$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa File: 9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa (raw, json) Hash identifier: rQQ3Vj6tewoJw47CoGIjbZu6uyT6EGk4gk7llwZX9XQ= Subject key identifier: 75:10:DE:AB:75:EA:B0:72:61:44:7D:F1:F6:48:60:99:38:2B:5B:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CBE7AFE5CECD14A1F180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 209.165.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cb:e7:af:e5:ce:cd:14:a1:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=37120b6e-f45a-42f9-a1b5-f7208ae19bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:c6:5a:1a:a4:02:97:67:e5:27:c0:72:d0: 55:00:70:01:f1:45:98:ce:0e:3f:5c:e1:63:84:a5: 4e:74:d2:b8:23:e5:0e:a7:2c:5b:64:37:7c:1f:1f: a6:fd:e8:8e:61:97:38:13:df:d3:2c:42:2c:6f:85: e1:0e:b0:df:85:73:8c:eb:74:c5:e7:26:17:a7:f1: 1d:61:56:3e:cc:14:bc:8c:ed:27:60:2e:be:41:02: 87:3f:fd:26:00:7a:24:18:bf:30:e5:4d:20:f9:e5: 1b:1d:d8:db:67:da:ce:2a:26:59:32:7a:28:33:02: ea:68:6e:9f:b6:6e:be:f8:7a:c0:88:f6:ce:60:e1: 76:f3:6e:50:81:96:3d:c7:da:9a:1a:74:0d:61:34: 55:bc:71:f4:24:5f:ba:25:73:01:f4:c1:c1:db:85: f5:9b:71:5b:2b:90:c7:04:cc:fb:a3:d0:4a:79:c6: 7e:38:26:ed:e0:c6:00:46:f6:09:53:6a:df:5b:4b: b8:99:35:59:6d:83:d2:dd:0a:65:b2:3f:cf:bc:4a: 22:1a:62:54:ed:96:62:cb:06:cb:f8:c7:cb:57:37: 6d:ff:be:96:88:a6:14:c7:df:34:e0:c2:99:c9:cc: f9:2e:d8:e1:fa:11:b0:eb:be:b9:67:08:78:a6:3c: b2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:10:DE:AB:75:EA:B0:72:61:44:7D:F1:F6:48:60:99:38:2B:5B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:00:1b:2f:f4:63:86:c0:b4:08:c8:37:0b:1e:ec:1f:84:e1: 1f:09:ef:5e:a1:72:0b:b3:9e:78:95:82:48:31:d8:56:5e:bb: b2:d4:c8:79:eb:eb:11:4c:da:8e:16:f7:a7:58:b8:7d:92:5c: a6:20:be:3f:c6:fe:9b:cd:cf:bd:a2:ce:0f:7b:11:58:72:60: b9:dc:10:33:56:91:30:74:c4:9a:5d:92:c5:c0:62:42:cd:b4: a7:ab:16:84:6e:74:10:ef:f8:65:0e:7e:ae:6d:62:3d:53:2d: 40:00:46:81:08:71:ae:9b:79:9f:34:5f:77:49:4b:78:f3:f8: ea:1a:36:64:e1:ac:60:f0:2d:24:6f:f4:24:33:a5:20:11:3d: 51:a4:a5:df:86:01:c0:28:e6:db:d5:13:76:f3:9b:f5:b4:89: c0:2f:fd:6b:ab:a0:0f:cd:ab:97:c9:6a:a5:90:bb:da:73:29: c5:0d:cf:63:3e:e4:0a:01:e6:67:48:ae:75:06:90:62:1e:ec: 87:83:eb:cf:b4:69:cc:ad:f0:4d:84:13:e0:c3:70:c3:e4:8c: 0b:ce:42:c8:35:16:b7:54:43:ff:b6:20:94:2f:b6:e5:c8:45: c6:b9:3f:5f:56:79:56:cd:01:09:20:0d:cf:a8:33:a4:17:54: d7:e8:33:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscvnr+XOzRSh8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MzcxMjBiNmUtZjQ1YS00MmY5LWExYjUtZjcyMDhhZTE5YmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5rGWhqkApdn5SfActBVAHAB8UWYzg4/XOFj hKVOdNK4I+UOpyxbZDd8Hx+m/eiOYZc4E9/TLEIsb4XhDrDfhXOM63TF5yYXp/Ed YVY+zBS8jO0nYC6+QQKHP/0mAHokGL8w5U0g+eUbHdjbZ9rOKiZZMnooMwLqaG6f tm6++HrAiPbOYOF2825QgZY9x9qaGnQNYTRVvHH0JF+6JXMB9MHB24X1m3FbK5DH BMz7o9BKecZ+OCbt4MYARvYJU2rfW0u4mTVZbYPS3Qplsj/PvEoiGmJU7ZZiywbL +MfLVzdt/76WiKYUx9804MKZycz5Ltjh+hGw6765Zwh4pjyyzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUQ3qt16rByYUR98fZIYJk4K1sUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWJhNmQ3ZDItYzc1YS0z NjM2LWE1YzUtMmU3NTdmY2FhMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcAGy/0Y4bAtAjINwse7B+E4R8J716hcguznniVgkgx2FZeu7LUyHnr 6xFM2o4W96dYuH2SXKYgvj/G/pvNz72izg97EVhyYLncEDNWkTB0xJpdksXAYkLN tKerFoRudBDv+GUOfq5tYj1TLUAARoEIca6beZ80X3dJS3jz+OoaNmThrGDwLSRv 9CQzpSARPVGkpd+GAcAo5tvVE3bzm/W0icAv/WuroA/Nq5fJaqWQu9pzKcUNz2M+ 5AoB5mdIrnUGkGIe7IeD68+0acyt8E2EE+DDcMPkjAvOQsg1FrdUQ/+2IJQvtuXI Rca5P19WeVbNAQkgDc+oM6QXVNfoM4k= -----END CERTIFICATE-----Generated at Tue Sep 1 02:49:30 2026 by rpki-client