$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc6af601-cbd4-3e7c-b30a-0764ba294872.roa File: fc6af601-cbd4-3e7c-b30a-0764ba294872.roa (raw, json) Hash identifier: BfEqPi8/4xpiy5JrM44XMU3JMNPBg5bKZmI6c2cNER4= Subject key identifier: 62:C4:17:C0:90:A7:86:E0:1F:D3:F8:D2:82:96:57:81:6C:C3:B1:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E2809BE3FDB6445B88F98E200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc6af601-cbd4-3e7c-b30a-0764ba294872.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 209.2.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:be:3f:db:64:45:b8:8f:98:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=042ed923-3212-4eb6-94a1-989612e3779a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:17:2f:33:1c:63:ca:c3:c2:0b:d8:2b:67: f0:23:0b:e2:e0:bd:8b:5e:7c:62:f3:37:30:f6:31: 7d:a2:ca:20:b1:39:95:aa:c3:1f:6a:7e:df:9b:68: 26:58:80:9d:37:e7:87:70:3e:75:e4:b1:1f:7b:82: 50:29:a3:50:33:ed:3b:01:9c:3a:f1:7d:dd:fa:ff: e9:e6:93:85:ce:22:48:f6:dc:7d:ba:b2:a3:10:cc: b7:6d:6b:d9:38:80:0e:9d:f6:3a:33:20:1a:1e:09: 5a:fa:f5:3c:81:29:1f:08:34:fd:dd:f1:e4:41:f0: 10:d4:47:a6:db:3e:25:65:5c:3c:76:8c:fa:f0:4d: d0:25:84:cd:20:fa:8d:5e:f5:65:d7:a2:e7:1a:0a: 4c:a2:c2:35:70:4b:6d:af:18:b2:99:7f:e0:c2:91: 8a:62:02:74:d0:c1:75:ae:1f:98:37:b7:bb:59:31: e2:5d:6e:22:75:aa:94:8f:39:03:69:65:09:8e:94: 48:2a:97:f3:65:d2:42:52:a4:a7:0c:b8:f4:62:69: f3:36:a2:34:4d:19:40:38:3d:97:22:6d:58:f5:27: 03:98:2e:a9:c8:98:1d:02:e4:52:4b:12:ee:c1:7e: a2:0b:88:4b:a4:f1:7b:1c:bc:40:6a:84:5f:16:c9: 25:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C4:17:C0:90:A7:86:E0:1F:D3:F8:D2:82:96:57:81:6C:C3:B1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc6af601-cbd4-3e7c-b30a-0764ba294872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1e:3f:0b:6b:5b:dc:fd:89:3a:db:a0:8e:46:dc:14:78:95: 1e:48:a8:d6:37:46:ce:06:b3:b2:b0:b7:f4:7f:4a:8c:f1:48: 0e:83:bf:55:84:8e:f8:32:28:7f:a4:d2:bf:9e:43:cd:68:ea: f3:6b:0d:87:92:3c:66:26:40:ee:97:b5:40:0f:e6:46:6f:32: e6:dd:5b:05:06:06:e1:99:9e:1a:6b:06:18:14:75:5b:a6:30: 9c:0f:b6:5a:7c:d0:89:65:b6:f5:02:5e:c7:33:6c:4e:c4:85: 40:04:49:02:32:13:60:e7:22:99:26:08:fe:93:5e:26:45:3c: ea:58:8d:1b:4f:58:dc:f3:8c:5a:27:53:f9:1b:9f:ae:20:e6: 6b:07:15:5f:64:e2:80:73:d5:55:c6:a5:81:d3:06:79:e2:dc: f5:1d:23:51:79:35:64:05:a4:5d:23:3b:96:41:8a:00:73:da: 23:f7:89:cd:a0:2b:14:e9:7e:d3:67:76:88:36:4f:be:3e:9e: f8:0d:cb:d1:f9:e0:5e:9b:e5:4b:1f:7f:01:b7:0e:94:c6:e6: 01:4a:3f:c1:1e:5c:3d:7c:ce:86:c8:d1:cd:7d:f1:07:ef:0e: 81:3d:fd:d1:71:d7:9a:b7:ff:e0:45:f8:91:ac:3a:f0:19:4a: 90:74:03:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCb4/22RFuI+Y4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk MDQyZWQ5MjMtMzIxMi00ZWI2LTk0YTEtOTg5NjEyZTM3NzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSAXLzMcY8rDwgvYK2fwIwvi4L2LXnxi8zcw 9jF9osogsTmVqsMfan7fm2gmWICdN+eHcD515LEfe4JQKaNQM+07AZw68X3d+v/p 5pOFziJI9tx9urKjEMy3bWvZOIAOnfY6MyAaHgla+vU8gSkfCDT93fHkQfAQ1Eem 2z4lZVw8doz68E3QJYTNIPqNXvVl16LnGgpMosI1cEttrxiymX/gwpGKYgJ00MF1 rh+YN7e7WTHiXW4idaqUjzkDaWUJjpRIKpfzZdJCUqSnDLj0YmnzNqI0TRlAOD2X Im1Y9ScDmC6pyJgdAuRSSxLuwX6iC4hLpPF7HLxAaoRfFsklDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLEF8CQp4bgH9P40oKWV4Fsw7F3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmM2YWY2MDEtY2JkNC0z ZTdjLWIzMGEtMDc2NGJhMjk0ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsePwtrW9z9iTrboI5G3BR4lR5IqNY3Rs4Gs7Kwt/R/SozxSA6Dv1WE jvgyKH+k0r+eQ81o6vNrDYeSPGYmQO6XtUAP5kZvMubdWwUGBuGZnhprBhgUdVum MJwPtlp80IlltvUCXsczbE7EhUAESQIyE2DnIpkmCP6TXiZFPOpYjRtPWNzzjFon U/kbn64g5msHFV9k4oBz1VXGpYHTBnni3PUdI1F5NWQFpF0jO5ZBigBz2iP3ic2g KxTpftNndog2T74+nvgNy9H54F6b5UsffwG3DpTG5gFKP8EeXD18zobI0c198Qfv DoE9/dFx15q3/+BF+JGsOvAZSpB0A5Y= -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:42 2026 by rpki-client