$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa File: bb391dc9-1f19-3e65-be6c-947a5db5500a.roa (raw, json) Hash identifier: 31upWujUAxyijeUQc9rtVeTj72I0duNtLAiWvcQreDs= Subject key identifier: BC:3E:5A:51:A9:C2:B2:1F:BD:C2:66:45:11:88:8A:3E:DD:AA:D9:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1EB772B0B9AACEA27CB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 27338 IP address blocks: 209.192.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:eb:77:2b:0b:9a:ac:ea:27:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=313901b5-b1a3-49a8-9a6c-974cf56d484e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:cf:8c:4a:e0:b6:c0:9e:e5:85:85:52:75: 9a:1f:14:db:25:fe:37:d2:cb:c0:b1:ff:16:e3:61: 59:94:fd:1e:c1:33:70:88:6d:54:c7:7e:7a:bf:3d: 1e:5c:f4:c2:3e:51:d9:7c:0b:48:f9:fa:b4:ac:5b: 2b:e5:24:d0:97:73:e8:1a:c1:59:e5:6a:77:de:99: 82:8b:30:8e:9e:fe:fc:3a:49:d8:61:e7:a5:68:de: e5:9c:99:0e:69:77:c8:f4:ac:e5:ef:f8:fe:63:90: 69:c4:30:f9:a3:93:90:ae:4b:95:c7:2e:b8:7d:aa: f8:02:33:ff:23:8d:7d:56:b9:c1:8f:c7:2e:00:65: 63:c7:3d:2d:11:64:f1:09:9e:52:d2:c7:f8:e7:2e: b5:2d:bf:4f:72:fe:1b:32:87:6d:da:96:ad:7d:9f: c6:e2:d8:3d:6b:c5:73:7f:8c:7e:c1:31:88:25:91: c5:4a:9a:d9:f3:4d:de:e7:30:34:55:6e:55:1b:3d: f1:82:fb:2d:e5:77:0b:cf:c3:1a:ef:85:97:a6:07: eb:c0:ed:1c:32:89:2e:af:20:fd:c3:4f:be:0a:36: 98:69:2e:ea:29:5f:e6:80:48:2d:03:7d:f8:03:81: 08:a2:9a:5e:dc:ce:0f:c0:13:24:4a:f5:6b:52:37: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3E:5A:51:A9:C2:B2:1F:BD:C2:66:45:11:88:8A:3E:DD:AA:D9:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4f:e1:3d:f7:c8:9f:7f:c4:3b:7e:1c:a4:00:c2:bf:4c:28: 23:eb:18:21:aa:6f:9e:43:f4:89:ca:66:3f:3d:a9:e5:1f:00: ad:50:8f:86:23:4c:da:ba:ce:92:18:be:55:b1:33:11:9b:af: 00:76:42:0f:31:b8:d0:27:a6:8b:ad:e0:a3:0c:92:74:ff:b7: 3c:b0:75:9c:76:03:de:bf:88:a1:d0:cf:b0:c1:a8:ab:fa:9e: a2:ca:13:41:f2:20:9c:c4:7b:5f:b2:64:31:47:4e:17:51:23: b1:8b:7b:f6:74:cd:ae:6b:4e:4d:0a:cb:12:55:48:9a:e0:e9: ff:c8:87:13:a9:b5:16:1b:9d:71:90:15:44:58:89:1d:91:3e: 8e:d9:01:df:66:06:5a:8d:7e:ea:b5:d4:c4:0c:76:d8:0f:c5: e7:5c:ff:de:1c:17:25:35:f7:62:95:e4:68:c4:29:60:59:00: 44:df:43:0d:80:f7:34:15:ef:31:ea:b0:fe:11:59:4b:76:f0: 6a:a8:28:34:3e:f0:5a:7b:cb:d3:cb:5d:9b:88:b0:1c:eb:cd: 86:b4:38:db:b4:6e:8a:b0:d8:1d:bd:73:da:a2:45:1c:7f:1a: de:ca:74:a3:78:c8:c5:40:c5:4b:e3:1e:0e:df:ef:c7:b1:20: e9:a5:59:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yset3KwuarOony4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MzEzOTAxYjUtYjFhMy00OWE4LTlhNmMtOTc0Y2Y1NmQ0ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhPPjErgtsCe5YWFUnWaHxTbJf430svAsf8W 42FZlP0ewTNwiG1Ux356vz0eXPTCPlHZfAtI+fq0rFsr5STQl3PoGsFZ5Wp33pmC izCOnv78OknYYeelaN7lnJkOaXfI9Kzl7/j+Y5BpxDD5o5OQrkuVxy64far4AjP/ I419VrnBj8cuAGVjxz0tEWTxCZ5S0sf45y61Lb9Pcv4bModt2patfZ/G4tg9a8Vz f4x+wTGIJZHFSprZ803e5zA0VW5VGz3xgvst5XcLz8Ma74WXpgfrwO0cMokuryD9 w0++CjaYaS7qKV/mgEgtA334A4EIoppe3M4PwBMkSvVrUjd4PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw+WlGpwrIfvcJmRRGIij7dqtkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmIzOTFkYzktMWYxOS0z ZTY1LWJlNmMtOTQ3YTVkYjU1MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBP4T33yJ9/xDt+HKQAwr9MKCPrGCGqb55D9InKZj89qeUfAK1Qj4Yj TNq6zpIYvlWxMxGbrwB2Qg8xuNAnpout4KMMknT/tzywdZx2A96/iKHQz7DBqKv6 nqLKE0HyIJzEe1+yZDFHThdRI7GLe/Z0za5rTk0KyxJVSJrg6f/IhxOptRYbnXGQ FURYiR2RPo7ZAd9mBlqNfuq11MQMdtgPxedc/94cFyU192KV5GjEKWBZAETfQw2A 9zQV7zHqsP4RWUt28GqoKDQ+8Fp7y9PLXZuIsBzrzYa0ONu0boqw2B29c9qiRRx/ Gt7KdKN4yMVAxUvjHg7f78exIOmlWfc= -----END CERTIFICATE-----Generated at Thu Aug 27 14:14:53 2026 by rpki-client