$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa File: 5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa (raw, json) Hash identifier: kPSGBgYMVSmXHBbCodDnXHtHyouVNWaaXI5yV5Fg/XM= Subject key identifier: A5:F9:72:65:DD:22:57:1D:16:44:7C:FF:E3:44:5F:F8:03:A4:86:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E2809BD492DCE37B0B3E5AF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 209.2.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:bd:49:2d:ce:37:b0:b3:e5:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=09dda2be-0340-44d1-b163-dd36fcc31f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6d:af:ca:1b:00:1e:0e:39:ad:77:e7:1d:43: dd:5d:0f:7d:c2:f8:d5:93:13:a5:56:86:64:3c:d6: 1c:46:9d:03:60:24:b0:27:c6:db:66:e2:0d:b9:9c: 10:31:36:1b:f7:ea:dc:90:a3:fc:6a:e1:51:db:f3: a4:48:f4:48:ae:81:83:2f:6f:2f:7d:f5:15:99:1b: 39:db:2e:6d:4d:3b:db:7b:69:61:76:d2:84:a1:30: d7:33:41:52:04:a3:f8:91:30:da:3b:69:de:eb:87: 83:e5:20:ca:89:ea:20:39:19:cb:2c:43:9c:65:0a: 0e:08:b7:dc:f7:0c:88:b1:ea:13:3f:4b:96:b3:42: 97:29:91:34:da:08:f2:f4:57:1f:05:28:02:8f:7c: 12:4c:72:59:bc:8d:9e:82:b2:b9:fb:05:af:68:bd: 75:a7:2d:73:51:2c:4c:bd:97:3f:44:2a:4e:c5:b8: 5d:b6:7d:7d:bf:cb:48:fc:19:c0:25:50:70:98:52: 67:63:29:3c:7f:69:7a:ba:6c:cc:46:30:83:a0:3d: 50:4c:7a:c7:b2:2d:c3:49:00:7f:50:5b:91:cc:3b: 79:00:9d:2f:3b:9e:ca:63:ea:2f:12:de:df:47:3a: 7f:08:a4:a6:b4:ad:c5:5c:c5:7e:eb:e9:c4:51:25: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F9:72:65:DD:22:57:1D:16:44:7C:FF:E3:44:5F:F8:03:A4:86:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:23:0d:d5:9b:72:fd:89:78:9a:86:05:69:f3:60:bd:f7:76: 66:5a:8e:3d:8c:11:3c:ed:58:f6:e4:42:d1:05:f0:6d:2c:c5: e8:bd:24:2a:06:f9:2d:6e:e2:b1:a8:19:21:9f:15:f3:fc:b2: d8:9a:e0:e5:83:c4:42:86:53:da:25:88:af:a0:79:8f:84:c8: c0:c9:57:30:96:a8:41:ea:08:34:2e:2f:29:72:6f:87:82:a1: db:2f:98:e4:50:cb:39:98:99:50:42:70:6a:5f:6c:27:9a:be: 29:ed:29:ee:64:d5:9d:97:2a:1f:39:3b:f3:fd:29:60:40:3b: 24:d0:14:02:eb:d0:71:25:d6:ee:ef:2f:df:34:f6:b1:a2:a5: 0b:d7:c4:65:73:a9:46:78:73:39:4b:d0:9b:75:31:15:55:51: 96:b1:ce:9c:7d:9a:65:90:2a:4c:44:02:d7:30:e2:84:9a:a9: c5:20:04:ce:5c:eb:05:8c:34:df:93:d2:6e:30:81:41:14:14: 1e:d4:b9:40:db:0e:77:15:45:67:a6:82:29:82:d4:6c:ca:7a: 9e:42:bf:f4:b4:1d:6c:7f:98:ee:88:b5:e2:6c:b6:9e:9e:ea: 27:11:90:25:84:10:6a:5c:4e:db:2c:e4:65:8d:ba:8c:a3:73: cb:68:2c:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCb1JLc43sLPlrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk MDlkZGEyYmUtMDM0MC00NGQxLWIxNjMtZGQzNmZjYzMxZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW2vyhsAHg45rXfnHUPdXQ99wvjVkxOlVoZk PNYcRp0DYCSwJ8bbZuINuZwQMTYb9+rckKP8auFR2/OkSPRIroGDL28vffUVmRs5 2y5tTTvbe2lhdtKEoTDXM0FSBKP4kTDaO2ne64eD5SDKieogORnLLEOcZQoOCLfc 9wyIseoTP0uWs0KXKZE02gjy9FcfBSgCj3wSTHJZvI2egrK5+wWvaL11py1zUSxM vZc/RCpOxbhdtn19v8tI/BnAJVBwmFJnYyk8f2l6umzMRjCDoD1QTHrHsi3DSQB/ UFuRzDt5AJ0vO57KY+ovEt7fRzp/CKSmtK3FXMV+6+nEUSXbuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX5cmXdIlcdFkR8/+NEX/gDpIYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWEzMmIwOWQtNjE0Yy0z MjNkLTliMDItZDhiZGFkNGZjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcjDdWbcv2JeJqGBWnzYL33dmZajj2METztWPbkQtEF8G0sxei9JCoG +S1u4rGoGSGfFfP8stia4OWDxEKGU9oliK+geY+EyMDJVzCWqEHqCDQuLylyb4eC odsvmORQyzmYmVBCcGpfbCeavintKe5k1Z2XKh85O/P9KWBAOyTQFALr0HEl1u7v L9809rGipQvXxGVzqUZ4czlL0Jt1MRVVUZaxzpx9mmWQKkxEAtcw4oSaqcUgBM5c 6wWMNN+T0m4wgUEUFB7UuUDbDncVRWemgimC1GzKep5Cv/S0HWx/mO6IteJstp6e 6icRkCWEEGpcTtss5GWNuoyjc8toLPo= -----END CERTIFICATE-----Generated at Mon Jul 13 05:50:55 2026 by rpki-client