$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/631944b1-0ce7-35bb-88b7-7dbbbf77fab1.roa File: 631944b1-0ce7-35bb-88b7-7dbbbf77fab1.roa (raw, json) Hash identifier: gvE1TSWfOQtwMmY2kn+LTntGVIRBRajws24bW8Wv7+4= Subject key identifier: 60:D4:9E:B0:34:0D:90:FF:91:D3:4C:20:8A:00:0A:83:E5:74:07:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D954F80C773B54159B410 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/631944b1-0ce7-35bb-88b7-7dbbbf77fab1.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 209.60.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:95:4f:80:c7:73:b5:41:59:b4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8af4c5b0-ee28-4437-b523-06e07c3ba6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:78:a3:2c:e8:1e:3d:68:c8:62:1d:76:f7: 30:df:40:f7:c2:05:e6:6b:95:4b:78:88:fc:82:32: 49:5a:5c:e5:43:8b:52:14:7c:8f:4f:7f:07:6d:2d: 20:51:6f:60:d4:6d:eb:20:c6:bd:05:11:08:91:32: 23:0e:6e:80:c1:cc:92:b8:29:12:1f:55:d6:9d:29: a1:99:eb:8c:03:b2:0a:7a:a7:52:67:e4:82:17:4b: e6:a7:e5:31:72:9b:2d:0f:7f:5c:62:b7:33:7a:e2: f7:23:7a:46:5d:18:d9:fc:e3:09:59:5b:26:b9:18: 59:2b:79:d9:9e:5c:fd:ed:ee:42:7a:6a:52:06:80: 17:47:02:7f:ec:2a:48:bf:92:2c:31:9d:64:07:80: ed:c5:b4:ff:9f:0b:db:f7:7f:c4:cf:8d:0c:06:99: 72:da:3e:83:f9:98:b2:22:5b:ab:4a:10:0b:0e:1f: 4b:89:12:1b:df:a5:4e:b1:c7:f5:cc:3a:58:2c:40: cb:60:c7:05:da:81:4d:46:38:a1:91:a0:09:3f:b3: 0e:05:09:35:90:ed:3b:6d:7b:fa:c2:ef:f0:59:72: 53:a9:e6:7b:62:15:bc:52:2f:13:fe:c1:6d:f9:cd: 43:53:dd:5b:37:4f:55:70:08:53:d1:9c:55:b6:4d: ed:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:9E:B0:34:0D:90:FF:91:D3:4C:20:8A:00:0A:83:E5:74:07:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/631944b1-0ce7-35bb-88b7-7dbbbf77fab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d1:f3:c6:03:8e:67:cf:bb:b2:3d:70:55:05:1d:b2:44:17: 71:9b:13:65:40:4d:bb:fe:de:30:18:1d:00:94:89:52:c6:7c: c7:5b:70:8d:bb:e6:fc:9e:7b:51:7f:fd:d5:5e:51:3d:6f:c9: 63:6b:41:00:c6:e7:d5:1b:0e:55:23:79:2f:7c:f7:6d:d6:95: d2:69:01:80:db:7b:bb:51:d3:c6:f5:d5:36:0b:94:b3:97:01: 14:c7:64:d1:24:3b:23:4d:6a:d7:41:a3:1a:bf:6d:61:10:18: 00:ff:41:cd:2e:fc:3e:ea:ef:d7:99:94:dd:cf:0d:98:e5:22: b3:06:7d:16:15:37:84:8d:20:cd:ca:da:6c:64:58:52:ea:e0: 1a:2d:d8:5e:82:93:cc:45:92:b4:75:ae:3b:ba:66:54:4e:66: 38:f7:24:82:4d:24:9a:be:1b:ff:0d:f3:92:18:7d:15:87:ca: 9a:5a:e4:a4:48:fc:85:98:41:9d:8a:55:2e:28:71:e9:69:52: 9c:b7:99:eb:7f:c7:42:19:4e:ac:5c:b8:ca:41:59:57:c3:c0: 41:db:34:56:70:01:ef:a8:a9:f8:ce:0e:1f:27:d0:67:31:b6: 34:63:39:b6:2f:f9:5c:ca:8d:36:5b:d4:75:eb:0c:49:67:0e: ba:b4:c4:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZVPgMdztUFZtBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OGFmNGM1YjAtZWUyOC00NDM3LWI1MjMtMDZlMDdjM2JhNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywB4oyzoHj1oyGIddvcw30D3wgXma5VLeIj8 gjJJWlzlQ4tSFHyPT38HbS0gUW9g1G3rIMa9BREIkTIjDm6AwcySuCkSH1XWnSmh meuMA7IKeqdSZ+SCF0vmp+UxcpstD39cYrczeuL3I3pGXRjZ/OMJWVsmuRhZK3nZ nlz97e5CempSBoAXRwJ/7CpIv5IsMZ1kB4DtxbT/nwvb93/Ez40MBply2j6D+Ziy IlurShALDh9LiRIb36VOscf1zDpYLEDLYMcF2oFNRjihkaAJP7MOBQk1kO07bXv6 wu/wWXJTqeZ7YhW8Ui8T/sFt+c1DU91bN09VcAhT0ZxVtk3tuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDUnrA0DZD/kdNMIIoACoPldAcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjMxOTQ0YjEtMGNlNy0z NWJiLTg4YjctN2RiYmJmNzdmYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnR88YDjmfPu7I9cFUFHbJEF3GbE2VATbv+3jAYHQCUiVLGfMdbcI27 5vyee1F//dVeUT1vyWNrQQDG59UbDlUjeS98923WldJpAYDbe7tR08b11TYLlLOX ARTHZNEkOyNNatdBoxq/bWEQGAD/Qc0u/D7q79eZlN3PDZjlIrMGfRYVN4SNIM3K 2mxkWFLq4Bot2F6Ck8xFkrR1rju6ZlROZjj3JIJNJJq+G/8N85IYfRWHyppa5KRI /IWYQZ2KVS4ocelpUpy3met/x0IZTqxcuMpBWVfDwEHbNFZwAe+oqfjODh8n0Gcx tjRjObYv+VzKjTZb1HXrDElnDrq0xOk= -----END CERTIFICATE-----Generated at Tue Oct 13 08:18:24 2026 by rpki-client