$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa File: 8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa (raw, json) Hash identifier: MzBkE7emrWgufgsf5d3u2sYhc0ffL14HGJTbW1sJd9s= Subject key identifier: 2A:55:C1:CC:87:F9:33:1D:9C:0E:6E:54:C5:9F:27:8B:7E:14:FC:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EEA874E01D537D49A01D52C60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 209.165.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:4e:01:d5:37:d4:9a:01:d5:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=bd3dd7a3-45e4-45b4-905b-fe3ac5cb87ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5e:42:50:a9:47:72:7b:6e:c1:55:1e:6b:f3: c0:e1:ac:cd:0c:f4:50:af:dc:64:2c:ab:d4:dc:37: 8f:35:58:27:7f:07:d5:d5:a0:10:4c:02:99:29:05: c1:44:ce:5b:3b:0f:08:50:01:03:fd:3a:7e:de:cb: 27:e1:8a:32:55:07:8d:49:88:d6:41:29:1c:db:2a: 47:dc:ab:17:53:ce:a0:9d:a2:d3:58:34:c2:69:f8: 90:3a:90:ce:d6:04:ba:5b:2c:99:75:0e:35:dc:4a: 62:4f:e6:4c:a2:43:94:c3:84:00:2c:46:d3:f2:f8: ee:92:d4:c3:99:3b:5b:88:50:5c:29:f2:48:31:77: c2:67:c0:b6:5f:38:33:fc:c3:b8:bf:81:45:2c:a4: b2:4e:43:e6:b2:ac:5a:26:7e:e3:29:f8:18:c8:d4: e7:fa:b5:9d:f8:bb:0a:f7:8f:20:f9:4f:f7:df:d0: 8f:99:67:3e:c7:4a:7b:20:9f:06:cc:8d:34:6c:1e: 6a:14:f1:58:c7:51:3f:81:7a:69:a3:7d:b1:f8:7e: 17:35:f9:22:30:33:81:6b:91:c5:f0:28:62:6c:8b: a6:bc:c9:23:69:32:51:a1:36:a5:de:87:1c:72:e5: c4:71:ac:ab:ac:86:c3:c2:59:6e:cd:11:87:c0:41: 83:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:55:C1:CC:87:F9:33:1D:9C:0E:6E:54:C5:9F:27:8B:7E:14:FC:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c28ca35-5a16-317d-90ca-f55d0cbfbdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:54:9f:59:f1:e8:2a:ea:81:b7:03:0c:ea:b4:39:be:2c:cb: 47:23:73:9d:ca:ef:2f:60:e1:76:c1:21:15:e5:fd:28:e9:10: 89:81:9d:6e:72:a1:81:2e:e0:6b:fd:9d:13:39:01:0e:54:cb: fa:5b:42:4a:47:45:37:ef:39:47:d5:e0:c3:74:08:d6:40:c5: cc:7d:a0:69:e5:74:55:79:de:d4:fa:ff:3c:63:48:49:19:93: bc:19:06:46:36:fd:b1:c0:e6:2c:53:b6:7c:21:84:e0:e3:02: 34:94:2e:82:59:cd:22:25:ab:1f:d6:7b:2c:23:ce:44:ab:f5: d6:d8:be:a2:7e:50:73:3d:ba:08:84:de:bb:b1:3b:a1:03:31: e3:cf:80:7c:5a:d8:8a:f8:37:16:c3:2a:91:ed:a0:d6:56:d1: fb:74:9c:13:85:d8:9b:0b:e5:31:1a:fa:49:2a:df:58:3a:02: ec:38:40:ea:1b:4a:0d:ec:3e:97:eb:41:b3:fa:94:4d:f9:2d: 19:26:44:db:ec:a3:4d:08:a2:e6:2e:95:e5:64:ae:f7:d3:55: 17:95:85:49:3e:e7:09:06:4f:0e:4c:d8:2a:91:78:aa:4e:b7: 02:5b:eb:97:47:ab:f5:af:b5:01:99:0a:c3:7c:bf:7e:9a:5b: d4:a8:05:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh04B1TfUmgHVLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YmQzZGQ3YTMtNDVlNC00NWI0LTkwNWItZmUzYWM1Y2I4N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V5CUKlHcntuwVUea/PA4azNDPRQr9xkLKvU 3DePNVgnfwfV1aAQTAKZKQXBRM5bOw8IUAED/Tp+3ssn4YoyVQeNSYjWQSkc2ypH 3KsXU86gnaLTWDTCafiQOpDO1gS6WyyZdQ413EpiT+ZMokOUw4QALEbT8vjuktTD mTtbiFBcKfJIMXfCZ8C2Xzgz/MO4v4FFLKSyTkPmsqxaJn7jKfgYyNTn+rWd+LsK 948g+U/339CPmWc+x0p7IJ8GzI00bB5qFPFYx1E/gXppo32x+H4XNfkiMDOBa5HF 8ChibIumvMkjaTJRoTal3occcuXEcayrrIbDwlluzRGHwEGDXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpVwcyH+TMdnA5uVMWfJ4t+FPwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGMyOGNhMzUtNWExNi0z MTdkLTkwY2EtZjU1ZDBjYmZiZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdUn1nx6CrqgbcDDOq0Ob4sy0cjc53K7y9g4XbBIRXl/SjpEImBnW5y oYEu4Gv9nRM5AQ5Uy/pbQkpHRTfvOUfV4MN0CNZAxcx9oGnldFV53tT6/zxjSEkZ k7wZBkY2/bHA5ixTtnwhhODjAjSULoJZzSIlqx/WeywjzkSr9dbYvqJ+UHM9ugiE 3ruxO6EDMePPgHxa2Ir4NxbDKpHtoNZW0ft0nBOF2JsL5TEa+kkq31g6Auw4QOob Sg3sPpfrQbP6lE35LRkmRNvso00IouYuleVkrvfTVReVhUk+5wkGTw5M2CqReKpO twJb65dHq/WvtQGZCsN8v36aW9SoBQ0= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:09 2026 by rpki-client