$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba90d395-c250-39f8-858a-8d91bddc257d.roa File: ba90d395-c250-39f8-858a-8d91bddc257d.roa (raw, json) Hash identifier: 9p/vJ44oyCQwt5l6Vnpg48O8ly8ZblOn3w3ua3E9Bno= Subject key identifier: E5:D7:06:A9:40:A8:8D:A3:61:67:50:BC:F1:9F:E9:34:C1:E5:CD:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6C58338B95D266FA4E2C2380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba90d395-c250-39f8-858a-8d91bddc257d.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 209.2.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:33:8b:95:d2:66:fa:4e:2c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=c302ab23-9e80-4199-a4a3-8a2b84541176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:8d:57:c1:d1:d2:89:df:e2:4e:46:c5:fd: eb:80:08:cd:a0:63:48:48:46:c3:23:91:8e:6e:9d: 72:e5:cc:c0:9b:a4:f5:28:29:8e:f9:2f:f6:40:2f: f9:b2:08:d3:6f:4b:f2:e9:06:ee:bd:3d:f4:dd:c2: 04:d0:7f:ed:52:6e:a9:c3:b1:2b:0c:37:61:89:64: 61:33:0a:a4:91:7c:af:fa:56:d4:25:f6:f1:b8:12: b4:a9:95:d5:5b:dc:9e:2c:b7:22:33:43:fd:a8:fc: f9:8a:28:af:12:61:58:4e:41:08:17:df:cd:99:4c: 95:a0:9a:ef:9c:fe:ff:12:77:fc:ec:76:2b:6f:68: ba:6b:ca:f5:7a:0b:5c:a5:6f:f3:46:25:2f:4d:be: 10:7c:ac:93:39:0b:ac:05:e3:99:f2:75:a6:1d:e4: 56:24:4d:12:ae:a7:47:04:5d:6e:a0:30:c6:3a:3f: b3:b1:56:1a:0d:cf:a2:85:9a:13:ad:09:d0:83:15: 25:7f:b8:5d:26:e9:b1:a2:0b:18:70:56:e4:35:1f: e7:76:8e:ce:05:fc:78:3e:44:57:a4:e8:5f:1a:8d: d1:7c:3b:90:e9:19:25:2a:69:30:55:c5:77:75:af: 34:93:4b:ce:00:d5:8d:e0:35:73:fc:30:2b:da:75: 1d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D7:06:A9:40:A8:8D:A3:61:67:50:BC:F1:9F:E9:34:C1:E5:CD:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba90d395-c250-39f8-858a-8d91bddc257d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:34:9b:d3:62:74:f5:e8:f0:07:17:6a:47:86:9b:d4:6d:eb: d4:4a:34:d8:7f:e0:32:5e:83:d3:93:49:be:6a:0c:5f:90:72: a9:8e:ba:86:27:9d:cc:ad:ad:da:99:c9:3d:73:72:9a:fb:08: 53:66:9e:74:9c:66:97:ad:a8:77:71:d4:c4:d0:31:58:f6:08: 9e:7e:aa:4d:35:1c:c5:09:92:45:c1:75:02:cd:a8:e4:25:d5: 32:3e:ba:e9:2a:bb:ea:d7:5c:b0:ee:8b:24:c5:fa:c0:7c:c0: 4e:cb:1c:37:94:b9:55:4c:be:4e:2f:c8:3f:bb:f4:34:a9:7d: 3a:06:45:35:04:32:ab:db:d5:be:e1:b9:21:e8:0f:c2:4e:6c: a9:5b:36:2b:25:ae:b2:81:69:ba:10:38:53:ff:48:0e:ad:b3: 26:35:b6:02:d2:22:3b:99:bf:e0:1d:e8:d0:ac:a3:d0:8e:8d: 36:24:e1:6c:2f:30:f7:2d:dc:10:b8:a5:a2:20:8d:db:04:d5: 0c:a0:31:90:4f:c9:67:c6:87:76:e3:96:76:86:f3:4f:b5:19: 9c:43:c0:20:1d:dc:ee:67:f3:aa:e0:36:f5:e9:7a:58:4e:65: b0:4c:da:42:12:b3:7f:44:1c:04:3c:dc:ff:e9:5d:c6:f6:84: 31:6b:fc:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDOLldJm+k4sI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YzMwMmFiMjMtOWU4MC00MTk5LWE0YTMtOGEyYjg0NTQxMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokmNV8HR0onf4k5Gxf3rgAjNoGNISEbDI5GO bp1y5czAm6T1KCmO+S/2QC/5sgjTb0vy6QbuvT303cIE0H/tUm6pw7ErDDdhiWRh MwqkkXyv+lbUJfbxuBK0qZXVW9yeLLciM0P9qPz5iiivEmFYTkEIF9/NmUyVoJrv nP7/Enf87HYrb2i6a8r1egtcpW/zRiUvTb4QfKyTOQusBeOZ8nWmHeRWJE0SrqdH BF1uoDDGOj+zsVYaDc+ihZoTrQnQgxUlf7hdJumxogsYcFbkNR/ndo7OBfx4PkRX pOhfGo3RfDuQ6RklKmkwVcV3da80k0vOANWN4DVz/DAr2nUdwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXXBqlAqI2jYWdQvPGf6TTB5c0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE5MGQzOTUtYzI1MC0z OWY4LTg1OGEtOGQ5MWJkZGMyNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE80m9NidPXo8AcXakeGm9Rt69RKNNh/4DJeg9OTSb5qDF+QcqmOuoYn ncytrdqZyT1zcpr7CFNmnnScZpetqHdx1MTQMVj2CJ5+qk01HMUJkkXBdQLNqOQl 1TI+uukqu+rXXLDuiyTF+sB8wE7LHDeUuVVMvk4vyD+79DSpfToGRTUEMqvb1b7h uSHoD8JObKlbNislrrKBaboQOFP/SA6tsyY1tgLSIjuZv+Ad6NCso9COjTYk4Wwv MPct3BC4paIgjdsE1QygMZBPyWfGh3bjlnaG80+1GZxDwCAd3O5n86rgNvXpelhO ZbBM2kISs39EHAQ83P/pXcb2hDFr/B4= -----END CERTIFICATE-----Generated at Sun Oct 18 11:32:09 2026 by rpki-client