$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1054de7-fbbe-3f81-852e-f0bb13c2d9ce.roa File: a1054de7-fbbe-3f81-852e-f0bb13c2d9ce.roa (raw, json) Hash identifier: SQgLVis4YTM32xvbjuXJB9kcCXi3C3NlEbtD99TMtHU= Subject key identifier: 00:F9:7C:6A:44:9C:D0:12:32:6C:34:57:E2:56:76:DB:91:65:A1:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CD536FB8EAEFE6FC5A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1054de7-fbbe-3f81-852e-f0bb13c2d9ce.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 12185 IP address blocks: 209.96.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cd:53:6f:b8:ea:ef:e6:fc:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=5651693b-5eba-4d9b-b25e-be331fd295cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:4d:1b:b3:ef:51:ef:1a:3b:fe:3e:9f:ab: 7e:76:d1:ea:fe:c7:b6:97:a5:bc:41:26:22:a2:13: 13:25:c6:99:5c:23:43:05:ed:a9:d1:db:5e:ba:5d: a7:15:04:1a:52:61:cc:82:2f:61:ef:83:2b:c0:bd: a6:e2:6d:36:01:40:e9:1e:0e:fd:4b:2c:83:ef:49: 78:20:da:2b:37:24:02:76:5a:c1:74:d4:4f:be:fd: 3c:ad:87:f6:c2:c5:9e:2a:c8:97:05:61:f4:c8:e3: 12:09:15:6f:04:f2:56:15:75:86:8e:00:bd:48:4d: d0:41:09:cb:cf:8b:7c:da:11:93:42:ff:69:8b:8d: de:bf:f9:c4:5e:9a:2c:50:0d:b1:4a:4e:50:bf:ba: bb:21:8c:5e:4c:c9:fc:32:c2:51:5b:8f:1b:5e:4c: e9:26:a4:62:8a:12:d4:48:ad:aa:24:55:7c:94:af: ef:a5:e7:a0:a0:24:ec:58:ca:56:c3:61:04:e5:b6: 09:88:29:a4:47:61:01:be:c4:58:02:12:bd:d1:3d: 1f:fa:e4:c4:93:be:d1:0a:31:13:0c:1b:40:ac:a8: 49:78:42:60:72:f6:d3:be:24:a6:af:27:74:7e:47: 92:b5:4b:88:dc:42:1d:4f:39:f2:9d:5e:f7:5d:67: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F9:7C:6A:44:9C:D0:12:32:6C:34:57:E2:56:76:DB:91:65:A1:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1054de7-fbbe-3f81-852e-f0bb13c2d9ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.96.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c2:b1:9b:ca:8b:c7:ad:be:19:06:7e:8f:10:eb:3c:3b:b8: 3a:f0:29:0b:f7:25:21:d5:4f:cb:31:85:37:3b:71:c8:03:22: d6:f4:14:f8:9f:b9:36:78:3f:4e:4e:41:c4:de:d5:5d:9f:61: b3:ff:2f:7c:af:bf:cb:b5:c0:de:19:20:94:65:a6:0d:0b:bb: 78:7a:11:f7:26:02:f2:0c:58:19:f3:20:30:fa:37:20:09:56: 55:b9:69:11:c4:0e:fc:b0:02:77:6f:f1:62:79:50:2e:71:11: 29:c9:a2:6c:89:6a:2d:79:8e:f6:1b:2c:20:07:19:8f:85:cf: 2d:ba:19:72:2b:ea:b0:12:23:70:8d:7c:a9:a4:cc:89:d2:d4: dd:03:e1:a2:18:27:7c:ce:5f:59:8f:24:a5:26:a9:b8:fe:90: 68:53:11:99:55:63:7f:d0:77:c0:d0:9e:3b:b0:40:00:da:cd: e8:ff:9b:c8:e6:8b:62:b5:9c:b9:a4:74:4d:4a:b5:91:0f:e1: 72:27:2b:4b:5e:a9:50:65:74:84:86:e6:30:95:2d:8f:a2:07: 82:dc:91:80:60:30:50:14:5e:24:03:f3:9a:4b:b3:ed:45:10: 7d:39:33:cd:69:2f:eb:bb:d2:44:89:6d:77:d7:8c:e2:c2:78: db:98:0a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysc1Tb7jq7+b8WkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NTY1MTY5M2ItNWViYS00ZDliLWIyNWUtYmUzMzFmZDI5NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNVNG7PvUe8aO/4+n6t+dtHq/se2l6W8QSYi ohMTJcaZXCNDBe2p0dteul2nFQQaUmHMgi9h74MrwL2m4m02AUDpHg79SyyD70l4 INorNyQCdlrBdNRPvv08rYf2wsWeKsiXBWH0yOMSCRVvBPJWFXWGjgC9SE3QQQnL z4t82hGTQv9pi43ev/nEXposUA2xSk5Qv7q7IYxeTMn8MsJRW48bXkzpJqRiihLU SK2qJFV8lK/vpeegoCTsWMpWw2EE5bYJiCmkR2EBvsRYAhK90T0f+uTEk77RCjET DBtArKhJeEJgcvbTviSmryd0fkeStUuI3EIdTznynV73XWdzwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD5fGpEnNASMmw0V+JWdtuRZaFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTEwNTRkZTctZmJiZS0z ZjgxLTg1MmUtZjBiYjEzYzJkOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrCsZvKi8etvhkGfo8Q6zw7uDrwKQv3JSHVT8sxhTc7ccgDItb0FPif uTZ4P05OQcTe1V2fYbP/L3yvv8u1wN4ZIJRlpg0Lu3h6EfcmAvIMWBnzIDD6NyAJ VlW5aRHEDvywAndv8WJ5UC5xESnJomyJai15jvYbLCAHGY+Fzy26GXIr6rASI3CN fKmkzInS1N0D4aIYJ3zOX1mPJKUmqbj+kGhTEZlVY3/Qd8DQnjuwQADazej/m8jm i2K1nLmkdE1KtZEP4XInK0teqVBldISG5jCVLY+iB4LckYBgMFAUXiQD85pLs+1F EH05M81pL+u70kSJbXfXjOLCeNuYCkc= -----END CERTIFICATE-----Generated at Thu Aug 27 10:33:17 2026 by rpki-client