$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00a28f1-230a-3255-a993-48c56b482c51.roa File: d00a28f1-230a-3255-a993-48c56b482c51.roa (raw, json) Hash identifier: UcTbOHEyc+eZuWtP2xk39biI+X1vEGTp6vlkJLShVqA= Subject key identifier: A6:6B:7D:0F:21:97:1D:50:71:BE:55:5B:F8:52:0E:73:77:73:7C:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F00BF1BEF7958D808EF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00a28f1-230a-3255-a993-48c56b482c51.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 27338 IP address blocks: 209.192.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:00:bf:1b:ef:79:58:d8:08:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=fd98534a-0398-4a69-a32e-215659b83700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:83:b8:26:e3:6d:cb:3b:cc:a6:a2:8d:7e: 61:ac:bb:57:fe:bc:18:5e:7f:2c:af:2f:22:7e:53: 1d:93:8a:f7:a0:85:73:f1:a0:bc:0e:a6:17:7c:d7: 93:93:6a:fd:58:e0:14:6d:81:e6:8c:26:f0:32:0b: 43:2f:e1:ac:4a:44:55:89:02:6c:2c:e9:6a:89:77: bf:f4:ad:cf:9b:ac:f1:7d:4a:b0:98:f4:7b:d8:eb: d3:17:b6:63:04:9a:f3:e1:38:ae:e1:3b:e2:20:60: 19:5d:e9:45:41:b2:0b:a8:99:b8:a7:fe:83:a9:88: 06:07:15:f8:dd:65:20:cf:76:5a:61:82:12:2b:b3: 68:e1:47:85:2a:6c:ee:35:b2:14:1a:61:be:fb:d8: 9d:8c:66:cf:d5:61:88:b0:7b:1f:d0:a2:a7:00:0f: 0b:d8:20:5e:0c:3f:c5:dc:6c:f1:2d:10:04:fd:f2: f4:ab:5e:85:3a:96:62:65:8d:2f:03:5e:7b:65:0b: 40:58:0f:a6:b6:19:f2:80:9b:a0:a4:bb:b4:d1:e1: d1:ef:8e:30:bf:4e:34:db:99:23:16:1e:06:d9:dc: 8c:1f:76:99:b1:fc:43:42:8f:65:64:ae:d0:05:7d: b2:98:2c:06:81:e1:6f:33:2f:95:9c:af:33:25:4d: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6B:7D:0F:21:97:1D:50:71:BE:55:5B:F8:52:0E:73:77:73:7C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00a28f1-230a-3255-a993-48c56b482c51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:62:5e:c1:a5:28:82:0e:7c:a8:da:c8:87:a4:22:f1:3f:0f: 10:e8:3e:89:76:eb:a1:b8:f1:d0:27:02:92:da:91:35:ea:fc: b1:65:15:5b:09:c0:8b:2f:74:9d:78:d5:4f:5e:a8:d4:0f:53: c7:38:24:ed:e9:d1:d0:39:18:90:4a:ee:9f:fa:4a:66:3a:df: 25:6f:7e:0a:d7:a9:13:08:fe:a4:f9:7d:42:f8:19:ac:57:44: 97:bd:26:3c:d3:f5:e3:e6:2b:ec:26:3d:76:c0:31:1d:58:5a: 8e:8f:e7:11:c8:03:6e:76:cb:40:ba:46:da:64:45:aa:c8:1a: e0:0e:8b:83:39:f6:f5:de:e9:36:80:3e:dd:98:96:87:05:73: 96:ec:98:93:94:61:40:61:c3:e9:6a:13:85:00:37:47:fd:1d: 84:04:50:5c:c8:59:41:a8:ee:da:b7:2f:c1:05:7b:6b:db:b3: 6f:d0:c5:fe:e1:ad:e0:61:56:a6:7d:b8:97:ce:cc:32:66:31: 66:51:65:3a:b0:e7:14:89:9c:34:6e:f6:d1:61:40:b3:14:77: 77:43:16:17:d3:ce:9d:8e:a3:be:51:27:b5:52:a8:fa:e9:76: a6:19:34:cb:d1:4b:2b:ca:fa:2e:b8:d5:e0:b9:91:6e:4b:b0: dd:c8:8f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwC/G+95WNgI7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZmQ5ODUzNGEtMDM5OC00YTY5LWEzMmUtMjE1NjU5YjgzNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhODuCbjbcs7zKaijX5hrLtX/rwYXn8sry8i flMdk4r3oIVz8aC8DqYXfNeTk2r9WOAUbYHmjCbwMgtDL+GsSkRViQJsLOlqiXe/ 9K3Pm6zxfUqwmPR72OvTF7ZjBJrz4Tiu4TviIGAZXelFQbILqJm4p/6DqYgGBxX4 3WUgz3ZaYYISK7No4UeFKmzuNbIUGmG++9idjGbP1WGIsHsf0KKnAA8L2CBeDD/F 3GzxLRAE/fL0q16FOpZiZY0vA157ZQtAWA+mthnygJugpLu00eHR744wv04025kj Fh4G2dyMH3aZsfxDQo9lZK7QBX2ymCwGgeFvMy+VnK8zJU2JmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZrfQ8hlx1Qcb5VW/hSDnN3c3zcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDAwYTI4ZjEtMjMwYS0z MjU1LWE5OTMtNDhjNTZiNDgyYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFiXsGlKIIOfKjayIekIvE/DxDoPol266G48dAnApLakTXq/LFlFVsJ wIsvdJ141U9eqNQPU8c4JO3p0dA5GJBK7p/6SmY63yVvfgrXqRMI/qT5fUL4GaxX RJe9JjzT9ePmK+wmPXbAMR1YWo6P5xHIA252y0C6RtpkRarIGuAOi4M59vXe6TaA Pt2YlocFc5bsmJOUYUBhw+lqE4UAN0f9HYQEUFzIWUGo7tq3L8EFe2vbs2/Qxf7h reBhVqZ9uJfOzDJmMWZRZTqw5xSJnDRu9tFhQLMUd3dDFhfTzp2Oo75RJ7VSqPrp dqYZNMvRSyvK+i641eC5kW5LsN3Ij/A= -----END CERTIFICATE-----Generated at Sat Jun 13 14:43:32 2026 by rpki-client