$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dcb9aae-991a-368f-9926-ce846d46de90.roa File: 5dcb9aae-991a-368f-9926-ce846d46de90.roa (raw, json) Hash identifier: 2XZ25BNf51vLIxkhz0Jfxn6+piGzR6JYm2sQr5MpKwE= Subject key identifier: 49:4D:00:98:3B:A8:D8:DB:C1:64:ED:99:1D:F8:29:FF:C6:B9:24:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7BC7F42E1931708BD780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dcb9aae-991a-368f-9926-ce846d46de90.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 27338 IP address blocks: 209.192.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7b:c7:f4:2e:19:31:70:8b:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=bcebdb78-fb1b-4996-a7e2-1c372c0feaf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6a:e2:d0:b6:3e:fc:f2:07:9c:47:6e:2c:5d: 26:7a:3f:a3:aa:e2:e8:52:f7:e3:92:2b:42:8a:5f: 68:0e:df:8c:f4:7c:1a:8d:e1:fc:4c:36:04:d7:9e: 0d:ac:9b:42:af:fa:d0:c3:b4:55:28:2f:b1:12:04: ba:8e:60:9d:c4:4e:cd:6d:5c:03:f3:e2:d7:05:fc: 7e:eb:00:b8:a0:dd:ae:c9:33:b2:22:2c:e2:f5:f7: 6d:fe:73:b4:2d:96:aa:83:f8:27:4d:f5:ca:4a:17: 23:d5:d3:02:fc:d3:0c:c0:ca:c4:d2:4c:96:58:bd: 10:93:1f:b6:b3:89:94:f4:9a:f2:7d:82:72:9d:86: 09:9f:05:4c:5d:01:04:4c:41:4c:4b:f0:0b:61:38: c9:37:e6:e1:2f:ad:53:9f:87:2d:f0:d0:07:8d:9a: 2a:4b:91:6f:5e:c2:67:3b:91:79:01:66:52:5e:13: 05:a0:0a:10:8f:74:1d:d5:70:25:62:2e:6f:c9:ad: cd:73:e4:b2:10:93:28:e2:a3:f0:63:29:80:ad:5c: 35:b2:1f:a9:39:bf:1f:74:46:2f:1c:85:c3:3d:f4: fc:4c:29:a9:79:24:10:5d:35:fd:bb:86:cb:5a:58: 10:c5:0f:d3:c0:e1:ab:69:ae:87:fa:62:9c:ef:2d: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4D:00:98:3B:A8:D8:DB:C1:64:ED:99:1D:F8:29:FF:C6:B9:24:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dcb9aae-991a-368f-9926-ce846d46de90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4c:33:3e:bf:67:a9:be:97:6a:f9:57:92:87:6f:c2:c9:8e: b8:e2:86:0c:52:ca:1e:4e:46:50:b6:9a:57:30:7a:c9:7f:6d: ae:8f:94:4a:05:a4:c9:83:f9:c4:58:cd:73:52:40:35:7b:a3: d3:ea:bd:03:3c:ed:72:36:e7:c6:f6:5a:65:76:1c:70:61:ff: 64:89:5c:c7:6b:31:c0:4c:8f:6c:76:fd:35:8f:a2:d3:54:91: f2:17:13:40:52:87:f9:57:51:52:e3:06:4d:c7:0a:71:a9:5b: 88:67:4f:c0:8f:18:2e:25:e8:84:f6:23:17:0a:b9:5c:76:83: 04:76:34:46:0c:dd:ce:06:e0:d1:71:28:de:35:6a:68:f6:2e: f0:2a:45:24:5a:4f:e2:ee:0b:61:59:d5:c4:be:ab:09:7b:9f: 74:31:71:40:4a:14:1c:7f:30:e8:85:2d:3d:d9:44:fe:54:58: b7:93:ae:a8:af:e3:0f:61:c5:54:0f:82:20:93:81:0d:53:e2: 48:55:0f:64:24:dc:b0:62:e6:ff:f0:bf:65:e2:7d:e6:52:36: 5f:ff:08:ed:23:a0:4d:d0:b5:13:81:2c:2c:e2:e8:68:da:89: 80:9e:88:3d:bf:7a:6f:9f:10:94:75:06:bf:65:86:df:93:c0: 9f:43:66:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXvH9C4ZMXCL14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YmNlYmRiNzgtZmIxYi00OTk2LWE3ZTItMWMzNzJjMGZlYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmri0LY+/PIHnEduLF0mej+jquLoUvfjkitC il9oDt+M9HwajeH8TDYE154NrJtCr/rQw7RVKC+xEgS6jmCdxE7NbVwD8+LXBfx+ 6wC4oN2uyTOyIizi9fdt/nO0LZaqg/gnTfXKShcj1dMC/NMMwMrE0kyWWL0Qkx+2 s4mU9JryfYJynYYJnwVMXQEETEFMS/ALYTjJN+bhL61Tn4ct8NAHjZoqS5FvXsJn O5F5AWZSXhMFoAoQj3Qd1XAlYi5vya3Nc+SyEJMo4qPwYymArVw1sh+pOb8fdEYv HIXDPfT8TCmpeSQQXTX9u4bLWlgQxQ/TwOGraa6H+mKc7y3NfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElNAJg7qNjbwWTtmR34Kf/GuSSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRjYjlhYWUtOTkxYS0z NjhmLTk5MjYtY2U4NDZkNDZkZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhMMz6/Z6m+l2r5V5KHb8LJjrjihgxSyh5ORlC2mlcwesl/ba6PlEoF pMmD+cRYzXNSQDV7o9PqvQM87XI258b2WmV2HHBh/2SJXMdrMcBMj2x2/TWPotNU kfIXE0BSh/lXUVLjBk3HCnGpW4hnT8CPGC4l6IT2IxcKuVx2gwR2NEYM3c4G4NFx KN41amj2LvAqRSRaT+LuC2FZ1cS+qwl7n3QxcUBKFBx/MOiFLT3ZRP5UWLeTrqiv 4w9hxVQPgiCTgQ1T4khVD2Qk3LBi5v/wv2XifeZSNl//CO0joE3QtROBLCzi6Gja iYCeiD2/em+fEJR1Br9lht+TwJ9DZnY= -----END CERTIFICATE-----Generated at Tue Oct 13 08:16:04 2026 by rpki-client