$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8f7abc3-7233-3bff-bd30-fbe4f371750c.roa File: f8f7abc3-7233-3bff-bd30-fbe4f371750c.roa (raw, json) Hash identifier: Cgt2rnrxHDRiDRVYGYw0zAgyz+j9f5lEz79uGlQE7d4= Subject key identifier: 6A:27:FA:67:6C:25:97:FA:A4:4A:01:7B:F9:63:AB:A6:F3:C2:3A:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ECA6C6C625C4DA9B1CBA42BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8f7abc3-7233-3bff-bd30-fbe4f371750c.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 7029 IP address blocks: 209.2.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:6c:62:5c:4d:a9:b1:cb:a4:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=1e16541e-b6a0-4c53-8b10-b221fe509686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:82:57:ad:0f:a9:5b:05:df:e8:2a:f0:c7: 55:31:0d:7a:1c:0a:d6:ab:9e:38:73:ea:13:0c:66: a1:50:53:bf:81:e0:7c:56:be:50:cb:5e:05:05:09: c1:f2:fa:ae:b1:44:2b:12:79:ac:71:2c:bd:51:37: 0b:70:e3:2f:57:1d:ce:1e:fe:95:f0:76:fd:e1:a0: 43:16:51:de:94:d8:d0:57:81:7e:d9:7c:2f:2f:23: 74:fc:4b:65:77:70:e9:1d:c1:8d:8c:cb:d3:f2:6c: 22:54:50:b1:40:c1:13:6a:09:ad:0d:0b:cb:aa:56: 1f:7a:c6:21:04:87:5d:67:e5:ed:cd:7d:ba:d6:47: b4:7b:ba:1d:1e:56:09:db:8d:e3:53:75:a8:4d:80: be:71:99:0e:ed:50:61:e4:48:ca:e4:06:20:91:4a: 7e:1c:99:55:b4:f5:b8:82:64:8e:cf:c7:86:93:69: 41:6f:79:e5:04:5c:b6:cb:9b:0e:2a:19:97:f6:1e: e8:33:17:36:36:58:ab:68:da:e9:85:91:b5:fc:e2: 56:c6:c2:09:76:c2:2c:08:ee:d6:72:01:38:76:5c: fa:ad:bc:98:a8:3a:17:25:91:cb:d3:60:4e:1a:c9: 01:f3:14:2a:99:ab:86:61:fd:88:7e:6e:61:60:3c: 1d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:27:FA:67:6C:25:97:FA:A4:4A:01:7B:F9:63:AB:A6:F3:C2:3A:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8f7abc3-7233-3bff-bd30-fbe4f371750c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:64:2d:bc:d7:b7:82:7c:28:63:03:07:f8:0b:a6:8a:24:8b: b3:45:55:40:28:c6:7a:80:9d:f7:3d:b8:68:0c:8d:e6:b7:5b: bd:65:e5:47:1e:e7:cd:6b:9a:d1:0e:4e:99:7b:4d:69:f2:4d: 8a:f4:72:79:b3:82:e5:8e:0a:5a:76:d3:7c:96:ce:e2:c4:f0: f1:7d:3d:78:37:61:bd:06:77:ad:96:58:b6:ad:84:81:41:db: b7:61:d4:e3:01:23:e9:3a:33:6d:91:d3:47:35:38:04:de:33: b6:8b:ed:b9:30:72:be:ca:f3:dd:c7:52:02:dd:87:1e:21:c2: 42:77:b2:8d:a3:ca:01:03:a9:36:b1:b9:29:81:56:f0:29:4e: f8:80:cf:07:7c:c4:a9:ee:d5:f2:35:d0:85:af:e2:15:2e:48: d2:72:73:58:97:58:09:b7:0f:c5:1b:79:07:2b:e1:e5:aa:0a: f0:4b:92:f6:15:22:1a:ed:56:a8:13:3b:f0:96:6b:00:40:35: 1a:1f:6b:1d:ea:03:af:c8:77:20:0a:48:4d:b0:84:14:ed:3c: 4a:7c:b2:51:79:d6:a8:46:76:d5:31:85:bf:c1:82:62:11:48: 70:0e:21:79:60:a1:e6:20:60:d4:ca:8a:12:a7:d1:5b:e4:47: 4f:e7:90:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbGxiXE2pscukK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk MWUxNjU0MWUtYjZhMC00YzUzLThiMTAtYjIyMWZlNTA5Njg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgeCV60PqVsF3+gq8MdVMQ16HArWq544c+oT DGahUFO/geB8Vr5Qy14FBQnB8vqusUQrEnmscSy9UTcLcOMvVx3OHv6V8Hb94aBD FlHelNjQV4F+2XwvLyN0/Etld3DpHcGNjMvT8mwiVFCxQMETagmtDQvLqlYfesYh BIddZ+XtzX261ke0e7odHlYJ243jU3WoTYC+cZkO7VBh5EjK5AYgkUp+HJlVtPW4 gmSOz8eGk2lBb3nlBFy2y5sOKhmX9h7oMxc2NliraNrphZG1/OJWxsIJdsIsCO7W cgE4dlz6rbyYqDoXJZHL02BOGskB8xQqmauGYf2Ifm5hYDwdEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGon+mdsJZf6pEoBe/ljq6bzwjpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjhmN2FiYzMtNzIzMy0z YmZmLWJkMzAtZmJlNGYzNzE3NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QK6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlkLbzXt4J8KGMDB/gLpooki7NFVUAoxnqAnfc9uGgMjea3W71l5Uce 581rmtEOTpl7TWnyTYr0cnmzguWOClp203yWzuLE8PF9PXg3Yb0Gd62WWLathIFB 27dh1OMBI+k6M22R00c1OATeM7aL7bkwcr7K893HUgLdhx4hwkJ3so2jygEDqTax uSmBVvApTviAzwd8xKnu1fI10IWv4hUuSNJyc1iXWAm3D8UbeQcr4eWqCvBLkvYV IhrtVqgTO/CWawBANRofax3qA6/IdyAKSE2whBTtPEp8slF51qhGdtUxhb/BgmIR SHAOIXlgoeYgYNTKihKn0VvkR0/nkOs= -----END CERTIFICATE-----Generated at Tue Sep 1 03:42:53 2026 by rpki-client