$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67d043b4-f275-3af9-8bb1-fd7e09c7b303.roa File: 67d043b4-f275-3af9-8bb1-fd7e09c7b303.roa (raw, json) Hash identifier: lwrXAadjWzhZxTuajqudXV4mQXkRe0/vyEm32prpyzk= Subject key identifier: D0:07:6F:7F:89:24:2F:0E:48:F8:90:4C:79:B9:9C:73:E9:67:67:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F016B89C1CDE32AA39900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67d043b4-f275-3af9-8bb1-fd7e09c7b303.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 30363 IP address blocks: 209.156.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:01:6b:89:c1:cd:e3:2a:a3:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=d43a99fd-f2f1-4fd8-9fe5-8d701d474ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:15:a1:f7:ba:17:2d:84:b6:6e:c9:20:c9: 00:ed:77:9e:d3:d8:9e:b1:f3:7d:6a:b8:82:91:d1: 44:74:d9:82:2e:bc:86:dc:bf:c2:05:15:72:27:2c: 59:70:98:3e:ba:01:72:3b:a4:25:01:8e:cf:38:d0: 20:fa:2f:70:a5:09:e0:35:df:29:2b:67:9a:1c:42: a8:c3:bf:59:b1:d6:79:e0:22:95:3b:c3:53:4b:24: 72:3b:37:89:3b:94:e2:49:6d:29:23:f7:d3:5e:a4: cc:62:9d:7d:9c:65:f5:d8:62:4a:9e:8b:eb:aa:46: 6e:68:d3:58:87:f3:23:f7:6d:29:e4:7c:6b:5f:7c: b9:51:06:17:28:8a:c2:c2:67:3a:6a:d4:f2:fe:92: b2:d8:77:2f:6a:a3:eb:a2:06:46:b2:07:04:e9:15: 26:da:1d:c8:c8:73:3d:48:88:5d:3a:b4:27:b1:59: 72:b5:10:84:47:e9:56:f9:49:e2:a9:32:ac:ed:3f: 52:5a:de:90:15:5d:57:0e:90:28:a4:f6:64:70:39: 47:b2:e5:da:5a:5a:03:e0:e1:f7:bc:cd:b5:f9:a4: da:96:64:d9:41:24:a9:7c:f3:cb:bd:c4:4a:ab:ac: ac:4f:40:3d:7f:95:a3:4e:e6:ec:b5:fe:8f:fb:d4: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:07:6F:7F:89:24:2F:0E:48:F8:90:4C:79:B9:9C:73:E9:67:67:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67d043b4-f275-3af9-8bb1-fd7e09c7b303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ce:cd:5b:51:ca:51:e6:06:56:76:40:ae:eb:a7:70:49:5f: 48:2a:e3:d7:61:0a:ea:79:4b:2b:2b:f4:c1:3f:f9:bd:c3:c1: f4:81:1f:f4:6c:c0:71:5f:a5:80:63:b4:8e:14:58:e7:85:b0: a6:4c:81:50:9f:e0:3e:9e:9a:12:04:a1:42:ba:1f:ca:a7:27: 05:04:6d:6b:2a:d9:39:fc:8e:c4:0a:60:91:f8:db:b2:b9:7f: f1:3a:a7:09:df:f7:29:73:6c:63:4d:46:e9:c1:d3:d8:1f:f6: 6f:80:e9:bc:63:b4:a1:69:de:43:9d:61:ae:ab:86:31:8c:85: c4:bf:a3:12:dc:03:89:79:57:ff:52:a0:a0:64:2e:48:1c:da: cb:28:69:9b:f9:e7:11:4a:62:cf:30:98:d4:2e:93:6e:03:20: dd:e5:0e:3a:7c:89:69:df:76:69:25:ef:00:22:62:1e:a6:9f: 5a:a3:44:99:06:42:42:e5:ab:d6:2b:8f:50:2e:7a:a1:ba:de: 00:e3:98:02:31:e1:ac:df:12:e8:c9:ee:a1:17:84:3e:17:82: fe:da:36:bd:36:3c:92:d9:63:a2:a5:26:10:9e:96:2e:41:55: c5:05:97:d2:2c:bd:01:07:1a:e2:5f:06:8d:52:32:d3:46:8c: 09:fe:86:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwFricHN4yqjmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZDQzYTk5ZmQtZjJmMS00ZmQ4LTlmZTUtOGQ3MDFkNDc0ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+gVofe6Fy2Etm7JIMkA7Xee09iesfN9ariC kdFEdNmCLryG3L/CBRVyJyxZcJg+ugFyO6QlAY7PONAg+i9wpQngNd8pK2eaHEKo w79ZsdZ54CKVO8NTSyRyOzeJO5TiSW0pI/fTXqTMYp19nGX12GJKnovrqkZuaNNY h/Mj920p5HxrX3y5UQYXKIrCwmc6atTy/pKy2HcvaqProgZGsgcE6RUm2h3IyHM9 SIhdOrQnsVlytRCER+lW+UniqTKs7T9SWt6QFV1XDpAopPZkcDlHsuXaWloD4OH3 vM21+aTalmTZQSSpfPPLvcRKq6ysT0A9f5WjTubstf6P+9RkpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAHb3+JJC8OSPiQTHm5nHPpZ2cxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjdkMDQzYjQtZjI3NS0z YWY5LThiYjEtZmQ3ZTA5YzdiMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZzZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbOzVtRylHmBlZ2QK7rp3BJX0gq49dhCup5Sysr9ME/+b3DwfSBH/Rs wHFfpYBjtI4UWOeFsKZMgVCf4D6emhIEoUK6H8qnJwUEbWsq2Tn8jsQKYJH427K5 f/E6pwnf9ylzbGNNRunB09gf9m+A6bxjtKFp3kOdYa6rhjGMhcS/oxLcA4l5V/9S oKBkLkgc2ssoaZv55xFKYs8wmNQuk24DIN3lDjp8iWnfdmkl7wAiYh6mn1qjRJkG QkLlq9Yrj1AueqG63gDjmAIx4azfEujJ7qEXhD4Xgv7aNr02PJLZY6KlJhCeli5B VcUFl9IsvQEHGuJfBo1SMtNGjAn+hl4= -----END CERTIFICATE-----Generated at Sat Jun 13 21:39:45 2026 by rpki-client