$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa File: 5681d306-27a9-32cc-a97a-f708d3e413c7.roa (raw, json) Hash identifier: F8MiS2r7KX8RMEEOyG+GbnG+f8tZbJgm6GUx92usdgM= Subject key identifier: 6D:AF:8A:22:8F:3E:80:63:11:F9:11:6E:08:F2:48:D6:38:20:37:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6292F8C3201BAFB54E4EFB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 209.255.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f8:c3:20:1b:af:b5:4e:4e:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=4d2198be-34b1-487e-8e49-57d5d43595c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a5:89:f5:a2:99:2f:1d:fd:aa:ff:8a:ad:2e: 87:4a:f2:ca:aa:0f:bb:45:0b:70:0d:9a:da:14:8f: e9:6b:3f:b7:61:b9:0d:4b:e5:2b:bc:ed:4b:58:04: 61:7b:74:aa:46:57:68:17:41:ac:86:9c:67:ae:49: 8c:8d:1f:88:38:92:4a:f6:83:9a:31:6f:0c:db:62: 90:66:32:7f:1a:c4:09:09:ed:72:ef:51:8e:0a:76: f1:76:d6:81:0b:fd:7a:65:f6:5b:a0:c2:49:ab:63: 17:1a:80:ac:29:d9:44:b4:70:8f:e7:8d:3a:06:a7: 08:c4:9b:84:f5:a7:71:f5:62:70:a8:ce:a4:44:17: 86:f6:8c:dc:86:e3:5d:fe:08:5f:2e:ca:cf:53:09: aa:00:ab:85:4d:a8:be:26:2c:d4:bc:12:6c:bc:fd: 1f:47:78:46:6b:18:5b:3c:ae:52:83:cc:d0:8b:36: 27:17:fb:0e:3a:be:83:b8:1f:42:43:50:a4:00:70: 6c:29:c1:41:03:6e:ad:65:66:dd:d3:a3:d7:73:ba: aa:7b:ab:c1:00:3f:4c:25:33:84:9d:00:4f:2d:c2: c8:c9:5c:2d:0e:e1:4f:59:4e:e6:0c:af:db:e0:eb: c5:e3:80:13:8f:85:1d:38:68:b9:c4:1e:f2:9b:1c: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AF:8A:22:8F:3E:80:63:11:F9:11:6E:08:F2:48:D6:38:20:37:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:4c:ff:f1:56:37:11:03:3a:91:07:69:42:e7:c1:03:c5:e0: c5:95:64:d0:af:e7:31:0f:fa:14:f0:95:40:3a:fe:28:06:e6: 3c:5b:81:d7:9f:b5:94:23:96:39:84:b1:d7:7c:bd:a1:3b:d3: 18:67:48:e5:81:82:b4:d6:61:a9:7f:16:36:88:48:63:98:84: 05:f6:56:4f:1d:8e:6a:e3:00:89:7d:5f:ae:14:78:ad:41:28: f0:77:41:7e:29:0d:fa:8a:3a:16:23:5c:3f:ff:50:57:09:1d: c1:42:55:50:03:e4:25:cc:3f:5a:13:b7:82:9f:15:75:27:f1: 18:d9:8a:14:6f:99:c3:a6:ac:e2:37:eb:02:97:14:2a:8d:13: 41:e7:de:f1:dc:ae:60:7a:18:93:80:5a:59:c6:10:87:8d:59: 50:18:df:df:52:21:e8:cd:87:db:61:c0:78:9e:7a:bd:02:bd: 53:23:ae:dc:bf:13:17:82:17:a8:b3:55:e2:ff:c6:b6:6e:07: a2:04:df:03:d8:e4:ee:eb:d2:29:d3:2e:b0:17:8b:00:6a:ac: 4b:48:66:e1:a8:9a:e2:3f:fd:f1:9f:56:db:6b:3c:15:05:94: bb:14:df:08:ec:99:82:4f:c6:77:9f:c5:24:8e:56:0b:81:96: b6:0c:65:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikvjDIBuvtU5O+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NGQyMTk4YmUtMzRiMS00ODdlLThlNDktNTdkNWQ0MzU5NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqWJ9aKZLx39qv+KrS6HSvLKqg+7RQtwDZra FI/paz+3YbkNS+UrvO1LWARhe3SqRldoF0GshpxnrkmMjR+IOJJK9oOaMW8M22KQ ZjJ/GsQJCe1y71GOCnbxdtaBC/16ZfZboMJJq2MXGoCsKdlEtHCP5406BqcIxJuE 9adx9WJwqM6kRBeG9ozchuNd/ghfLsrPUwmqAKuFTai+JizUvBJsvP0fR3hGaxhb PK5Sg8zQizYnF/sOOr6DuB9CQ1CkAHBsKcFBA26tZWbd06PXc7qqe6vBAD9MJTOE nQBPLcLIyVwtDuFPWU7mDK/b4OvF44ATj4UdOGi5xB7ymxzkowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2viiKPPoBjEfkRbgjySNY4IDf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4MWQzMDYtMjdhOS0z MmNjLWE5N2EtZjcwOGQzZTQxM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRM//FWNxEDOpEHaULnwQPF4MWVZNCv5zEP+hTwlUA6/igG5jxbgdef tZQjljmEsdd8vaE70xhnSOWBgrTWYal/FjaISGOYhAX2Vk8djmrjAIl9X64UeK1B KPB3QX4pDfqKOhYjXD//UFcJHcFCVVAD5CXMP1oTt4KfFXUn8RjZihRvmcOmrOI3 6wKXFCqNE0Hn3vHcrmB6GJOAWlnGEIeNWVAY399SIejNh9thwHieer0CvVMjrty/ ExeCF6izVeL/xrZuB6IE3wPY5O7r0inTLrAXiwBqrEtIZuGomuI//fGfVttrPBUF lLsU3wjsmYJPxnefxSSOVguBlrYMZWw= -----END CERTIFICATE-----Generated at Wed Oct 7 00:40:46 2026 by rpki-client