$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbe057d5-ccbc-3f87-9174-ad610a0ef3b7.roa File: dbe057d5-ccbc-3f87-9174-ad610a0ef3b7.roa (raw, json) Hash identifier: Eo79Tcx3G4I2tuUlK1VzHvI0cpXS0SEvl1vTcKEbOSU= Subject key identifier: 52:D1:F3:57:0D:FF:8B:55:B8:A1:B7:6C:02:0F:C3:CD:1B:48:53:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA7877EA654C1E8668D23A7E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbe057d5-ccbc-3f87-9174-ad610a0ef3b7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 209.253.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:7e:a6:54:c1:e8:66:8d:23:a7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1fa6992e-0dba-42ba-b641-13520af5aef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7a:70:bf:26:23:df:2c:c6:7a:aa:79:27:1b: c4:8a:bb:4e:0a:27:b4:b7:dd:6d:65:1b:e0:2f:3f: 24:7f:ca:53:8c:05:7f:05:26:ab:9d:5c:98:a5:e0: 45:76:86:61:c4:d9:82:17:fd:21:92:4e:57:e7:e0: 0a:ef:88:36:d4:86:ff:7a:e9:d3:c8:eb:c3:51:54: c6:22:ac:43:2e:de:e0:40:02:6c:59:91:1e:11:91: e4:82:af:c4:4e:d5:c4:61:4c:a7:f2:e2:76:c1:c5: 02:ae:2b:06:89:c7:a7:79:d6:38:1f:5d:2e:a4:6b: ab:e5:37:b2:40:e0:c9:c0:77:a4:50:5b:0d:19:38: 39:14:84:72:92:b7:4a:68:17:54:83:4d:b5:f4:5e: 90:8e:ea:90:d5:a6:99:9d:04:d7:2c:cf:cd:d7:a0: 06:1c:19:fd:26:74:fa:f1:76:bc:95:68:7e:45:16: cc:6d:6e:82:84:74:29:d4:62:39:73:24:2d:9c:b4: 36:e2:fe:0c:df:88:4c:37:a3:b1:91:5e:93:76:84: 22:5a:29:6f:23:1e:36:47:da:c2:58:20:a2:58:ca: 4a:27:53:b4:a5:27:9b:18:1c:2b:19:f0:ec:6f:bd: 7f:bc:38:d0:18:92:68:12:09:ac:05:ba:fb:b6:2c: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D1:F3:57:0D:FF:8B:55:B8:A1:B7:6C:02:0F:C3:CD:1B:48:53:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbe057d5-ccbc-3f87-9174-ad610a0ef3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7f:66:1e:4d:36:28:f1:7a:cd:c2:ca:56:18:f1:dc:f9:b9: 80:1d:38:c9:6a:08:51:9a:23:88:73:db:21:12:ab:8c:5c:84: 06:43:b8:32:58:79:e3:73:a9:51:e1:1c:b2:38:24:3b:e8:b8: 83:86:9c:f7:59:86:6a:7d:cd:a0:ea:99:34:02:20:57:84:64: 78:37:4d:bc:b9:ad:24:01:c1:9f:31:df:d8:6f:68:26:35:bc: fa:e7:c7:c5:8e:4e:0d:e2:75:c1:7a:89:81:78:b7:a1:df:aa: b8:aa:5a:91:b9:a7:94:31:a4:23:d5:0c:03:80:c7:64:97:ac: 4a:5c:69:b5:ab:15:c7:7c:41:d7:27:76:a4:c6:a7:b5:38:50: b7:24:ae:fb:f1:63:63:a4:96:f8:e6:ea:57:e8:7b:0d:36:92: 83:f1:e6:56:3c:a0:d4:4e:e3:25:a7:de:b4:3f:5d:49:a7:43: ea:e8:07:b3:b3:6f:3a:72:66:f2:86:37:4d:e1:cb:6d:8e:42: 25:51:8b:49:df:7c:51:10:ce:c8:fb:44:16:de:7f:d0:f0:5e: 55:78:25:47:da:1d:5c:cb:83:c4:b0:e0:bf:81:9e:3b:ea:99: 44:a2:71:48:67:1f:12:48:9a:6d:aa:1a:f5:3a:c7:f0:d9:ce: 6a:83:ad:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh36mVMHoZo0jp+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWZhNjk5MmUtMGRiYS00MmJhLWI2NDEtMTM1MjBhZjVhZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHpwvyYj3yzGeqp5JxvEirtOCie0t91tZRvg Lz8kf8pTjAV/BSarnVyYpeBFdoZhxNmCF/0hkk5X5+AK74g21Ib/eunTyOvDUVTG IqxDLt7gQAJsWZEeEZHkgq/ETtXEYUyn8uJ2wcUCrisGicenedY4H10upGur5Tey QODJwHekUFsNGTg5FIRykrdKaBdUg0219F6QjuqQ1aaZnQTXLM/N16AGHBn9JnT6 8Xa8lWh+RRbMbW6ChHQp1GI5cyQtnLQ24v4M34hMN6OxkV6TdoQiWilvIx42R9rC WCCiWMpKJ1O0pSebGBwrGfDsb71/vDjQGJJoEgmsBbr7tix3YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLR81cN/4tVuKG3bAIPw80bSFOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGJlMDU3ZDUtY2NiYy0z Zjg3LTkxNzQtYWQ2MTBhMGVmM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f3pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh/Zh5NNijxes3CylYY8dz5uYAdOMlqCFGaI4hz2yESq4xchAZDuDJY eeNzqVHhHLI4JDvouIOGnPdZhmp9zaDqmTQCIFeEZHg3Tby5rSQBwZ8x39hvaCY1 vPrnx8WOTg3idcF6iYF4t6HfqriqWpG5p5QxpCPVDAOAx2SXrEpcabWrFcd8Qdcn dqTGp7U4ULckrvvxY2Oklvjm6lfoew02koPx5lY8oNRO4yWn3rQ/XUmnQ+roB7Oz bzpyZvKGN03hy22OQiVRi0nffFEQzsj7RBbef9DwXlV4JUfaHVzLg8Sw4L+Bnjvq mUSicUhnHxJImm2qGvU6x/DZzmqDrQs= -----END CERTIFICATE-----Generated at Thu Aug 27 15:20:38 2026 by rpki-client