$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd90f217-825c-3ec0-84d2-d22078c2d6c9.roa File: dd90f217-825c-3ec0-84d2-d22078c2d6c9.roa (raw, json) Hash identifier: pic+WlmGous6DT1ha7Ftfu6Icach8QmcXB0reAwEyG0= Subject key identifier: FF:4F:29:9C:09:B5:70:E1:BF:18:B2:21:CE:C5:65:E5:60:69:E0:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E4824B7FA0C68A767A7835880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd90f217-825c-3ec0-84d2-d22078c2d6c9.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 209.165.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:b7:fa:0c:68:a7:67:a7:83:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=a1d9992f-8bc1-4203-8c4c-d41ccebfbc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fb:76:e2:30:0c:cc:c8:48:ce:f1:82:57:84: c6:ea:d5:ba:96:73:36:9b:7a:63:bd:d0:49:0e:d5: a5:5b:ce:44:df:ad:90:6e:c7:15:5c:11:39:24:49: c2:ea:39:04:f6:27:d3:c5:48:be:72:eb:40:ef:50: 56:2f:4f:05:14:7f:c1:dd:a0:3c:bc:e3:2c:52:3f: 08:79:df:3e:3d:2c:ba:4c:a9:d5:3e:a5:5d:94:16: e9:69:08:2e:c3:52:08:e4:18:a5:6e:e2:71:05:12: b4:86:a8:8e:4c:75:0f:46:cd:11:f3:5b:f9:a6:68: 39:bc:02:49:63:5d:38:b6:5a:2d:be:06:f6:45:62: 5b:a4:99:45:09:c0:2c:a1:60:0c:a6:5f:60:f0:8f: 34:04:e6:df:ff:5f:ee:84:48:cf:05:ab:84:d4:ed: 3a:a5:2b:8a:50:28:60:c9:0f:5f:08:d8:cc:ce:38: b6:51:4b:f7:c5:b4:07:89:91:48:3f:d4:e0:ef:9a: f7:f9:d5:ed:c0:ad:2d:eb:1b:e0:20:2d:9f:b0:e4: ba:88:fa:0f:d4:a7:52:f2:76:81:21:79:9f:fe:18: 50:8f:9f:5a:05:7d:5d:f5:70:7d:6f:bf:5b:32:d6: d2:47:17:79:20:d4:6b:28:7b:4a:dc:b5:85:47:e8: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:29:9C:09:B5:70:E1:BF:18:B2:21:CE:C5:65:E5:60:69:E0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd90f217-825c-3ec0-84d2-d22078c2d6c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c0:5a:0d:ee:68:d4:43:fb:fd:0b:9e:6b:80:d4:14:ae:6c: 32:4c:95:ee:21:af:a6:99:eb:ed:77:6f:20:8b:20:94:32:21: b5:e2:c0:93:d6:11:20:9b:2f:38:6a:3d:38:7c:71:08:8c:ac: 05:47:77:22:ce:c7:46:fe:2f:a8:6f:98:c7:21:d8:d1:b3:af: 30:ef:1d:dc:57:84:44:59:9d:f0:4a:bd:6b:be:56:93:93:4e: 04:bf:e6:63:c6:14:86:16:1c:fa:a8:cb:96:e2:df:2d:8e:ad: 18:77:21:61:28:ab:fa:cb:ff:b1:21:05:64:d9:44:c6:a9:a6: 68:68:16:b8:aa:8a:1c:61:f0:f1:00:57:46:16:6e:6b:72:f5: 89:cd:b3:a4:77:3c:9d:d6:b3:6a:f1:bc:83:4f:a5:ef:d8:c2: 2c:1d:fa:be:85:14:fd:9a:da:be:e0:46:97:84:86:f2:e3:25: d4:53:fd:d9:40:88:ef:96:b6:c9:45:2e:3b:b8:f0:1b:6d:24: 37:94:89:bb:03:ac:ff:1f:bc:d4:2e:ac:9c:2a:cb:8e:b1:75: f4:81:a0:0e:ac:e2:10:58:3c:b1:eb:df:6c:6c:8f:e4:9d:58: 8d:18:0e:20:52:6d:74:9a:a3:86:9d:a3:19:c4:e9:21:8e:55: 1e:94:a9:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJLf6DGinZ6eDWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk YTFkOTk5MmYtOGJjMS00MjAzLThjNGMtZDQxY2NlYmZiYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPt24jAMzMhIzvGCV4TG6tW6lnM2m3pjvdBJ DtWlW85E362QbscVXBE5JEnC6jkE9ifTxUi+cutA71BWL08FFH/B3aA8vOMsUj8I ed8+PSy6TKnVPqVdlBbpaQguw1II5BilbuJxBRK0hqiOTHUPRs0R81v5pmg5vAJJ Y104tlotvgb2RWJbpJlFCcAsoWAMpl9g8I80BObf/1/uhEjPBauE1O06pSuKUChg yQ9fCNjMzji2UUv3xbQHiZFIP9Tg75r3+dXtwK0t6xvgIC2fsOS6iPoP1KdS8naB IXmf/hhQj59aBX1d9XB9b79bMtbSRxd5INRrKHtK3LWFR+iA0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9PKZwJtXDhvxiyIc7FZeVgaeDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGQ5MGYyMTctODI1Yy0z ZWMwLTg0ZDItZDIyMDc4YzJkNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHAWg3uaNRD+/0LnmuA1BSubDJMle4hr6aZ6+13byCLIJQyIbXiwJPW ESCbLzhqPTh8cQiMrAVHdyLOx0b+L6hvmMch2NGzrzDvHdxXhERZnfBKvWu+VpOT TgS/5mPGFIYWHPqoy5bi3y2OrRh3IWEoq/rL/7EhBWTZRMappmhoFriqihxh8PEA V0YWbmty9YnNs6R3PJ3Ws2rxvINPpe/Ywiwd+r6FFP2a2r7gRpeEhvLjJdRT/dlA iO+WtslFLju48BttJDeUibsDrP8fvNQurJwqy46xdfSBoA6s4hBYPLHr32xsj+Sd WI0YDiBSbXSao4adoxnE6SGOVR6Uqfg= -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:42 2026 by rpki-client