$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa File: d8204647-1d71-34d9-8c5a-17c50fa10403.roa (raw, json) Hash identifier: 5CjBOVAwwdGXJCg5kK+4f+45PV3ZZu8UTyU8eQPWKfo= Subject key identifier: 3A:7B:72:A1:64:6F:7B:A6:D3:72:28:DB:99:57:5A:43:FB:CD:14:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7CDE0AB388A1305FD240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 36471 IP address blocks: 209.255.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7c:de:0a:b3:88:a1:30:5f:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=08d26823-71b3-4286-a633-74b77d1e7888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:2c:0d:41:0b:0e:be:c3:66:12:4f:d5:0f: 5d:72:9e:a3:3f:9a:2f:7d:5c:83:db:64:bc:aa:fa: 1f:73:16:bc:46:97:fa:15:c2:65:20:1b:51:8a:5a: 61:0c:27:d1:53:86:36:b2:7e:d7:5b:d9:a2:43:96: 65:ee:71:3d:7d:33:1b:bc:73:4c:ec:82:a9:70:6e: 43:8e:55:92:67:82:cc:e7:b5:96:fb:f8:5d:48:ba: 92:ee:9c:be:cc:dc:7b:82:19:66:16:b6:e3:16:66: 83:33:2e:e1:6b:62:eb:42:0e:d5:1d:21:c6:18:e1: 98:06:6d:f1:24:1f:47:a9:33:f1:52:d8:0f:9d:a1: 2b:dc:5f:00:90:db:0f:16:2a:fb:73:a3:92:b4:a3: 76:34:89:df:ee:9e:d7:4d:ba:fb:0a:db:b0:94:b7: 08:20:df:93:01:e3:c0:a1:f6:dc:cf:3a:d8:73:7b: 67:59:9c:7f:ad:3d:88:bf:26:df:f2:6f:c6:9b:eb: ee:6c:6f:20:97:73:b6:f6:62:94:07:75:3c:a0:86: 15:02:d2:68:4f:71:25:d8:b7:ef:95:3e:5c:32:6a: 11:8d:fc:00:46:7b:bd:32:49:21:47:5a:bc:83:6a: ec:85:47:06:1d:46:24:da:25:9b:6d:18:b4:fd:d1: 8a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7B:72:A1:64:6F:7B:A6:D3:72:28:DB:99:57:5A:43:FB:CD:14:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:2c:5f:ab:b3:5f:9d:7c:c6:6f:56:08:45:a5:4b:b6:b1:bc: 93:bf:3f:73:da:0b:7b:58:5d:90:de:bc:ff:47:17:37:d3:a9: 34:2f:24:2f:92:8f:b3:98:bb:06:29:b1:0b:1f:82:9a:75:25: 02:49:5a:74:81:0d:01:e2:0d:e4:9f:75:2e:ba:6e:83:3b:3a: a5:fd:58:93:62:02:b7:b4:a8:a5:2e:af:cc:4a:3a:09:33:a5: 7b:5e:96:a4:3d:d8:c0:73:fd:76:55:21:20:1e:57:4f:63:c1: 35:f4:13:71:27:50:c5:56:ab:a0:fa:58:96:c7:f7:f9:44:74: 59:73:6d:5d:3f:10:dc:62:00:ad:82:93:fc:13:c4:f5:ee:b2: 70:fe:e5:2b:44:a5:b9:1c:8d:a1:bd:1e:55:03:f1:b2:a2:01: 66:51:4e:05:9b:57:3c:8f:fc:e0:ed:b7:77:4f:fa:02:83:50: 21:a2:85:84:98:ba:7e:62:ef:58:fb:89:60:c5:a9:0c:f9:45: b1:30:20:87:d9:d3:bc:70:ef:55:9a:44:3c:d1:a4:43:b7:4d: b0:92:db:40:02:65:07:7e:76:ee:6e:df:12:31:ae:13:ea:d7: 09:94:c1:15:52:45:8e:4e:57:1f:6c:e6:0a:7b:63:e8:21:44: 73:87:ec:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXzeCrOIoTBf0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MDhkMjY4MjMtNzFiMy00Mjg2LWE2MzMtNzRiNzdkMWU3ODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphMsDUELDr7DZhJP1Q9dcp6jP5ovfVyD22S8 qvofcxa8Rpf6FcJlIBtRilphDCfRU4Y2sn7XW9miQ5Zl7nE9fTMbvHNM7IKpcG5D jlWSZ4LM57WW+/hdSLqS7py+zNx7ghlmFrbjFmaDMy7ha2LrQg7VHSHGGOGYBm3x JB9HqTPxUtgPnaEr3F8AkNsPFir7c6OStKN2NInf7p7XTbr7CtuwlLcIIN+TAePA ofbczzrYc3tnWZx/rT2Ivybf8m/Gm+vubG8gl3O29mKUB3U8oIYVAtJoT3El2Lfv lT5cMmoRjfwARnu9MkkhR1q8g2rshUcGHUYk2iWbbRi0/dGKUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp7cqFkb3um03Io25lXWkP7zRSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDgyMDQ2NDctMWQ3MS0z NGQ5LThjNWEtMTdjNTBmYTEwNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4sX6uzX518xm9WCEWlS7axvJO/P3PaC3tYXZDevP9HFzfTqTQvJC+S j7OYuwYpsQsfgpp1JQJJWnSBDQHiDeSfdS66boM7OqX9WJNiAre0qKUur8xKOgkz pXtelqQ92MBz/XZVISAeV09jwTX0E3EnUMVWq6D6WJbH9/lEdFlzbV0/ENxiAK2C k/wTxPXusnD+5StEpbkcjaG9HlUD8bKiAWZRTgWbVzyP/ODtt3dP+gKDUCGihYSY un5i71j7iWDFqQz5RbEwIIfZ07xw71WaRDzRpEO3TbCS20ACZQd+du5u3xIxrhPq 1wmUwRVSRY5OVx9s5gp7Y+ghRHOH7HU= -----END CERTIFICATE-----Generated at Tue Oct 13 17:47:44 2026 by rpki-client