$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d97ef7de-aa5a-31b8-b019-d825d95a6bd4.roa File: d97ef7de-aa5a-31b8-b019-d825d95a6bd4.roa (raw, json) Hash identifier: EmRlfmKrPrShSBM+vlLXI2G7PsVOCJg5kQUMeldgPiY= Subject key identifier: A8:D0:48:4E:CD:D4:4B:AA:1E:73:78:DE:53:F3:61:A2:E4:DC:46:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1F44F670582A70517C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d97ef7de-aa5a-31b8-b019-d825d95a6bd4.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 19917 IP address blocks: 209.255.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1f:44:f6:70:58:2a:70:51:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=7a640302-683b-41d2-91a9-8b0d5af902d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:47:d5:2c:ad:6f:7a:e8:cb:a5:80:75:9f:14: 6c:02:e0:13:4d:c4:b9:88:6d:98:33:3c:cd:c6:71: 35:7d:12:bf:19:aa:49:c9:c8:60:29:e7:8c:a5:e8: cd:6b:c8:ee:a9:e5:fb:38:30:77:50:82:d9:31:f3: 99:c9:4e:03:8a:56:21:2b:67:d5:d6:88:50:d3:26: 03:e0:30:0c:fe:c5:6a:75:60:bd:8e:23:14:84:80: 26:2b:e4:a4:59:99:7d:4c:e1:8c:a5:4c:40:3e:c6: c9:30:95:bf:42:97:ec:1e:03:ae:e3:32:0a:12:2f: 3e:67:2e:b4:46:a4:41:0c:ff:4e:e1:67:de:10:35: 16:bd:d4:13:a0:42:4b:dc:5f:33:ff:99:26:78:c4: 94:e6:73:7e:43:9e:33:4c:5f:85:8a:d4:dd:da:18: 23:d3:dc:64:57:01:32:b6:49:f2:49:59:d4:4a:cd: b9:8c:81:33:b6:33:4d:9c:9a:73:15:3f:78:9b:52: d9:87:88:c8:46:83:92:67:57:6a:ce:22:54:ca:e9: 62:6c:1a:c9:b8:1e:aa:d6:0e:10:09:30:d8:a2:d2: bd:0e:8b:92:73:ee:c9:a9:86:99:aa:cd:a4:8d:9c: 94:6f:a2:87:82:c3:ba:4b:f3:96:6f:3f:d3:15:28: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D0:48:4E:CD:D4:4B:AA:1E:73:78:DE:53:F3:61:A2:E4:DC:46:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d97ef7de-aa5a-31b8-b019-d825d95a6bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:59:1c:23:3e:0b:c9:0b:b5:71:eb:8b:7f:30:17:b0:f3:83: 62:5f:23:80:00:02:ab:6b:1a:fe:a0:5c:0d:46:2e:cd:bb:d0: 0e:e7:68:2f:90:fd:e9:a3:ed:87:5a:83:15:fb:f5:55:ef:dd: ad:34:38:79:73:cc:c2:37:aa:c8:10:79:8c:20:9f:16:40:41: 97:73:05:42:0b:34:5c:00:fb:0a:e8:e5:5a:a1:7c:49:5d:c5: 0d:44:35:73:b5:bb:85:f3:af:e2:cb:7b:9d:b8:06:11:ed:95: 97:7b:ee:39:97:3a:9a:fa:85:da:91:14:96:d6:31:d1:88:e7: 39:24:77:c6:43:66:94:cc:db:4a:45:ee:b2:9b:c6:2a:9b:b3: 8a:a9:5b:8a:b4:37:b8:9e:55:6a:4d:b0:26:a2:8b:ef:df:37: f6:ea:f0:ed:67:f0:4e:94:f3:d5:7c:ca:c7:57:ab:fd:b0:1a: 7f:16:d8:a8:05:6c:f5:d6:47:b4:23:bd:fe:b1:98:9e:86:f5: 8f:9f:d0:a7:7f:2a:10:53:0f:9b:34:8b:f5:a1:5a:75:1c:36: 7e:b6:5a:88:27:55:89:be:6b:39:d8:8b:17:4a:d7:4c:f3:ff: 12:b8:52:07:fa:b9:3b:4f:44:89:f6:0c:6e:ad:25:9c:71:3a: 5b:fa:77:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTx9E9nBYKnBRfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk N2E2NDAzMDItNjgzYi00MWQyLTkxYTktOGIwZDVhZjkwMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEfVLK1veujLpYB1nxRsAuATTcS5iG2YMzzN xnE1fRK/GapJychgKeeMpejNa8juqeX7ODB3UILZMfOZyU4DilYhK2fV1ohQ0yYD 4DAM/sVqdWC9jiMUhIAmK+SkWZl9TOGMpUxAPsbJMJW/QpfsHgOu4zIKEi8+Zy60 RqRBDP9O4WfeEDUWvdQToEJL3F8z/5kmeMSU5nN+Q54zTF+FitTd2hgj09xkVwEy tknySVnUSs25jIEztjNNnJpzFT94m1LZh4jIRoOSZ1dqziJUyulibBrJuB6q1g4Q CTDYotK9DouSc+7JqYaZqs2kjZyUb6KHgsO6S/OWbz/TFSjBGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjQSE7N1EuqHnN43lPzYaLk3EalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDk3ZWY3ZGUtYWE1YS0z MWI4LWIwMTktZDgyNWQ5NWE2YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0f/mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZZHCM+C8kLtXHri38wF7Dzg2JfI4AAAqtrGv6gXA1GLs270A7naC+Q /emj7YdagxX79VXv3a00OHlzzMI3qsgQeYwgnxZAQZdzBUILNFwA+wro5VqhfEld xQ1ENXO1u4Xzr+LLe524BhHtlZd77jmXOpr6hdqRFJbWMdGI5zkkd8ZDZpTM20pF 7rKbxiqbs4qpW4q0N7ieVWpNsCaii+/fN/bq8O1n8E6U89V8ysdXq/2wGn8W2KgF bPXWR7Qjvf6xmJ6G9Y+f0Kd/KhBTD5s0i/WhWnUcNn62WognVYm+aznYixdK10zz /xK4Ugf6uTtPRIn2DG6tJZxxOlv6d6Y= -----END CERTIFICATE-----Generated at Sat Jun 13 14:53:40 2026 by rpki-client