$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa File: b5c5491b-02de-3284-8dbf-991476de5e11.roa (raw, json) Hash identifier: 8LcoqSXkR69FLme0lYmKm2jqMYOpybsv3im28jRSquQ= Subject key identifier: C5:2C:3B:26:2C:59:C7:C4:09:E3:DA:B3:AC:62:64:D8:87:25:2B:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7BEA181B430B541D1240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 27338 IP address blocks: 209.192.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7b:ea:18:1b:43:0b:54:1d:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=bd790e54-a4ae-4825-9e40-b5808567839a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:e3:0f:60:0f:a6:7f:37:49:64:c8:cd:ba: 3c:13:df:84:38:62:d4:dc:a4:99:7d:50:d6:95:e7: 53:c7:38:5f:b5:ea:c8:d8:ce:1b:9f:30:1a:a9:25: b3:84:88:e1:98:96:5b:d8:0d:24:83:85:3d:3c:0d: de:d8:b7:a6:36:a8:4b:a1:11:29:80:51:f7:ab:ae: 17:c3:41:d8:4a:ac:e0:3b:16:c8:c1:82:db:18:68: 20:8b:53:23:1e:af:ce:f8:43:74:9c:43:16:ba:b6: 20:79:e7:6d:21:2c:aa:83:48:fc:ae:c3:30:9f:9d: 4e:52:d8:77:b8:d9:cf:02:fa:14:8a:85:0a:17:40: b3:92:04:0e:32:d8:7b:8c:44:91:b7:52:67:b8:a7: ad:69:56:6d:8f:b7:ff:60:50:b3:53:c0:15:cf:54: 29:71:3b:8b:48:80:01:2c:fc:43:24:c3:16:80:13: f8:7c:8b:6c:08:06:48:13:ea:78:ef:db:ff:3b:06: e9:c0:53:63:3f:52:48:4c:ad:b4:b9:c5:92:2c:d2: 0f:3c:4e:62:e9:f5:e4:d5:c7:99:c5:28:05:99:f4: 24:30:91:58:d0:4a:b6:c6:54:23:58:4e:95:d4:d7: c8:09:59:01:8c:2b:be:d5:8c:d7:99:30:94:b7:3f: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2C:3B:26:2C:59:C7:C4:09:E3:DA:B3:AC:62:64:D8:87:25:2B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5c5491b-02de-3284-8dbf-991476de5e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:8a:09:d7:9b:3d:29:9e:74:9f:64:ad:60:df:79:27:7b:84: c0:d8:41:85:90:5c:13:fd:a7:f7:ac:f3:f6:a5:21:6b:7e:da: f3:6f:77:7a:52:4c:83:a4:d9:1d:47:ec:b6:f5:8b:f3:7b:7b: 90:9b:24:45:8f:fe:60:a9:e1:a4:22:9e:1e:4b:1b:fb:b8:a8: e8:59:bb:9b:ac:82:40:f4:e7:b5:ce:d2:ee:9d:3d:ce:e7:26: b7:38:fe:30:8c:48:a9:b5:fb:57:bb:58:80:c5:9b:e3:3e:82: c7:04:7e:cd:ae:5b:74:0e:84:e6:ab:ac:5f:96:a7:bc:de:88: f5:f0:50:10:53:76:53:7c:c6:0c:e6:5d:c3:ba:13:72:f6:9f: 57:e7:3d:2c:10:8b:c1:02:59:39:2a:00:78:2f:5c:93:0d:da: 16:72:17:15:4b:f3:66:a0:8a:e7:c5:1a:d6:9a:49:9a:e0:db: 04:1e:6b:d4:48:3a:50:b0:09:7c:c0:b6:48:4e:ee:55:f3:e2: 9f:33:c5:1e:1a:7c:29:3f:f7:c1:d2:8f:fb:b6:46:98:3d:da: d3:e5:38:01:3c:2a:eb:86:b9:2f:d9:ad:43:d4:d0:86:ae:81: db:a4:2d:82:4e:43:bf:36:b3:65:22:e4:d1:df:f0:5d:e3:3e: 6a:6a:ba:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXvqGBtDC1QdEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YmQ3OTBlNTQtYTRhZS00ODI1LTllNDAtYjU4MDg1Njc4MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFLjD2APpn83SWTIzbo8E9+EOGLU3KSZfVDW ledTxzhfterI2M4bnzAaqSWzhIjhmJZb2A0kg4U9PA3e2LemNqhLoREpgFH3q64X w0HYSqzgOxbIwYLbGGggi1MjHq/O+EN0nEMWurYgeedtISyqg0j8rsMwn51OUth3 uNnPAvoUioUKF0CzkgQOMth7jESRt1JnuKetaVZtj7f/YFCzU8AVz1QpcTuLSIAB LPxDJMMWgBP4fItsCAZIE+p479v/OwbpwFNjP1JITK20ucWSLNIPPE5i6fXk1ceZ xSgFmfQkMJFY0Eq2xlQjWE6V1NfICVkBjCu+1YzXmTCUtz90LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUsOyYsWcfECePas6xiZNiHJSuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjVjNTQ5MWItMDJkZS0z Mjg0LThkYmYtOTkxNDc2ZGU1ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+KCdebPSmedJ9krWDfeSd7hMDYQYWQXBP9p/es8/alIWt+2vNvd3pS TIOk2R1H7Lb1i/N7e5CbJEWP/mCp4aQinh5LG/u4qOhZu5usgkD057XO0u6dPc7n Jrc4/jCMSKm1+1e7WIDFm+M+gscEfs2uW3QOhOarrF+Wp7zeiPXwUBBTdlN8xgzm XcO6E3L2n1fnPSwQi8ECWTkqAHgvXJMN2hZyFxVL82agiufFGtaaSZrg2wQea9RI OlCwCXzAtkhO7lXz4p8zxR4afCk/98HSj/u2Rpg92tPlOAE8KuuGuS/ZrUPU0Iau gdukLYJOQ782s2Ui5NHf8F3jPmpqurc= -----END CERTIFICATE-----Generated at Tue Oct 13 06:24:12 2026 by rpki-client