$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa File: d8204647-1d71-34d9-8c5a-17c50fa10403.roa (raw, json) Hash identifier: JDIHleUQZLycRpf7yGclFupfdMR/aJU75+ZtIHzur2g= Subject key identifier: 9D:B0:82:A4:EA:91:41:83:A3:62:C5:B7:A9:82:52:80:56:E9:C4:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CFE2D6B9A2D0EBAD7580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 36471 IP address blocks: 209.255.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cf:e2:d6:b9:a2:d0:eb:ad:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=d3f24390-30b8-4ca3-b791-84cc3d396ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3c:93:0a:ce:8d:fb:ca:42:07:34:67:36:f0: dc:23:c7:0a:b4:fe:77:1d:51:6c:69:83:94:9a:c0: 27:e4:a7:cc:0a:e4:37:e3:e3:f5:bf:69:80:f7:73: 79:3b:44:1a:ce:97:7e:d3:aa:d9:41:27:7d:49:fe: 66:a1:d1:aa:be:b6:c4:95:19:ea:20:e3:00:b3:8a: e8:58:1c:7e:19:c6:ae:a2:46:7e:d2:6e:1c:d0:c7: 35:d7:9f:e2:e4:e7:9d:7f:5e:ed:7a:09:4f:dd:00: a4:80:aa:b4:12:dd:c8:62:42:23:9c:29:df:52:80: 82:fc:36:94:41:43:63:52:c0:a7:b1:4a:e0:18:6f: ad:0a:d4:05:b0:a4:ca:93:dc:66:96:89:6f:0c:fe: 6a:15:53:9a:51:4a:46:6e:06:fe:7d:a9:e2:93:0c: 42:0e:d8:7c:8d:b2:d5:1f:89:e5:b5:51:99:59:50: e5:3a:de:55:04:25:00:b3:48:43:27:df:fd:3a:b7: 7b:6b:ec:a8:e0:d2:70:ba:fe:f8:fc:45:f0:43:9b: f7:b1:73:0e:39:4f:95:70:d3:25:47:78:95:1e:28: a7:6b:b9:9a:8a:4b:92:60:7c:0e:bd:5b:25:28:0d: 41:c6:29:8a:9e:a5:c6:3a:a2:b8:b2:d3:53:2f:65: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:82:A4:EA:91:41:83:A3:62:C5:B7:A9:82:52:80:56:E9:C4:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b7:88:63:1a:e2:d3:b7:55:bd:df:93:ce:8e:eb:93:24:bf: 67:47:fd:78:ff:c9:14:d9:b3:fb:bd:e1:69:d4:1a:91:c5:e4: e6:98:94:b4:0c:e1:6a:33:6a:be:60:38:83:98:46:78:cd:0c: e5:33:f8:c8:e0:7d:79:65:da:99:ca:51:0d:1e:4d:91:e4:26: 41:45:5f:0a:d7:4f:e9:93:7e:ea:c6:e2:1d:36:5e:be:10:04: 92:03:ad:a8:2b:dc:20:67:28:65:10:47:9f:e0:c9:2c:a9:b8: df:67:fe:cd:2e:6a:f0:7f:8c:f8:b3:dd:24:cf:e6:53:5b:c3: 9f:da:35:7b:c8:73:0f:30:31:1b:7b:aa:f8:7b:53:b9:77:1a: 41:4b:c7:98:59:c7:54:47:9b:7b:8b:9a:ed:32:09:d7:1f:44: cc:7c:db:43:1b:e6:dc:a9:9b:c4:41:8b:f7:6c:34:13:84:22: c1:14:e6:1b:17:a2:f9:78:90:f5:56:3d:95:b8:0e:a3:5c:01: f0:d5:5d:b2:dd:3e:bb:6e:a4:69:b5:cc:88:ff:14:e1:76:d7: 88:ed:bd:38:97:71:2f:da:9a:cb:83:44:65:ba:dd:dd:5b:3b: d9:f8:99:48:88:67:f8:7e:00:25:eb:ca:d7:a8:fc:9a:19:b7: 2b:88:18:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysc/i1rmi0OutdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZDNmMjQzOTAtMzBiOC00Y2EzLWI3OTEtODRjYzNkMzk2Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDyTCs6N+8pCBzRnNvDcI8cKtP53HVFsaYOU msAn5KfMCuQ34+P1v2mA93N5O0Qazpd+06rZQSd9Sf5modGqvrbElRnqIOMAs4ro WBx+GcauokZ+0m4c0Mc115/i5Oedf17teglP3QCkgKq0Et3IYkIjnCnfUoCC/DaU QUNjUsCnsUrgGG+tCtQFsKTKk9xmlolvDP5qFVOaUUpGbgb+fanikwxCDth8jbLV H4nltVGZWVDlOt5VBCUAs0hDJ9/9Ord7a+yo4NJwuv74/EXwQ5v3sXMOOU+VcNMl R3iVHiina7maikuSYHwOvVslKA1BximKnqXGOqK4stNTL2WnjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2wgqTqkUGDo2LFt6mCUoBW6cQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDgyMDQ2NDctMWQ3MS0z NGQ5LThjNWEtMTdjNTBmYTEwNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO3iGMa4tO3Vb3fk86O65Mkv2dH/Xj/yRTZs/u94WnUGpHF5OaYlLQM 4Wozar5gOIOYRnjNDOUz+MjgfXll2pnKUQ0eTZHkJkFFXwrXT+mTfurG4h02Xr4Q BJIDragr3CBnKGUQR5/gySypuN9n/s0uavB/jPiz3STP5lNbw5/aNXvIcw8wMRt7 qvh7U7l3GkFLx5hZx1RHm3uLmu0yCdcfRMx820Mb5typm8RBi/dsNBOEIsEU5hsX ovl4kPVWPZW4DqNcAfDVXbLdPrtupGm1zIj/FOF214jtvTiXcS/amsuDRGW63d1b O9n4mUiIZ/h+ACXryteo/JoZtyuIGM4= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:46 2026 by rpki-client