$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/89861158-9396-32bd-afbf-2ac552550fd7.roa File: 89861158-9396-32bd-afbf-2ac552550fd7.roa (raw, json) Hash identifier: /GFNxte441F78VXx+WxHpSfVDZ5keVQ107/rTZyLfjU= Subject key identifier: FA:9F:B4:0A:FE:80:F0:38:F7:8C:89:4C:2E:63:CE:CE:0D:AC:D0:9C Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584EA7877347C91CACDDC724EC60 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/89861158-9396-32bd-afbf-2ac552550fd7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25697 IP address blocks: 209.50.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:73:47:c9:1c:ac:dd:c7:24:ec:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0df73761-e371-48d1-a4b3-13c745579e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:25:61:d8:d2:94:87:17:b2:6e:90:9d:9c: 04:38:3c:01:92:90:a6:73:5d:f7:94:a9:69:37:7b: f9:6a:25:0c:c8:d0:f0:90:52:d5:26:e3:69:00:07: 5a:61:a9:e3:2f:42:f1:ff:0f:ea:c0:94:49:eb:2f: 78:bb:8d:d5:0e:e3:56:8f:6f:24:10:d7:a7:be:6e: 49:5d:9c:2b:c4:82:fb:af:ce:fd:60:b9:57:09:a4: 76:bc:55:c6:1e:81:1d:1c:39:c7:65:88:fe:c2:8c: 60:3d:c5:11:21:29:97:b1:72:a9:e7:a6:00:45:36: a9:b8:81:6a:6f:5a:ae:70:76:ce:1c:52:92:23:21: d3:b9:fb:c8:8f:23:fc:b1:d3:91:b7:93:21:79:ff: ca:33:0d:88:6a:1c:77:bd:94:60:78:f9:a9:ad:46: 1d:ce:5b:d0:ca:5e:55:42:e5:b2:e9:9a:05:75:96: 54:35:ea:88:f7:c1:ca:ca:47:24:49:6c:a8:6f:5e: fc:9a:97:cb:d4:c3:d7:1b:57:3e:2e:be:86:d6:fa: a0:2f:23:b8:8d:ab:4b:33:36:77:e8:92:bc:8d:47: 85:31:c5:64:15:6b:33:e6:68:3c:51:e6:d9:88:e6: b2:4d:60:4f:32:5b:89:65:d2:27:e9:ac:41:74:70: f8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9F:B4:0A:FE:80:F0:38:F7:8C:89:4C:2E:63:CE:CE:0D:AC:D0:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/89861158-9396-32bd-afbf-2ac552550fd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.50.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f3:41:f3:c2:98:92:dc:c0:68:3e:1e:b6:bb:95:c6:cb:7c: c2:e2:8a:fd:81:26:e8:a2:4d:fb:25:3a:7c:b6:b2:0e:a5:f5: a5:0d:ba:38:35:ee:c5:73:39:58:28:08:9e:e6:c4:e1:1d:66: 88:94:05:48:25:c4:53:7d:0d:10:f4:9f:4f:38:73:f1:fa:06: 3b:57:47:a9:ed:ed:71:10:55:9b:b6:a9:bc:a1:16:8b:57:8e: b3:2f:ac:d5:95:13:d9:de:f5:51:ec:8f:cc:7b:b9:a3:e8:fd: 52:fc:cb:87:62:1d:23:0b:8b:a8:50:6f:80:fa:ec:7e:9b:f8: 8d:77:92:83:c6:9f:33:a8:8c:0f:28:e2:ce:c4:04:21:e3:46: e1:b5:fe:cd:b1:21:4b:60:4b:47:81:9b:3b:86:95:b5:06:85: 25:88:50:7d:f4:6b:6a:15:97:7f:e4:32:2f:19:a6:41:43:6c: e5:63:59:ca:a3:28:fc:bc:e6:cf:26:27:22:67:8c:37:47:2c: 14:f1:90:5b:ec:8a:da:7f:fc:77:3f:e9:6c:49:13:e4:4d:d4: 7e:88:41:49:8d:ab:04:d9:5f:b3:52:b0:5c:ec:ed:55:64:97: 47:13:af:c4:cb:b9:09:4a:4a:2a:9a:72:91:79:47:90:e1:47: 48:de:d2:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh3NHyRys3cck7GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGRmNzM3NjEtZTM3MS00OGQxLWE0YjMtMTNjNzQ1NTc5ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzUlYdjSlIcXsm6QnZwEODwBkpCmc133lKlp N3v5aiUMyNDwkFLVJuNpAAdaYanjL0Lx/w/qwJRJ6y94u43VDuNWj28kENenvm5J XZwrxIL7r879YLlXCaR2vFXGHoEdHDnHZYj+woxgPcURISmXsXKp56YARTapuIFq b1qucHbOHFKSIyHTufvIjyP8sdORt5Mhef/KMw2Iahx3vZRgePmprUYdzlvQyl5V QuWy6ZoFdZZUNeqI98HKykckSWyob178mpfL1MPXG1c+Lr6G1vqgLyO4jatLMzZ3 6JK8jUeFMcVkFWsz5mg8UebZiOayTWBPMluJZdIn6axBdHD4xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqftAr+gPA494yJTC5jzs4NrNCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvODk4NjExNTgtOTM5Ni0z MmJkLWFmYmYtMmFjNTUyNTUwZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0TIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvzQfPCmJLcwGg+Hra7lcbLfMLiiv2BJuiiTfslOny2sg6l9aUNujg1 7sVzOVgoCJ7mxOEdZoiUBUglxFN9DRD0n084c/H6BjtXR6nt7XEQVZu2qbyhFotX jrMvrNWVE9ne9VHsj8x7uaPo/VL8y4diHSMLi6hQb4D67H6b+I13koPGnzOojA8o 4s7EBCHjRuG1/s2xIUtgS0eBmzuGlbUGhSWIUH30a2oVl3/kMi8ZpkFDbOVjWcqj KPy85s8mJyJnjDdHLBTxkFvsitp//Hc/6WxJE+RN1H6IQUmNqwTZX7NSsFzs7VVk l0cTr8TLuQlKSiqacpF5R5DhR0je0nU= -----END CERTIFICATE-----Generated at Thu Sep 10 20:18:17 2026 by rpki-client