$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa File: 88348225-4e15-3a0e-bde2-822861e71616.roa (raw, json) Hash identifier: ml7qsgz/Ox2Klo42K0LIHakCxboTVmt468px5X1Mm80= Subject key identifier: D0:AF:D8:5E:14:3F:6F:A7:20:B3:CA:E0:2A:D9:A2:85:C5:EB:D2:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CFF99902331AD37A6900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 36471 IP address blocks: 209.255.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cf:f9:99:02:33:1a:d3:7a:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=ff865fe9-8db3-4c4c-8ac5-14065e657a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:d2:2d:c7:5b:bc:06:fa:13:aa:c0:54:2a: 85:36:21:e1:b4:d6:84:0d:e8:ba:b2:45:76:53:d6: 6f:bb:a0:06:fb:26:6e:86:8e:54:ba:b6:37:f0:d0: 88:f8:1e:01:4d:c8:a0:5b:3d:f2:c7:10:9e:ac:a3: 70:7e:e2:33:84:15:49:9c:32:3b:44:ad:bc:05:2b: ba:59:9c:3d:ad:af:60:3f:5c:db:42:37:fb:91:4b: 97:03:25:be:b6:01:0b:7d:4c:1e:b8:43:13:5b:5a: de:e9:cf:cd:cd:5b:98:89:00:d6:61:f0:a9:e3:4a: 46:41:e1:bc:fe:44:ed:7e:50:3a:3b:e0:8e:35:8d: 25:6d:05:63:94:6e:b3:ac:20:3f:e6:04:3d:82:22: 0e:e2:68:be:47:51:79:3a:4a:20:74:1e:48:c4:73: 2a:fd:d7:f5:90:16:5e:80:c6:be:31:0c:ad:94:2a: f0:dd:4e:58:29:6d:1c:90:d9:48:98:24:fb:d6:90: 12:ff:d8:3c:b9:32:b8:08:85:5d:ac:91:fc:91:10: 5b:05:ba:07:31:03:7b:af:d0:07:4e:dc:85:a3:a8: fc:60:ce:e8:cf:88:3a:d7:60:25:a8:0f:b8:77:79: a7:f5:db:00:1f:33:2e:fd:f1:1d:cc:5f:26:15:3f: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AF:D8:5E:14:3F:6F:A7:20:B3:CA:E0:2A:D9:A2:85:C5:EB:D2:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:74:a4:c3:8e:cc:9d:77:3f:34:ed:97:bd:77:e7:e8:9b:a1: 6f:13:10:25:dc:a3:1e:9e:4e:58:b3:8a:e4:a3:2c:a7:fb:d2: 53:8a:c6:16:55:10:6a:46:91:32:9a:2a:5e:eb:68:b4:42:6a: 3a:9b:2a:be:0d:9f:52:77:55:08:5b:ba:ea:ca:e9:0a:cf:7e: e7:ae:93:75:6d:c6:7d:7f:54:b2:fe:d6:63:e1:c1:99:82:a3: 1b:8e:62:c3:68:7e:43:f5:b2:10:4d:4e:69:1f:73:d0:08:c5: 0d:f9:8e:dc:45:08:1f:5b:5a:ab:d5:8f:79:6b:c0:ef:66:d7: f2:cb:b9:31:eb:80:5c:90:09:44:43:df:3d:d9:67:c5:95:a1: 6c:b1:c4:63:a7:64:9d:e8:b2:35:f5:65:c9:dc:f8:fd:27:b8: cb:d0:d9:8b:9b:37:36:f3:1b:66:63:d7:d9:e3:19:7b:3b:cc: fc:12:12:ce:cc:28:93:e5:7f:bb:35:19:43:d9:3b:65:5b:35: 04:8a:1a:f0:f1:8a:e4:10:ac:9a:72:d0:0e:e7:73:29:bb:c4: 6c:bc:f1:b6:a8:b9:77:e6:47:f5:8b:a3:10:02:07:ef:a1:7e: 70:a6:4c:25:d5:a7:ae:5c:10:2e:4f:12:eb:39:b5:89:77:1f: 15:89:6a:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysc/5mQIzGtN6aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZmY4NjVmZTktOGRiMy00YzRjLThhYzUtMTQwNjVlNjU3YTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngzSLcdbvAb6E6rAVCqFNiHhtNaEDei6skV2 U9Zvu6AG+yZuho5UurY38NCI+B4BTcigWz3yxxCerKNwfuIzhBVJnDI7RK28BSu6 WZw9ra9gP1zbQjf7kUuXAyW+tgELfUweuEMTW1re6c/NzVuYiQDWYfCp40pGQeG8 /kTtflA6O+CONY0lbQVjlG6zrCA/5gQ9giIO4mi+R1F5OkogdB5IxHMq/df1kBZe gMa+MQytlCrw3U5YKW0ckNlImCT71pAS/9g8uTK4CIVdrJH8kRBbBboHMQN7r9AH TtyFo6j8YM7oz4g612AlqA+4d3mn9dsAHzMu/fEdzF8mFT+lMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCv2F4UP2+nILPK4CrZooXF69IIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODgzNDgyMjUtNGUxNS0z YTBlLWJkZTItODIyODYxZTcxNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ0pMOOzJ13PzTtl7135+iboW8TECXcox6eTliziuSjLKf70lOKxhZV EGpGkTKaKl7raLRCajqbKr4Nn1J3VQhbuurK6QrPfueuk3Vtxn1/VLL+1mPhwZmC oxuOYsNofkP1shBNTmkfc9AIxQ35jtxFCB9bWqvVj3lrwO9m1/LLuTHrgFyQCURD 3z3ZZ8WVoWyxxGOnZJ3osjX1Zcnc+P0nuMvQ2YubNzbzG2Zj19njGXs7zPwSEs7M KJPlf7s1GUPZO2VbNQSKGvDxiuQQrJpy0A7ncym7xGy88baouXfmR/WLoxACB++h fnCmTCXVp65cEC5PEus5tYl3HxWJahc= -----END CERTIFICATE-----Generated at Thu Aug 27 16:09:12 2026 by rpki-client