$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa File: c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa (raw, json) Hash identifier: QrfeUyxsmZsnbomDuMTTUnsBVSCk5RGshauqp90XuyI= Subject key identifier: 25:15:BA:B1:E0:F4:84:D8:C3:E7:3F:C3:B7:AE:02:BF:01:BD:8E:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFB01782F1C47CA7632A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 209.165.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fb:01:78:2f:1c:47:ca:76:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=0d08a9fa-14a5-42b6-985f-49723683f90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:58:7e:f3:52:bd:ab:02:1c:1b:86:ff:18: a6:3b:2f:db:5d:73:bf:db:73:da:da:9f:1a:f5:11: d4:f1:2f:3b:41:14:c2:2d:e8:f7:a3:bf:2d:3e:b4: f1:9f:46:7e:56:e0:58:df:8d:e9:08:d4:53:2e:4c: 71:25:9a:74:cf:19:fe:c5:a9:ad:34:f2:76:c4:12: ce:6a:25:c0:6b:5c:60:f4:78:32:80:e4:4a:bc:e5: e3:d5:84:92:ad:e4:06:75:3a:d9:23:51:b1:8a:e7: 56:3d:f9:89:27:1d:c8:93:f4:a2:7d:72:e0:d4:3e: 96:fa:26:af:76:c0:a1:68:36:b3:e8:85:41:df:ba: 8d:a7:b6:8b:4a:1d:c1:df:ae:d8:37:ae:1f:9d:a3: 2a:1b:cf:c3:e7:14:17:7f:6d:bc:5a:d4:96:c3:26: d1:f8:64:43:c0:b6:54:78:ae:ef:9b:bb:ba:2f:86: df:7a:3a:f2:3b:20:e7:f2:a8:83:ac:d8:40:fd:fe: 69:ed:04:5b:dd:ff:27:c7:15:63:2c:1e:76:3c:58: 74:38:03:4a:c8:0c:4a:48:eb:91:8d:09:b7:e4:ec: 05:a1:a6:ef:74:43:d8:1e:58:a5:22:ba:5b:27:39: 68:ed:92:9f:6c:bb:2e:2c:1f:c7:dd:41:ef:f1:86: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:15:BA:B1:E0:F4:84:D8:C3:E7:3F:C3:B7:AE:02:BF:01:BD:8E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2ac2094-3e66-3ae5-aa16-db6f9123965b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:15:09:c9:eb:1e:62:11:3f:60:f4:ce:4d:09:76:2b:25:e6: f9:f4:16:2f:ff:b4:c5:54:e9:e5:80:17:af:d5:ac:e3:0b:a2: 9a:cc:99:73:03:ca:48:59:30:28:40:50:41:16:5f:ff:d8:be: b7:d4:a0:d3:57:8c:ef:fa:08:42:15:20:ae:40:b6:b1:a4:5c: 57:28:8c:cd:55:f7:d3:2c:86:0a:7a:f0:14:59:15:4c:f0:ef: 8e:33:3e:19:6b:d4:b1:bd:b8:b3:16:ff:54:65:2e:49:5f:cf: 10:a3:41:3c:73:c7:a7:eb:3f:81:ec:cd:97:b9:bc:e1:90:c4: 95:13:5c:09:16:84:51:66:fd:c0:82:c5:1d:c0:ab:da:d0:2b: e3:e2:76:85:8e:69:b9:fd:75:5c:f5:46:d9:98:fb:48:31:80: 41:99:8f:66:b4:9a:e8:5e:f9:53:65:ad:ff:38:1a:f5:b4:bd: 12:05:ee:be:9d:22:ab:74:cd:0f:57:e1:c6:0b:b5:a6:43:49: 58:f3:8f:be:ec:a9:39:67:42:b7:d7:94:2b:aa:1a:3d:c7:c5: 61:29:6e:64:a2:f2:e3:b9:9f:95:2c:fc:17:cb:0d:d9:35:44: 3e:7a:77:9b:2b:bb:4a:e9:0b:47:bc:d7:02:f8:70:8f:c8:43: 65:06:f6:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvsBeC8cR8p2MqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MGQwOGE5ZmEtMTRhNS00MmI2LTk4NWYtNDk3MjM2ODNmOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuahYfvNSvasCHBuG/ximOy/bXXO/23Pa2p8a 9RHU8S87QRTCLej3o78tPrTxn0Z+VuBY343pCNRTLkxxJZp0zxn+xamtNPJ2xBLO aiXAa1xg9HgygORKvOXj1YSSreQGdTrZI1GxiudWPfmJJx3Ik/SifXLg1D6W+iav dsChaDaz6IVB37qNp7aLSh3B367YN64fnaMqG8/D5xQXf228WtSWwybR+GRDwLZU eK7vm7u6L4bfejryOyDn8qiDrNhA/f5p7QRb3f8nxxVjLB52PFh0OANKyAxKSOuR jQm35OwFoabvdEPYHlilIrpbJzlo7ZKfbLsuLB/H3UHv8YZZowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUVurHg9ITYw+c/w7euAr8BvY63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJhYzIwOTQtM2U2Ni0z YWU1LWFhMTYtZGI2ZjkxMjM5NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYVCcnrHmIRP2D0zk0Jdisl5vn0Fi//tMVU6eWAF6/VrOMLoprMmXMD ykhZMChAUEEWX//YvrfUoNNXjO/6CEIVIK5AtrGkXFcojM1V99Mshgp68BRZFUzw 744zPhlr1LG9uLMW/1RlLklfzxCjQTxzx6frP4HszZe5vOGQxJUTXAkWhFFm/cCC xR3Aq9rQK+PidoWOabn9dVz1RtmY+0gxgEGZj2a0muhe+VNlrf84GvW0vRIF7r6d Iqt0zQ9X4cYLtaZDSVjzj77sqTlnQrfXlCuqGj3HxWEpbmSi8uO5n5Us/BfLDdk1 RD56d5sru0rpC0e81wL4cI/IQ2UG9uo= -----END CERTIFICATE-----Generated at Sat Jun 13 07:28:15 2026 by rpki-client