$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa File: d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa (raw, json) Hash identifier: 8ZgabgBXWRIPZupZVXTgqplfvt4BJcQyyI9k1NSZlgw= Subject key identifier: D0:E7:28:C4:D4:B0:66:74:AF:9A:4D:BD:39:EF:78:AC:74:87:62:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1D0B8F98AB7E776DF2E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 53271 IP address blocks: 209.192.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:d0:b8:f9:8a:b7:e7:76:df:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=f49007e0-558e-433a-9938-22ef79ec2aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:c4:e5:ab:cc:9f:17:d1:ee:af:ac:2c:3d: f9:81:45:a7:5a:a4:dd:c6:2d:75:e8:52:18:c2:b2: b1:d6:0d:ea:96:4e:45:3c:2a:f8:ee:e6:19:07:df: 0f:41:0a:36:e6:46:a4:cf:7b:f1:fa:3b:cf:32:32: bf:36:52:db:49:32:e6:0e:3c:76:62:ad:c0:69:c9: 1f:97:78:e7:28:b4:1b:76:b2:8c:0d:34:06:4e:df: c5:f9:a9:93:95:8b:7e:6a:1f:67:0b:b0:4c:95:a3: f9:c1:3e:59:86:ec:2b:92:77:e0:e9:a9:bc:e0:5a: dc:b0:4c:d5:2c:8c:46:9c:b4:3a:44:db:cb:96:e6: cf:82:a3:b3:50:54:f9:43:a1:64:3d:7f:48:ff:64: 03:c6:8d:f0:84:33:32:48:9b:52:ff:d9:e0:9b:5f: dd:2a:42:fe:ba:04:87:ec:6c:6d:d1:19:d0:0a:8d: 3f:0a:57:6a:65:3f:64:f1:e7:d7:33:6c:3b:fb:d8: 8d:f0:0d:b6:c6:b5:87:c4:0c:7e:88:90:2b:89:eb: 9f:05:ee:c2:a1:f3:80:bb:8a:02:77:75:4f:6b:cd: 6b:d2:23:c6:16:29:b5:f8:a8:d0:08:53:50:2c:db: c2:db:26:bf:48:f1:96:c1:b6:b1:4e:21:ee:6a:33: 95:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E7:28:C4:D4:B0:66:74:AF:9A:4D:BD:39:EF:78:AC:74:87:62:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:38:4a:4e:a5:c0:ec:be:9a:c9:78:72:76:7b:e2:47:59:b0: 16:d3:7a:b1:df:50:c5:c6:08:78:80:eb:62:4e:87:34:21:6b: 06:45:6f:ec:3e:dc:3e:02:70:73:f6:ed:e6:43:bb:d3:d4:16: 8c:31:9c:60:7c:13:26:aa:04:7a:be:b7:e6:85:c7:98:ca:85: e2:21:7c:5a:f5:72:b7:ee:cc:2a:65:3b:c9:a1:01:47:87:5f: a3:21:57:17:18:95:5d:00:76:a5:f4:a8:3a:ca:d8:ec:1e:a0: 8c:5b:20:99:3f:a8:8d:f2:e3:37:3b:0f:96:04:c5:a3:fe:3c: 92:29:41:be:e3:8a:e9:24:43:a8:23:04:11:f7:83:d2:27:21: fd:a5:b5:de:3b:51:52:30:8a:ff:dd:8e:f8:de:1e:2c:de:12: 2d:62:e5:d0:49:ed:3a:b5:0e:dc:9c:15:c1:1c:d0:07:4b:40: 57:c4:be:0c:a8:e7:e2:a7:1c:64:22:14:71:6e:4a:5b:47:d5: e4:a8:b2:a1:71:24:9a:07:42:cc:76:6f:e0:f4:35:6b:99:48: 55:8a:23:e2:0e:51:dc:8f:e2:c0:5d:8f:71:c7:68:aa:58:02: 31:9f:10:74:51:73:c4:d5:1d:e2:24:5f:36:86:33:a6:14:63: 1d:5a:0c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysdC4+Yq353bfLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZjQ5MDA3ZTAtNTU4ZS00MzNhLTk5MzgtMjJlZjc5ZWMyYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj07E5avMnxfR7q+sLD35gUWnWqTdxi116FIY wrKx1g3qlk5FPCr47uYZB98PQQo25kakz3vx+jvPMjK/NlLbSTLmDjx2Yq3Aackf l3jnKLQbdrKMDTQGTt/F+amTlYt+ah9nC7BMlaP5wT5Zhuwrknfg6am84FrcsEzV LIxGnLQ6RNvLlubPgqOzUFT5Q6FkPX9I/2QDxo3whDMySJtS/9ngm1/dKkL+ugSH 7Gxt0RnQCo0/CldqZT9k8efXM2w7+9iN8A22xrWHxAx+iJArieufBe7CofOAu4oC d3VPa81r0iPGFim1+KjQCFNQLNvC2ya/SPGWwbaxTiHuajOVZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDnKMTUsGZ0r5pNvTnveKx0h2IpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFhOTk2ZDEtZjk3Yy0z OGQ2LWExY2YtNzYzNmIxMTYwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cA7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF04Sk6lwOy+msl4cnZ74kdZsBbTerHfUMXGCHiA62JOhzQhawZFb+w+ 3D4CcHP27eZDu9PUFowxnGB8EyaqBHq+t+aFx5jKheIhfFr1crfuzCplO8mhAUeH X6MhVxcYlV0AdqX0qDrK2OweoIxbIJk/qI3y4zc7D5YExaP+PJIpQb7jiukkQ6gj BBH3g9InIf2ltd47UVIwiv/djvjeHizeEi1i5dBJ7Tq1DtycFcEc0AdLQFfEvgyo 5+KnHGQiFHFuSltH1eSosqFxJJoHQsx2b+D0NWuZSFWKI+IOUdyP4sBdj3HHaKpY AjGfEHRRc8TVHeIkXzaGM6YUYx1aDJQ= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:57 2026 by rpki-client