$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa File: a1550d1f-e3fe-3776-a892-790b38196ecf.roa (raw, json) Hash identifier: nOr2YNe/NmKvBPxYk+Lzwa7yS8ELDbmBpx2F1FF6mVU= Subject key identifier: 83:A4:50:9D:0C:66:CF:E3:9D:9C:24:BE:41:CD:56:12:EF:70:41:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E8B32E49CCB63A546B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 209.60.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e8:b3:2e:49:cc:b6:3a:54:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=24f94675-73ed-4e41-ab6f-b37413d2c28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:90:ad:17:88:d6:9d:c0:74:55:a1:a1:bf: 11:65:bf:0c:da:1f:6e:3f:01:77:c2:d4:0f:02:df: d3:31:c6:d5:8c:2d:ed:fc:69:93:ed:03:5f:5d:db: 68:35:71:f8:5c:ab:25:36:97:61:dd:23:63:5a:59: 49:56:70:c1:a8:da:9d:a0:f4:23:5f:a7:f6:ff:43: 8e:e1:9e:2a:21:b1:04:18:12:7b:22:6e:fd:e0:d5: 77:85:74:ad:82:69:50:c0:7b:98:13:3f:4e:d2:e7: e0:89:5b:9a:63:68:2d:d6:1b:84:f6:bc:ef:e0:8e: 14:b5:8a:e3:6e:6e:46:37:10:6e:4e:73:7f:89:07: b7:a9:80:9d:b0:e4:8e:59:2b:47:2c:90:a1:77:4e: 27:5e:68:49:6c:cc:5a:a0:ac:33:b2:04:30:cb:a6: cf:22:e8:2d:6d:05:8a:6d:7e:88:9b:d0:3a:06:87: d3:bd:27:ce:ef:ad:df:a8:31:bf:b9:06:d5:b7:75: 1e:6f:3b:e4:ff:69:ad:af:46:b8:04:11:00:0d:9e: 97:9b:de:3d:a2:77:c5:96:97:b3:be:f9:dc:a4:53: b2:08:bf:6e:84:d0:e3:de:db:e2:d8:66:ce:38:01: da:6b:ac:df:7b:2a:c8:bb:5e:94:84:f2:c9:2d:bb: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A4:50:9D:0C:66:CF:E3:9D:9C:24:BE:41:CD:56:12:EF:70:41:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:13:66:2d:05:27:27:d4:79:fe:38:19:b6:68:8d:85:b4:60: 44:a8:75:8c:0c:84:fc:7a:93:f8:31:d0:ee:13:ff:9f:95:f0: 3d:a6:04:1a:a7:52:0d:6a:a5:29:82:e0:b4:3a:4a:a1:9f:db: 16:67:30:15:a7:7f:1e:55:bb:5b:d9:fe:26:56:9e:1d:67:a0: 4a:fc:e0:a0:13:07:a4:a4:0b:0f:98:2d:a5:68:da:b6:18:46: 1b:f4:96:da:e2:58:24:58:d2:5b:a7:61:3b:06:e6:48:02:0f: c1:fd:7e:bc:9f:ab:1d:14:76:57:7c:b7:9b:3d:70:a9:df:13: 42:93:8c:86:e9:bf:57:1c:6e:82:04:8b:7c:e0:fc:fa:85:20: a1:82:ea:d2:4c:d1:73:5a:70:1e:7d:50:94:0a:17:a5:ca:a9: 21:ef:60:ba:52:a5:cd:a4:2e:b5:1f:9d:fe:17:87:3c:1d:31: fc:04:1c:62:44:14:9b:4d:61:4c:f8:3a:3f:f0:e3:f1:57:28: d3:ca:99:78:22:5c:70:b5:ff:de:5e:e4:8f:7b:f0:a7:d8:d1: d3:25:a9:a4:06:7a:41:f8:1f:ae:e5:e0:96:83:be:6d:90:8c: 06:6b:75:c1:63:0d:55:ff:7d:eb:5d:30:57:24:d5:6a:72:8f: 8f:a3:5a:2a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6yseizLknMtjpUa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MjRmOTQ2NzUtNzNlZC00ZTQxLWFiNmYtYjM3NDEzZDJjMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraKQrReI1p3AdFWhob8RZb8M2h9uPwF3wtQP At/TMcbVjC3t/GmT7QNfXdtoNXH4XKslNpdh3SNjWllJVnDBqNqdoPQjX6f2/0OO 4Z4qIbEEGBJ7Im794NV3hXStgmlQwHuYEz9O0ufgiVuaY2gt1huE9rzv4I4UtYrj bm5GNxBuTnN/iQe3qYCdsOSOWStHLJChd04nXmhJbMxaoKwzsgQwy6bPIugtbQWK bX6Im9A6BofTvSfO763fqDG/uQbVt3Uebzvk/2mtr0a4BBEADZ6Xm949onfFlpez vvncpFOyCL9uhNDj3tvi2GbOOAHaa6zfeyrIu16UhPLJLbu5UwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIOkUJ0MZs/jnZwkvkHNVhLvcEHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE1NTBkMWYtZTNmZS0z Nzc2LWE4OTItNzkwYjM4MTk2ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0TwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADhNmLQUnJ9R5/jgZtmiNhbRgRKh1jAyE/HqT+DHQ7hP/n5XwPaYEGqdS DWqlKYLgtDpKoZ/bFmcwFad/HlW7W9n+JlaeHWegSvzgoBMHpKQLD5gtpWjathhG G/SW2uJYJFjSW6dhOwbmSAIPwf1+vJ+rHRR2V3y3mz1wqd8TQpOMhum/VxxuggSL fOD8+oUgoYLq0kzRc1pwHn1QlAoXpcqpIe9gulKlzaQutR+d/heHPB0x/AQcYkQU m01hTPg6P/Dj8Vco08qZeCJccLX/3l7kj3vwp9jR0yWppAZ6QfgfruXgloO+bZCM Bmt1wWMNVf99610wVyTVanKPj6NaKg== -----END CERTIFICATE-----Generated at Thu Aug 27 15:17:54 2026 by rpki-client