$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ea35caf-c469-329a-a15c-789b0c207c34.roa File: 6ea35caf-c469-329a-a15c-789b0c207c34.roa (raw, json) Hash identifier: rzNuHHgRA7s2Ii5bExEtFe1DO+cM/amAQdjWGJSJsMo= Subject key identifier: 13:13:24:D0:6A:FE:63:51:F3:59:D6:64:7D:58:BE:2F:86:E4:44:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6C5835821A29C4ECEFD3EB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ea35caf-c469-329a-a15c-789b0c207c34.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 209.2.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:35:82:1a:29:c4:ec:ef:d3:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=6e37124a-0355-476a-bfa9-4c2733a4a512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:b3:96:79:e5:e0:a3:58:38:5c:a4:bf:5d: 75:bc:9e:d6:50:bd:62:78:8a:1c:e3:72:f0:71:e8: fd:4f:de:66:c7:f3:c1:f8:f3:a1:25:09:de:0f:e7: a0:20:7d:5a:22:38:cf:b7:32:73:45:71:3b:7e:82: 65:e1:80:ab:9e:85:d0:70:88:41:af:7f:37:20:68: aa:05:50:33:a8:38:31:57:32:22:9f:37:0d:17:69: 62:97:41:57:30:8e:31:7b:fd:70:f4:85:b0:0f:db: be:78:3a:e6:87:a5:68:d9:db:1b:e2:60:f5:e3:b3: 8b:98:22:8e:b8:6a:fb:07:b8:25:91:2d:04:7d:01: 97:93:fa:b9:bc:79:09:1a:eb:82:a4:d1:f8:d7:8b: 25:d5:0a:c7:05:37:de:c8:bb:05:3b:11:11:84:c4: 96:92:d8:36:8b:12:9f:7a:a6:18:0b:98:48:95:cb: 9b:f9:f9:66:11:f7:ea:c8:e8:e9:8e:e3:62:7d:92: a7:7f:54:0f:ae:6a:bb:45:4b:cd:a4:28:f4:bd:99: 5a:b9:24:4e:6a:bb:82:f4:9f:27:6b:2d:7c:b7:3f: 78:46:94:05:95:28:fd:01:93:7b:2f:05:35:0c:87: a3:a1:1d:80:bc:49:6e:0c:e0:b4:cb:d5:68:d8:4c: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:13:24:D0:6A:FE:63:51:F3:59:D6:64:7D:58:BE:2F:86:E4:44:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ea35caf-c469-329a-a15c-789b0c207c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:de:1c:38:25:64:d5:b6:f8:e8:bf:bf:82:a1:3e:dd:bb:18: c1:4d:d7:62:7a:51:bd:60:3d:71:81:95:d6:79:0c:e9:66:ba: 20:22:43:8f:db:53:83:3a:54:48:2c:48:b3:02:3a:1b:ca:6e: ba:d2:ce:3c:db:84:f0:ae:72:bd:97:95:b0:10:b1:38:e9:46: 9b:8f:07:bf:00:55:7e:73:e9:4b:6b:b6:f5:f7:62:84:b7:a5: e8:15:8a:0a:a7:f2:91:d0:fa:1b:fc:f9:d4:7c:9b:8d:e2:74: 6d:e5:13:49:0a:8a:b6:b7:7e:63:b9:14:c5:da:32:fe:19:44: 3b:7e:8d:37:a8:87:c0:6a:36:b1:a3:26:4f:f5:04:c2:dc:5c: df:54:5c:08:9e:8f:0f:21:c0:b9:08:37:98:7b:88:97:a1:54: 0e:92:37:2d:57:06:24:05:16:d8:3c:6d:b2:05:cc:a4:a3:be: 04:ce:b8:3d:65:6d:60:ba:9d:8a:3d:7a:57:48:50:05:42:c4: e9:21:66:bf:0c:a6:1e:f6:28:4f:e0:a0:83:41:7e:36:5d:3a: c0:af:93:de:e0:50:d6:f6:a2:a9:2e:40:b4:ba:e3:a7:1f:b0: 5d:a0:19:25:3d:8f:bc:e9:bd:b1:e8:81:65:cb:e0:ad:7b:cf: d4:f7:65:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDWCGinE7O/T6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NmUzNzEyNGEtMDM1NS00NzZhLWJmYTktNGMyNzMzYTRhNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx96zlnnl4KNYOFykv111vJ7WUL1ieIoc43Lw cej9T95mx/PB+POhJQneD+egIH1aIjjPtzJzRXE7foJl4YCrnoXQcIhBr383IGiq BVAzqDgxVzIinzcNF2lil0FXMI4xe/1w9IWwD9u+eDrmh6Vo2dsb4mD147OLmCKO uGr7B7glkS0EfQGXk/q5vHkJGuuCpNH414sl1QrHBTfeyLsFOxERhMSWktg2ixKf eqYYC5hIlcub+flmEffqyOjpjuNifZKnf1QPrmq7RUvNpCj0vZlauSROaruC9J8n ay18tz94RpQFlSj9AZN7LwU1DIejoR2AvEluDOC0y9Vo2EzWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMTJNBq/mNR81nWZH1Yvi+G5EQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmVhMzVjYWYtYzQ2OS0z MjlhLWExNWMtNzg5YjBjMjA3YzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTeHDglZNW2+Oi/v4KhPt27GMFN12J6Ub1gPXGBldZ5DOlmuiAiQ4/b U4M6VEgsSLMCOhvKbrrSzjzbhPCucr2XlbAQsTjpRpuPB78AVX5z6UtrtvX3YoS3 pegVigqn8pHQ+hv8+dR8m43idG3lE0kKira3fmO5FMXaMv4ZRDt+jTeoh8BqNrGj Jk/1BMLcXN9UXAiejw8hwLkIN5h7iJehVA6SNy1XBiQFFtg8bbIFzKSjvgTOuD1l bWC6nYo9eldIUAVCxOkhZr8Mph72KE/goINBfjZdOsCvk97gUNb2oqkuQLS646cf sF2gGSU9j7zpvbHogWXL4K17z9T3Zaw= -----END CERTIFICATE-----Generated at Tue Oct 13 17:43:19 2026 by rpki-client