$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0b9ff6b-dfe0-320e-aa50-4279ab143ea5.roa File: c0b9ff6b-dfe0-320e-aa50-4279ab143ea5.roa (raw, json) Hash identifier: kq1HpcdVbpZsXl5Tji3h73J8HRR3CtrPekn2odu27ns= Subject key identifier: B4:1A:5E:72:D3:52:90:A6:AE:F0:3D:73:7C:F6:D2:D7:45:C2:3C:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1EBD1AB0D968E137EFAA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0b9ff6b-dfe0-320e-aa50-4279ab143ea5.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 30471 IP address blocks: 209.125.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:eb:d1:ab:0d:96:8e:13:7e:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=fdfca3cb-f7a8-4cc4-9912-0c6015c08380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:b4:08:54:bb:df:ad:e5:c7:b8:99:fa:58: a5:8f:bc:9f:85:63:1e:e0:37:ad:bd:42:d9:8a:41: c8:67:f5:7f:0b:b8:27:85:8e:27:ca:2d:07:b6:b4: 2b:bc:d5:ad:0f:6f:a2:fa:9a:8a:ae:2c:fb:66:d4: 48:b9:74:4d:77:e9:60:3b:0c:b0:fd:67:b0:6b:5f: db:bc:66:e7:7d:7d:1e:84:e6:b2:d3:ea:0b:e2:27: f7:e7:81:a1:d1:66:a8:20:fc:c0:6b:8b:08:b6:30: 1f:e1:a5:cf:18:af:6d:d4:0f:6e:24:23:e2:50:0a: 1b:3a:f4:ff:3a:b3:62:e2:1a:4c:00:19:75:c2:90: b3:2f:da:8d:22:95:ae:92:21:24:3e:75:f4:1d:8c: 8a:17:4d:ba:2d:61:3e:1c:4c:84:cc:d5:c2:a8:29: af:9b:ad:95:ef:42:6f:f1:4b:6a:40:93:b9:b8:5f: 5f:e7:50:45:31:d6:98:e3:3b:a1:6c:8e:42:d3:1e: e6:a3:61:18:1e:e8:b5:31:07:89:d2:d6:d9:1b:fc: bf:12:6a:98:bc:f4:9d:ec:b4:f9:39:47:8f:ef:42: de:ff:3a:05:fc:f7:f5:dc:54:ca:5c:20:c5:2f:9b: 81:9b:39:e6:06:b9:9f:2f:64:5f:37:d8:9a:55:e2: 7e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1A:5E:72:D3:52:90:A6:AE:F0:3D:73:7C:F6:D2:D7:45:C2:3C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0b9ff6b-dfe0-320e-aa50-4279ab143ea5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.125.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e1:fb:66:ea:bc:2e:40:f1:19:91:57:1f:9c:0c:ce:a3:94: b9:c6:91:71:41:f5:d6:aa:5a:b9:98:75:20:fa:23:d4:d2:1a: 30:98:81:f6:db:b3:79:db:09:a7:65:78:0d:64:9b:4d:08:a9: 87:1b:8f:ff:ee:a0:fc:e3:c2:0b:34:a1:95:6d:8b:74:bd:bb: b2:46:1a:b3:1c:79:e0:c3:87:89:1d:82:1e:6e:f2:46:0e:cd: e5:9b:f3:48:54:21:4b:78:0e:83:5b:45:c4:b1:7a:a7:ef:e3: 4b:61:d3:a6:27:1b:5b:f2:90:16:91:f4:98:ff:77:41:af:a8: b2:71:6b:28:7b:4f:75:b8:d2:ac:ff:c5:c8:aa:fd:f2:00:3f: 3c:8a:49:26:80:35:54:d4:0e:a2:e7:93:ea:6a:be:04:4c:09: 01:d8:f0:a1:31:c6:f4:2f:86:0a:e8:61:01:ec:87:d0:44:7c: 6f:6e:95:a9:5f:4d:da:dd:07:ef:a1:e6:c6:1b:8c:ee:d3:23: 26:e0:d2:db:96:15:f0:af:a9:2b:5e:c3:ab:65:59:62:44:72: a4:22:93:27:7f:db:66:4d:19:cf:12:b4:62:0a:f0:77:93:e2: d9:4a:49:e8:30:a0:24:90:35:d3:5e:53:d1:df:66:ea:62:c0: b7:a7:d9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysevRqw2WjhN++qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZmRmY2EzY2ItZjdhOC00Y2M0LTk5MTItMGM2MDE1YzA4MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw20CFS7363lx7iZ+lilj7yfhWMe4DetvULZ ikHIZ/V/C7gnhY4nyi0HtrQrvNWtD2+i+pqKriz7ZtRIuXRNd+lgOwyw/Wewa1/b vGbnfX0ehOay0+oL4if354Gh0WaoIPzAa4sItjAf4aXPGK9t1A9uJCPiUAobOvT/ OrNi4hpMABl1wpCzL9qNIpWukiEkPnX0HYyKF026LWE+HEyEzNXCqCmvm62V70Jv 8UtqQJO5uF9f51BFMdaY4zuhbI5C0x7mo2EYHui1MQeJ0tbZG/y/EmqYvPSd7LT5 OUeP70Le/zoF/Pf13FTKXCDFL5uBmznmBrmfL2RfN9iaVeJ+cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQaXnLTUpCmrvA9c3z20tdFwjwaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzBiOWZmNmItZGZlMC0z MjBlLWFhNTAtNDI3OWFiMTQzZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTh+2bqvC5A8RmRVx+cDM6jlLnGkXFB9daqWrmYdSD6I9TSGjCYgfbb s3nbCadleA1km00IqYcbj//uoPzjwgs0oZVti3S9u7JGGrMceeDDh4kdgh5u8kYO zeWb80hUIUt4DoNbRcSxeqfv40th06YnG1vykBaR9Jj/d0GvqLJxayh7T3W40qz/ xciq/fIAPzyKSSaANVTUDqLnk+pqvgRMCQHY8KExxvQvhgroYQHsh9BEfG9ulalf TdrdB++h5sYbjO7TIybg0tuWFfCvqStew6tlWWJEcqQikyd/22ZNGc8StGIK8HeT 4tlKSegwoCSQNdNeU9HfZupiwLen2ak= -----END CERTIFICATE-----Generated at Thu Aug 27 16:05:12 2026 by rpki-client