4d:4d:f9:7c:c3:8b: 96:84:2c:1a:1b:ec:66:67:e4:f3:b9:b0:40:15:14:9e:33:f4: be:4d:9d:b7:c7:cf:e0:69:44:fe:3c:00:01:bd:7d:7f:b4:78: 9a:06:16:16:78:cb:86:99:21:2f:57:89:33:46:3d:54:e5:f2: c8:ed:23:08:76:c3:a1:a6:ab:63:7c:10:bc:4d:09:fa:11:c5: d8:0e:48:13:cd:e7:52:e0:9b:b6:54:21:77:cd:41:c4:f4:80: b1:a5:b4:34:95:58:cb:6b:4b:86:e8:c6:6d:e0:b2:67:61:4c: c8:12:c1:3f:fd:21:e2:c0:e2:bc:dc:af:49:fb:f7:f0:c1:75: 15:27:5d:6b:24:59:2b:a7:d2:f7:00:61:9b:62:ad:3d:eb:21: 8b:02:99:8f:df:33:c2:f0:4a:82:33:fe:e7:bf:c8:34:3c:41: f3:9b:d3:ce:ac:0b:f1:67:d6:ec:f5:6b:df:9a:b9:ac:19:6b: a0:8d:03:c1:6d:4d:1c:c2:f5:c7:35:7d:23:62:13:ed:31:21: c1:8c:96:46:4e:6d:be:e5:59:32:0b:21:19:72:b2:bc:1c:33: f4:cf:70:8a:15:fb:dc:8c:1e:d5:94:bd:ff:f1:7c:73:b4:f5: cc:d7:15:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWFKVuBFTZKNtm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NmQ0ZmE1MzktODBjOC00YjY3LTgxN2YtZTMyMDRiMzdiNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEU+/27MryNjFOxDqSma4GDgsZABfMGOHXzi vpQglqV5YfzogL5aUDIBGY0fb9RefMNwUv+YuQZUDl/ibUH78tqtmoNI0oc5ATmg kEm/tgoG/wN0kFMTT94KhMjOsNUeyHPVwDK6fvZMSL8CAFecjKepiQoMgFi2o5cm unQvSJ9NiYdXJ6uJ+vZJk2AVcRgZboOZz6SB1/annvjWdqhuapzuQT8pQDpGH7oM A/pzzw1IF+F8G3F+Sglps0kydJ9G+y3rPF473I4LrakS7vSSqsSf7Vnp/IVuCZEt Z81lgrs06dcPCYSXOlEL3uqhiZWv3yqRzcMcdC0S62aNefPWrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd1Ub8jsDUUuUOSmqJhglpy2sGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWEzMmIwOWQtNjE0Yy0z MjNkLTliMDItZDhiZGFkNGZjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKAbBqdxrSHfB7vUE1N+XzDi5aELBob7GZn5PO5sEAVFJ4z9L5NnbfH z+BpRP48AAG9fX+0eJoGFhZ4y4aZIS9XiTNGPVTl8sjtIwh2w6Gmq2N8ELxNCfoR xdgOSBPN51Lgm7ZUIXfNQcT0gLGltDSVWMtrS4boxm3gsmdhTMgSwT/9IeLA4rzc r0n79/DBdRUnXWskWSun0vcAYZtirT3rIYsCmY/fM8LwSoIz/ue/yDQ8QfOb086s C/Fn1uz1a9+auawZa6CNA8FtTRzC9cc1fSNiE+0xIcGMlkZObb7lWTILIRlysrwc M/TPcIoV+9yMHtWUvf/xfHO09czXFS8= -----END CERTIFICATE-----Generated at Wed Oct 14 11:54:38 2026 by rpki-client