$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b27eeb9d-cf44-374c-85ac-46bca9d2bece.roa File: b27eeb9d-cf44-374c-85ac-46bca9d2bece.roa (raw, json) Hash identifier: YRkZjhjGWl01zuH222cD7ykcoMpvH7o3GLQ3OldOJCc= Subject key identifier: 2D:1E:98:F0:90:E5:07:D0:66:C0:B7:1B:D9:F1:EF:DA:E7:C4:E4:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D98351C466EEB57863140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b27eeb9d-cf44-374c-85ac-46bca9d2bece.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 30363 IP address blocks: 209.156.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:98:35:1c:46:6e:eb:57:86:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2fcd30a5-35a5-4ca7-911b-7bafc78762b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:f8:4f:43:6f:86:1e:c0:80:5f:4a:c3:f1: 37:5f:46:31:74:89:a2:93:86:9f:29:66:5a:8e:4d: 9e:fd:ad:f4:9f:4f:ef:fd:1f:17:6d:6f:de:19:d2: a8:60:4b:09:6b:f8:f6:21:49:42:49:d9:ac:0a:45: 73:b8:ec:ac:a0:80:08:c3:a0:42:31:56:99:78:17: 65:bd:23:43:dc:0c:2c:71:f0:db:44:9d:66:96:03: d5:33:4d:e1:1e:51:d4:cf:ae:15:7a:d9:16:66:3e: 91:31:aa:36:d7:38:a1:60:7b:ac:23:a1:5f:ab:2a: 6f:39:17:14:40:c9:09:3a:bc:d5:25:9b:c1:98:d0: c1:4b:55:f9:a8:b9:28:94:bd:65:72:1b:6b:dd:79: 46:36:5b:9b:02:1d:8c:93:14:d3:7c:f8:18:0f:63: de:1a:83:78:07:74:50:ec:36:e5:64:16:b7:f4:44: b6:0c:b2:2d:f9:14:c7:5d:61:37:19:96:5c:9e:a8: e3:df:1b:4b:e7:ca:80:46:64:30:0e:ac:3f:09:4e: ea:b4:26:82:88:3c:eb:ec:28:a1:c0:00:15:cd:cc: 27:82:1b:46:6a:07:79:42:a3:a0:bb:a8:61:30:85: 09:68:05:ff:b0:01:39:e4:fa:a7:6c:a0:f7:49:af: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1E:98:F0:90:E5:07:D0:66:C0:B7:1B:D9:F1:EF:DA:E7:C4:E4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b27eeb9d-cf44-374c-85ac-46bca9d2bece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e9:de:86:08:88:64:e8:b6:af:a5:66:b1:87:18:85:49:77: b3:c2:da:3c:77:c7:dc:bd:38:fa:62:3f:8e:35:01:4e:3b:cf: c9:f3:e5:ed:2c:5b:20:14:50:b6:24:36:04:38:2c:c0:97:cf: f6:6c:6f:06:68:22:7f:33:8c:9e:b5:fa:58:da:90:32:da:4e: ab:7f:c9:5e:f9:5d:aa:76:90:6c:84:5e:d8:17:94:e4:23:3c: 88:c3:47:53:17:7a:4b:8d:f1:db:fa:16:b2:e0:bd:a4:b5:2e: 23:ad:9f:05:f5:4c:d7:bd:fe:0a:b2:1f:9a:c0:13:f6:eb:a5: 05:2d:0e:1b:07:e7:4e:06:10:44:d2:47:c6:e6:3c:12:b9:08: c9:65:c3:a4:5c:f6:a3:e8:42:e2:7f:ea:82:2e:4c:b6:dd:8b: 46:f1:e6:d5:67:fb:54:53:2a:6d:9a:20:a6:99:b1:8d:52:8a: 6e:fb:50:25:9c:9e:9c:e7:03:4a:4e:8f:ac:c9:9f:8b:f2:c0: f2:6c:b3:50:7e:db:5b:a1:9b:5c:81:1a:68:e3:51:43:cb:e3: cf:5d:eb:48:f5:75:59:d0:8b:76:2d:65:20:d4:26:72:dd:2c: d0:e5:52:8d:c7:42:e8:70:23:5d:70:3c:ae:a6:5f:8d:13:d2: c8:49:45:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZg1HEZu61eGMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmZjZDMwYTUtMzVhNS00Y2E3LTkxMWItN2JhZmM3ODc2MmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuej4T0Nvhh7AgF9Kw/E3X0YxdImik4afKWZa jk2e/a30n0/v/R8XbW/eGdKoYEsJa/j2IUlCSdmsCkVzuOysoIAIw6BCMVaZeBdl vSND3AwscfDbRJ1mlgPVM03hHlHUz64VetkWZj6RMao21zihYHusI6FfqypvORcU QMkJOrzVJZvBmNDBS1X5qLkolL1lchtr3XlGNlubAh2MkxTTfPgYD2PeGoN4B3RQ 7DblZBa39ES2DLIt+RTHXWE3GZZcnqjj3xtL58qARmQwDqw/CU7qtCaCiDzr7Cih wAAVzcwnghtGagd5QqOgu6hhMIUJaAX/sAE55PqnbKD3Sa/svwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0emPCQ5QfQZsC3G9nx79rnxOQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjI3ZWViOWQtY2Y0NC0z NzRjLTg1YWMtNDZiY2E5ZDJiZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPp3oYIiGTotq+lZrGHGIVJd7PC2jx3x9y9OPpiP441AU47z8nz5e0s WyAUULYkNgQ4LMCXz/ZsbwZoIn8zjJ61+ljakDLaTqt/yV75Xap2kGyEXtgXlOQj PIjDR1MXekuN8dv6FrLgvaS1LiOtnwX1TNe9/gqyH5rAE/brpQUtDhsH504GEETS R8bmPBK5CMllw6Rc9qPoQuJ/6oIuTLbdi0bx5tVn+1RTKm2aIKaZsY1Sim77UCWc npznA0pOj6zJn4vywPJss1B+21uhm1yBGmjjUUPL489d60j1dVnQi3YtZSDUJnLd LNDlUo3HQuhwI11wPK6mX40T0shJRdk= -----END CERTIFICATE-----Generated at Tue Oct 13 17:35:38 2026 by rpki-client