$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa File: 8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa (raw, json) Hash identifier: xIDEhlefRZVK5Fzi5/i0IzxkIaoqzWd5Rsupde+LJsI= Subject key identifier: 37:9F:B2:00:00:76:E6:CA:59:34:FF:6C:EB:A6:A1:D4:EF:0C:F5:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6C585399593BAF3B4EC865C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 209.2.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:53:99:59:3b:af:3b:4e:c8:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=f20f568c-69b6-4f24-92c1-f716fd0de795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:ff:28:ea:9b:5b:90:24:91:39:a7:64:1c: 3e:09:82:04:c0:5e:93:50:df:d1:c1:a6:4b:49:13: 3b:a3:6e:8e:6b:8e:4b:b9:26:84:c2:3a:c5:f8:a4: 50:37:f7:96:72:ca:24:c5:12:ea:f4:2c:b7:63:4f: 48:b3:f8:a9:a0:cc:dc:63:06:be:ce:57:22:8b:a1: e8:6d:c2:0a:43:7e:18:b7:6c:a8:40:48:d4:21:ff: d0:ac:07:ee:1e:93:85:d5:e2:44:55:22:62:16:89: 69:be:24:3a:a0:92:2a:6c:59:bd:b9:cc:db:8c:3f: d5:10:f1:ee:94:13:2b:2b:1e:8c:eb:b9:cb:b5:3a: c3:59:37:12:31:73:62:3b:e4:89:2f:3e:98:b8:55: 95:8e:0f:6e:00:4c:54:cb:6b:b0:03:88:be:c2:c1: 6b:ce:b1:79:f6:e9:be:7a:a2:cc:75:63:30:bc:3b: 32:4b:af:74:1d:5f:5e:21:8d:58:ec:bb:9a:50:b4: 9d:3a:6b:43:b4:0c:dd:1e:29:bd:1e:54:4f:7e:cf: a2:12:3e:46:d9:3a:72:6a:a6:c2:35:79:4a:b7:46: f2:50:1a:cf:21:0f:f6:86:aa:e8:5f:dc:93:9e:e5: 15:02:12:3d:b0:a1:9e:97:4a:75:15:45:ae:37:57: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9F:B2:00:00:76:E6:CA:59:34:FF:6C:EB:A6:A1:D4:EF:0C:F5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8497dbfe-6078-32f4-9c18-b84c1533c8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f7:cd:83:f8:26:c2:c2:03:fa:15:48:b5:45:78:d2:f0:22: db:b1:5e:62:93:b3:95:59:3c:14:77:a9:06:76:9b:4e:5d:42: a3:2a:b7:ae:6b:b3:2a:23:3e:98:59:36:91:7d:ca:81:32:44: d0:1f:46:4a:5b:62:20:de:59:59:ee:19:44:2a:79:d9:7a:27: 2f:9d:86:bb:22:6e:f5:93:a0:19:17:37:1d:2c:76:86:3b:ee: c4:70:08:7d:d8:64:86:a0:5c:ef:16:0a:66:b7:72:c9:b9:dd: 7e:59:ab:76:67:d9:a1:f9:71:b4:7a:66:31:58:a1:b8:f5:a8: 83:f0:34:e7:80:09:4f:9b:ea:88:b8:40:15:88:50:1c:a2:48: 84:d9:4c:b5:a1:99:4f:b8:86:ea:71:5c:b2:ca:be:68:0d:c6: ee:4f:9e:ae:12:63:2b:ed:f8:b0:84:7e:e2:ef:da:52:4d:85: 83:03:70:83:62:0f:36:24:3c:d7:ef:7b:85:f8:9d:a7:28:06: e5:5b:e5:34:dd:0e:1c:f1:58:d4:b1:df:ef:94:41:82:ee:88: b5:d7:3a:28:70:01:75:59:3f:ff:90:fb:58:66:fd:b6:ab:f6: 9c:fb:5b:a3:db:f0:20:a5:5e:e2:6f:67:ab:62:67:a1:c5:09: 67:a4:d6:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWFOZWTuvO07IZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZjIwZjU2OGMtNjliNi00ZjI0LTkyYzEtZjcxNmZkMGRlNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdz/KOqbW5AkkTmnZBw+CYIEwF6TUN/RwaZL SRM7o26Oa45LuSaEwjrF+KRQN/eWcsokxRLq9Cy3Y09Is/ipoMzcYwa+zlcii6Ho bcIKQ34Yt2yoQEjUIf/QrAfuHpOF1eJEVSJiFolpviQ6oJIqbFm9uczbjD/VEPHu lBMrKx6M67nLtTrDWTcSMXNiO+SJLz6YuFWVjg9uAExUy2uwA4i+wsFrzrF59um+ eqLMdWMwvDsyS690HV9eIY1Y7LuaULSdOmtDtAzdHim9HlRPfs+iEj5G2TpyaqbC NXlKt0byUBrPIQ/2hqroX9yTnuUVAhI9sKGel0p1FUWuN1cz+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDefsgAAdubKWTT/bOumodTvDPUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ5N2RiZmUtNjA3OC0z MmY0LTljMTgtYjg0YzE1MzNjOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT3zYP4JsLCA/oVSLVFeNLwItuxXmKTs5VZPBR3qQZ2m05dQqMqt65r syojPphZNpF9yoEyRNAfRkpbYiDeWVnuGUQqedl6Jy+dhrsibvWToBkXNx0sdoY7 7sRwCH3YZIagXO8WCma3csm53X5Zq3Zn2aH5cbR6ZjFYobj1qIPwNOeACU+b6oi4 QBWIUByiSITZTLWhmU+4hupxXLLKvmgNxu5Pnq4SYyvt+LCEfuLv2lJNhYMDcINi DzYkPNfve4X4nacoBuVb5TTdDhzxWNSx3++UQYLuiLXXOihwAXVZP/+Q+1hm/bar 9pz7W6Pb8CClXuJvZ6tiZ6HFCWek1kI= -----END CERTIFICATE-----Generated at Tue Oct 13 17:46:20 2026 by rpki-client