$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba90d395-c250-39f8-858a-8d91bddc257d.roa File: ba90d395-c250-39f8-858a-8d91bddc257d.roa (raw, json) Hash identifier: MT77WjYJMxk9WnperDRXWFgSVy0PQXAvwEmREs4S0CI= Subject key identifier: AB:39:F8:1D:7C:9A:7D:38:B0:56:44:23:1C:D1:EF:F0:F9:11:6D:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E28099F1F836390CB08151400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba90d395-c250-39f8-858a-8d91bddc257d.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 209.2.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:9f:1f:83:63:90:cb:08:15:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=b18b1e35-135e-4456-91c8-3c84ce19ce19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:21:51:22:80:c3:ee:77:82:26:c5:25:fa: f0:e0:47:05:38:80:3d:d6:e2:07:da:7f:c4:86:3d: de:43:c3:22:75:6a:d5:42:14:ec:80:85:00:a6:bf: d9:54:f0:24:6e:9a:f4:69:0d:fb:76:19:74:70:12: c7:d5:5a:0e:5b:27:92:99:b4:f6:7f:04:8d:dd:1d: f5:4d:8d:49:6c:b2:e6:1c:64:95:51:d6:58:8d:e0: e4:f5:2d:a9:66:5d:73:dd:84:02:46:8c:ed:44:a2: 60:fb:06:3a:ca:4d:65:25:8e:b8:81:cd:e1:45:99: 28:9b:ec:54:44:26:23:b4:f0:cb:85:95:cd:71:cb: 1b:e1:1a:27:5a:11:57:d4:d3:24:92:c3:26:2d:86: 50:64:86:4a:83:56:e2:73:72:cb:66:66:09:9b:50: 97:93:7d:70:33:fe:23:18:51:88:e8:02:a6:16:e4: a2:04:3c:99:c9:d3:bf:15:ee:fe:a1:e7:18:26:58: 5e:ff:73:0d:de:69:5c:6e:38:1b:63:fe:c3:9f:2a: 00:b2:c6:7b:22:19:80:2c:f7:7a:71:79:ab:82:c6: ad:28:91:f7:7e:bd:d5:d1:08:bd:f6:41:3d:90:bd: 22:1c:4a:a9:30:6d:1e:a6:65:42:20:51:67:52:e0: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:39:F8:1D:7C:9A:7D:38:B0:56:44:23:1C:D1:EF:F0:F9:11:6D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba90d395-c250-39f8-858a-8d91bddc257d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:10:02:1a:56:24:e9:b5:0b:a3:7f:48:77:99:a5:d0:2e:ce: 68:b4:9d:8c:45:88:41:c0:5c:05:5f:a5:f4:c2:1c:7f:31:c3: 7e:7e:7b:2f:ae:91:99:b5:dc:01:4b:6b:a9:7a:ae:64:78:68: 92:5a:44:03:93:d0:a6:b8:0c:9f:0d:2c:bc:f3:41:d4:ba:bf: cd:bd:e3:23:e8:88:f2:ab:32:3b:e4:fb:80:7a:5d:64:72:7c: d2:0b:9a:98:59:62:1d:e3:e9:77:ed:65:21:23:c1:e9:8e:9d: b2:28:9b:62:73:21:50:38:44:23:00:d6:2e:26:37:b2:e6:0f: d4:b0:51:bf:1a:d3:65:cd:1c:11:39:39:24:ef:58:f3:b9:c2: bc:9f:33:aa:8c:1b:a4:d0:6a:2e:43:38:fe:9e:35:ee:cc:52: d4:bc:bc:88:18:93:f7:c1:a6:f5:6c:51:be:93:2a:51:f1:60: 2e:30:31:d2:a4:7c:a1:8b:27:1a:45:1f:cb:76:1e:39:35:ac: 0f:16:11:c8:83:d3:40:40:55:7f:7e:1e:b1:28:68:00:e1:b4: 9b:7a:3f:c9:1e:14:07:6a:54:97:9c:73:cf:22:f7:90:49:73: 97:ae:54:62:78:82:0f:49:fa:1f:4e:9a:db:65:a3:83:68:2c: f4:54:94:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCZ8fg2OQywgVFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk YjE4YjFlMzUtMTM1ZS00NDU2LTkxYzgtM2M4NGNlMTljZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlshUSKAw+53gibFJfrw4EcFOIA91uIH2n/E hj3eQ8MidWrVQhTsgIUApr/ZVPAkbpr0aQ37dhl0cBLH1VoOWyeSmbT2fwSN3R31 TY1JbLLmHGSVUdZYjeDk9S2pZl1z3YQCRoztRKJg+wY6yk1lJY64gc3hRZkom+xU RCYjtPDLhZXNccsb4RonWhFX1NMkksMmLYZQZIZKg1bic3LLZmYJm1CXk31wM/4j GFGI6AKmFuSiBDyZydO/Fe7+oecYJlhe/3MN3mlcbjgbY/7DnyoAssZ7IhmALPd6 cXmrgsatKJH3fr3V0Qi99kE9kL0iHEqpMG0epmVCIFFnUuAogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs5+B18mn04sFZEIxzR7/D5EW1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE5MGQzOTUtYzI1MC0z OWY4LTg1OGEtOGQ5MWJkZGMyNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEQAhpWJOm1C6N/SHeZpdAuzmi0nYxFiEHAXAVfpfTCHH8xw35+ey+u kZm13AFLa6l6rmR4aJJaRAOT0Ka4DJ8NLLzzQdS6v8294yPoiPKrMjvk+4B6XWRy fNILmphZYh3j6XftZSEjwemOnbIom2JzIVA4RCMA1i4mN7LmD9SwUb8a02XNHBE5 OSTvWPO5wryfM6qMG6TQai5DOP6eNe7MUtS8vIgYk/fBpvVsUb6TKlHxYC4wMdKk fKGLJxpFH8t2Hjk1rA8WEciD00BAVX9+HrEoaADhtJt6P8keFAdqVJecc88i95BJ c5euVGJ4gg9J+h9Omttlo4NoLPRUlL0= -----END CERTIFICATE-----Generated at Sat Jun 13 20:10:44 2026 by rpki-client