$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa File: a1550d1f-e3fe-3776-a892-790b38196ecf.roa (raw, json) Hash identifier: j4qOb4zVUDvWXsFWmS+3lGKBcUC+8FytpSO/ibpXCsA= Subject key identifier: 29:0C:E4:DB:ED:7F:B4:01:30:46:11:96:27:DC:60:E2:83:99:AD:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D9544AE2AC37AB55C3480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 209.60.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:95:44:ae:2a:c3:7a:b5:5c:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=a91a648f-1b31-4a7b-88b7-9a07d32e5953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:77:73:0b:54:f0:0e:c3:70:08:02:31:64: ad:41:ec:8c:f8:04:15:4d:fa:b6:e8:e2:ab:15:00: 6d:c5:e8:be:24:c0:a8:56:88:8c:3f:df:0d:5b:e0: ad:4b:6a:f1:43:8d:bf:30:10:86:47:23:fb:0f:a9: 54:c8:fe:7a:b9:97:53:e7:eb:c4:b8:d3:b1:c9:29: 85:52:a8:a9:98:24:f4:2f:c0:1a:71:25:a9:46:e9: 85:cf:2d:1d:34:6d:7b:56:76:b6:d4:f0:26:55:95: aa:71:88:b1:e2:9e:79:5b:e8:6b:20:35:32:36:2f: e2:d7:35:30:1c:32:b6:f1:c9:54:02:a9:a1:c5:d4: 92:b2:ab:48:e0:a6:7c:62:5f:12:2f:0b:41:f7:2c: ff:ec:05:35:8d:63:82:02:45:cd:95:6e:9d:c0:bf: f1:e3:ab:df:a2:5e:35:11:06:23:8c:8c:f5:f9:f6: 3e:e2:4e:9e:6f:8b:c5:a2:13:fd:b0:66:78:82:04: 9c:05:58:f9:54:88:00:d3:bf:8f:1a:1d:46:8d:73: cc:a6:ae:5b:1e:4a:da:0a:ad:91:5c:3a:25:ed:4d: 3c:4a:df:e5:b1:eb:2c:b5:06:d8:a4:82:4d:f2:5d: d2:86:f2:77:9d:77:91:70:52:6f:b0:a5:af:6c:4c: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0C:E4:DB:ED:7F:B4:01:30:46:11:96:27:DC:60:E2:83:99:AD:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ca:e8:d4:49:c4:cb:e6:9e:e1:42:7f:6a:f7:3f:ee:06:09: 9b:6d:34:d5:2d:bf:52:da:74:21:32:b7:96:7c:a9:a2:ec:75: 95:e5:72:4e:cf:76:ed:c8:c9:f3:b7:9c:c3:6f:80:44:8b:8c: cc:4d:f1:00:41:a1:18:6b:b6:21:c9:05:c2:49:1c:db:69:6b: f4:72:10:34:9e:12:70:d4:38:cf:3b:58:99:4e:0b:a0:4d:75: e9:49:57:c8:c6:9e:27:94:22:4f:08:0e:8d:95:15:3d:fb:57: 5d:80:5d:a4:8a:2a:27:8d:86:4e:64:c4:74:2a:8b:0e:6f:23: b3:66:3c:9c:5f:43:36:0c:95:ed:4c:7f:1d:97:60:4b:93:0a: 64:3d:d3:ee:4d:90:66:a9:be:89:cc:95:c7:03:ba:f8:75:cd: 72:e4:91:4b:b4:a2:2f:0b:b2:38:d8:e9:60:5c:cd:b6:4e:56: 61:8a:e8:3b:13:08:79:e3:5b:48:d6:74:a6:9e:e8:e6:f5:03: 85:07:f8:67:63:c3:74:52:c6:ca:2b:4e:2f:72:53:bc:35:64: 0f:c6:57:2a:d2:17:8f:1b:5b:1b:84:b1:8f:37:88:e3:af:2c: 0e:dd:b5:2f:b7:d1:d0:b9:2c:fb:08:7d:66:f2:f5:7e:ac:91: 80:a7:95:0e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnZVErirDerVcNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YTkxYTY0OGYtMWIzMS00YTdiLTg4YjctOWEwN2QzMmU1OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF93cwtU8A7DcAgCMWStQeyM+AQVTfq26OKr FQBtxei+JMCoVoiMP98NW+CtS2rxQ42/MBCGRyP7D6lUyP56uZdT5+vEuNOxySmF UqipmCT0L8AacSWpRumFzy0dNG17Vna21PAmVZWqcYix4p55W+hrIDUyNi/i1zUw HDK28clUAqmhxdSSsqtI4KZ8Yl8SLwtB9yz/7AU1jWOCAkXNlW6dwL/x46vfol41 EQYjjIz1+fY+4k6eb4vFohP9sGZ4ggScBVj5VIgA07+PGh1GjXPMpq5bHkraCq2R XDol7U08St/lsesstQbYpIJN8l3ShvJ3nXeRcFJvsKWvbEzGSQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCkM5Nvtf7QBMEYRlifcYOKDma0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE1NTBkMWYtZTNmZS0z Nzc2LWE4OTItNzkwYjM4MTk2ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0TwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABsro1EnEy+ae4UJ/avc/7gYJm2001S2/Utp0ITK3lnypoux1leVyTs92 7cjJ87ecw2+ARIuMzE3xAEGhGGu2IckFwkkc22lr9HIQNJ4ScNQ4zztYmU4LoE11 6UlXyMaeJ5QiTwgOjZUVPftXXYBdpIoqJ42GTmTEdCqLDm8js2Y8nF9DNgyV7Ux/ HZdgS5MKZD3T7k2QZqm+icyVxwO6+HXNcuSRS7SiLwuyONjpYFzNtk5WYYroOxMI eeNbSNZ0pp7o5vUDhQf4Z2PDdFLGyitOL3JTvDVkD8ZXKtIXjxtbG4SxjzeI468s Dt21L7fR0Lks+wh9ZvL1fqyRgKeVDg== -----END CERTIFICATE-----Generated at Tue Oct 13 21:35:44 2026 by rpki-client