$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa File: bb391dc9-1f19-3e65-be6c-947a5db5500a.roa (raw, json) Hash identifier: 2LuVIM3eKJCi9od81XXt3qI6QILRi23/HFM4vnyUt0Q= Subject key identifier: 52:B0:D7:91:8A:9E:00:88:B8:A6:8E:C4:A7:2F:3A:A6:28:1C:F9:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F20185E10DBCCD890BD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 27338 IP address blocks: 209.192.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:20:18:5e:10:db:cc:d8:90:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=6750aa51-048a-442a-b9c7-b1ca9b37ff59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:43:1c:5a:03:5a:02:02:53:be:c9:c9:f1:a1: d0:3f:4b:5c:63:28:8e:40:36:0a:e4:0e:80:b4:e5: 6a:7a:be:71:a4:75:79:48:db:01:5a:55:9b:65:df: de:c9:d2:e1:74:0e:63:6e:41:04:9e:7f:71:03:e7: 79:06:ad:eb:23:7f:c6:be:35:f1:8b:48:5c:3e:d0: d4:b9:07:62:12:2b:51:2b:a8:3e:63:e7:1f:27:83: 23:7f:06:30:43:04:82:22:2b:f3:e3:72:26:7e:cb: 78:ed:a0:f2:5c:42:02:61:ca:b0:04:67:92:ea:83: 55:59:4e:e5:6a:18:ad:b1:eb:7a:82:c0:cb:c4:7c: b9:a9:c5:2c:cb:c5:c0:bc:4f:4e:44:d0:28:e6:97: 8c:47:68:e5:85:21:89:d2:36:68:67:93:db:64:71: 1b:87:55:c2:a2:d1:33:e5:c5:37:7e:77:08:d9:b2: e0:fd:b2:e6:15:e4:28:a4:85:96:ec:59:88:21:c4: 0a:3b:cb:ed:1f:b1:ca:90:46:22:70:e4:20:ad:1f: e8:fd:dd:2c:41:70:44:19:45:88:0c:5c:06:e0:91: 63:86:9c:24:3d:06:22:9d:58:95:5c:c1:3b:f9:fc: 06:cb:d4:7e:f1:17:6c:6f:5e:be:54:b8:49:9f:3c: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B0:D7:91:8A:9E:00:88:B8:A6:8E:C4:A7:2F:3A:A6:28:1C:F9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:74:41:eb:01:21:ca:71:69:57:12:f1:95:f1:3c:d4:80:65: 0e:ae:83:ea:75:d9:95:05:5a:a1:21:2c:7e:ec:d4:d5:8a:77: 86:e3:9c:48:c5:5d:89:ca:a7:56:06:72:ed:81:a1:83:9d:e7: 57:77:03:ce:0c:c3:d9:50:e1:6c:cd:e3:a7:ff:f8:ea:ae:93: 53:b3:e5:d1:64:9b:45:0b:3d:a7:d4:6c:54:d6:ea:ab:10:e9: 6c:d5:ee:c9:23:3a:08:32:b5:77:6e:86:93:e3:cf:78:ce:e0: a7:e2:67:c3:93:8d:01:0a:d6:91:f8:71:0b:d8:cf:5d:aa:b6: 1d:a0:4d:7d:4c:ee:6e:5b:80:80:cf:82:ff:05:49:26:11:c9: 5d:2a:cf:2d:cb:ca:26:04:46:56:db:a2:75:d9:2a:71:a9:fc: 85:a3:19:27:38:98:0f:89:d4:ab:8d:bb:00:df:26:0c:70:36: 59:c0:51:45:b8:28:ae:74:e0:83:fd:71:29:24:5e:f3:26:ed: 79:27:d5:ce:36:65:9f:2f:e6:76:9b:2e:7e:7e:a0:a7:34:e3: 88:20:05:0f:8e:3b:85:18:28:81:60:85:34:8e:e6:e6:85:4b: b2:7f:d0:89:b1:f0:56:bd:da:97:f9:c9:3f:9d:69:fc:09:a2: d9:49:ee:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyAYXhDbzNiQvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk Njc1MGFhNTEtMDQ4YS00NDJhLWI5YzctYjFjYTliMzdmZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUMcWgNaAgJTvsnJ8aHQP0tcYyiOQDYK5A6A tOVqer5xpHV5SNsBWlWbZd/eydLhdA5jbkEEnn9xA+d5Bq3rI3/GvjXxi0hcPtDU uQdiEitRK6g+Y+cfJ4MjfwYwQwSCIivz43Imfst47aDyXEICYcqwBGeS6oNVWU7l ahitset6gsDLxHy5qcUsy8XAvE9ORNAo5peMR2jlhSGJ0jZoZ5PbZHEbh1XCotEz 5cU3fncI2bLg/bLmFeQopIWW7FmIIcQKO8vtH7HKkEYicOQgrR/o/d0sQXBEGUWI DFwG4JFjhpwkPQYinViVXME7+fwGy9R+8Rdsb16+VLhJnzzOPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKw15GKngCIuKaOxKcvOqYoHPlAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmIzOTFkYzktMWYxOS0z ZTY1LWJlNmMtOTQ3YTVkYjU1MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl0QesBIcpxaVcS8ZXxPNSAZQ6ug+p12ZUFWqEhLH7s1NWKd4bjnEjF XYnKp1YGcu2BoYOd51d3A84Mw9lQ4WzN46f/+Oquk1Oz5dFkm0ULPafUbFTW6qsQ 6WzV7skjOggytXduhpPjz3jO4KfiZ8OTjQEK1pH4cQvYz12qth2gTX1M7m5bgIDP gv8FSSYRyV0qzy3LyiYERlbbonXZKnGp/IWjGSc4mA+J1KuNuwDfJgxwNlnAUUW4 KK504IP9cSkkXvMm7Xkn1c42ZZ8v5nabLn5+oKc044ggBQ+OO4UYKIFghTSO5uaF S7J/0Imx8Fa92pf5yT+dafwJotlJ7hw= -----END CERTIFICATE-----Generated at Sat Jun 13 13:26:03 2026 by rpki-client