$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa File: d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa (raw, json) Hash identifier: C56MZPqZE/nD5nUV8ByvvzvjT1haXUHDqortvJ4U4Go= Subject key identifier: 86:3D:B8:D7:98:BB:CF:D0:5D:45:B2:C4:7A:3B:A4:4E:10:F4:CE:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7DC474768460465E8380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 53271 IP address blocks: 209.192.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7d:c4:74:76:84:60:46:5e:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0b238cad-f230-47ad-a481-65df140d7289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bc:db:13:9f:a7:aa:cd:e1:5f:9d:c2:17:71: 2c:53:28:63:4e:c4:c1:1f:43:c1:7d:c7:23:71:e2: 41:9b:b9:7e:79:bc:72:eb:99:76:cd:96:cd:36:81: c1:cd:5e:3d:5c:5c:81:a7:f9:c9:ca:00:02:d9:68: 6e:bd:5c:2f:73:9a:63:7e:42:c9:70:c5:e6:05:49: 7c:d2:8e:c3:87:f6:12:a0:ae:0d:2e:c5:31:e7:ee: 24:28:dc:01:d2:0d:03:09:52:e2:62:24:d5:6e:21: 16:fa:80:09:fe:9b:d7:cf:97:0e:fc:30:7f:4a:2c: 30:a4:ae:bb:92:da:d9:91:8c:b2:f2:0d:e7:60:23: 9a:a1:49:1a:27:d2:ee:8a:79:bb:3e:b6:ca:0e:ae: 15:21:c6:75:7d:12:c5:cb:db:f7:ca:c7:e2:b0:4b: 75:a6:f4:d1:b3:da:50:25:8e:6d:f0:78:50:dc:20: c1:33:dd:ef:dd:94:49:36:15:fd:88:99:e1:0b:d5: 74:cc:79:14:01:19:27:c3:48:3e:fe:2e:a2:ef:f4: 13:1a:cc:5d:9a:92:95:0b:3c:95:1d:e4:30:cb:22: f3:57:20:46:b7:bf:69:ba:c8:58:7f:8a:82:86:eb: c6:18:99:49:4f:1a:99:16:b0:a8:b8:a0:af:53:f8: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3D:B8:D7:98:BB:CF:D0:5D:45:B2:C4:7A:3B:A4:4E:10:F4:CE:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:50:41:df:51:bf:da:57:a1:67:96:fc:3c:a0:8e:04:2c:97: 90:ea:1d:0a:88:ee:ce:42:a5:f4:58:9d:13:67:b5:f0:ec:13: 33:86:fc:5f:2e:15:d2:dc:c2:31:a9:11:5d:9a:5a:1f:0e:c7: d8:65:d9:81:9a:ed:7a:50:5c:a6:84:77:8d:02:18:20:ac:62: 1d:44:77:b9:57:b6:d2:68:1e:75:b6:70:fc:bf:16:69:a6:46: 21:a3:6b:16:d4:37:c7:3c:28:3f:3c:43:d2:10:54:85:f7:db: 86:8e:ff:da:a1:76:24:f9:8e:e2:12:31:53:69:d4:65:4b:28: 75:e2:66:5e:5a:7d:65:f9:93:84:c2:49:1b:28:0b:dd:1a:91: 16:42:a6:54:0a:79:58:eb:17:8c:3d:a7:c1:4f:19:fc:41:1b: b9:63:d0:df:87:08:62:d5:92:c5:d8:e0:45:59:09:56:53:62: bf:12:5f:9a:6c:61:0f:54:0a:83:ae:95:c5:58:85:65:1b:38: bd:1d:48:15:af:26:ba:18:5e:90:fe:87:0f:27:97:7e:5b:2d: 92:f9:2c:68:6c:ff:07:6a:9e:cd:57:36:02:eb:f4:72:63:6d: 95:95:a3:eb:16:5a:f7:30:68:4c:6a:2c:01:05:e6:a0:3c:d3: 82:f8:0e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnX3EdHaEYEZeg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MGIyMzhjYWQtZjIzMC00N2FkLWE0ODEtNjVkZjE0MGQ3Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrzbE5+nqs3hX53CF3EsUyhjTsTBH0PBfccj ceJBm7l+ebxy65l2zZbNNoHBzV49XFyBp/nJygAC2WhuvVwvc5pjfkLJcMXmBUl8 0o7Dh/YSoK4NLsUx5+4kKNwB0g0DCVLiYiTVbiEW+oAJ/pvXz5cO/DB/SiwwpK67 ktrZkYyy8g3nYCOaoUkaJ9Luinm7PrbKDq4VIcZ1fRLFy9v3ysfisEt1pvTRs9pQ JY5t8HhQ3CDBM93v3ZRJNhX9iJnhC9V0zHkUARknw0g+/i6i7/QTGsxdmpKVCzyV HeQwyyLzVyBGt79pushYf4qChuvGGJlJTxqZFrCouKCvU/jxHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIY9uNeYu8/QXUWyxHo7pE4Q9M73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFhOTk2ZDEtZjk3Yy0z OGQ2LWExY2YtNzYzNmIxMTYwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cA7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdQQd9Rv9pXoWeW/DygjgQsl5DqHQqI7s5CpfRYnRNntfDsEzOG/F8u FdLcwjGpEV2aWh8Ox9hl2YGa7XpQXKaEd40CGCCsYh1Ed7lXttJoHnW2cPy/Fmmm RiGjaxbUN8c8KD88Q9IQVIX324aO/9qhdiT5juISMVNp1GVLKHXiZl5afWX5k4TC SRsoC90akRZCplQKeVjrF4w9p8FPGfxBG7lj0N+HCGLVksXY4EVZCVZTYr8SX5ps YQ9UCoOulcVYhWUbOL0dSBWvJroYXpD+hw8nl35bLZL5LGhs/wdqns1XNgLr9HJj bZWVo+sWWvcwaExqLAEF5qA804L4Dvk= -----END CERTIFICATE-----Generated at Sat Oct 10 13:36:52 2026 by rpki-client