$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa File: db315c54-2d45-3c4c-a01d-39465b270b1e.roa (raw, json) Hash identifier: cVH3/QDfVaS65Mf3whXv8VWCNzsDuoQRGi5DtGtYHBw= Subject key identifier: A5:6E:65:B3:2D:A3:9D:CD:BA:22:62:36:0B:C9:60:31:E8:13:2E:2C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA787F64A7E7E2D823B2204E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 27338 IP address blocks: 209.192.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:f6:4a:7e:7e:2d:82:3b:22:04:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e0b0df96-2851-480f-a5ee-1a93d84a568b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:d3:54:74:90:14:b7:52:95:5a:3a:7a:00: ff:9f:db:83:74:56:08:0d:5c:28:4e:25:31:26:27: 07:68:29:5b:80:84:eb:b0:c5:34:4c:09:0b:20:e8: 57:a1:5c:0e:d3:fc:fe:ca:08:75:f4:ef:8c:fa:48: 4c:32:8e:e7:69:e4:9c:4c:cf:25:c4:b9:e9:16:be: 87:3c:d7:f6:2b:75:c1:9a:3d:32:dc:1f:a0:ef:16: 97:3d:db:c1:1e:14:9c:a5:9a:af:29:07:a7:a9:ac: fc:a2:e7:a8:35:7b:1e:17:18:46:1c:7c:92:4b:de: 46:62:27:94:8b:9e:8c:2b:1b:20:73:c1:94:8c:02: b8:7b:8a:12:d5:9d:7d:92:9d:a8:f3:18:25:55:1f: 23:49:79:f9:2f:d5:44:73:b7:01:7b:29:94:8c:7f: a2:cd:ac:10:05:fb:72:5e:d7:31:9e:d5:10:aa:01: 12:a1:f4:e2:59:ce:74:e6:9a:fe:db:64:89:70:72: cc:4b:22:b4:cf:46:43:10:9f:17:d3:c0:da:27:44: 54:b9:30:30:55:e3:2c:a8:c3:e1:5c:f6:74:3f:89: 96:60:36:fe:8b:4a:ff:76:c6:51:33:d8:ff:8f:39: 0c:f3:c7:be:68:a1:c0:7b:cf:0d:c5:9c:e4:ba:f4: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6E:65:B3:2D:A3:9D:CD:BA:22:62:36:0B:C9:60:31:E8:13:2E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:30:23:5d:af:33:fe:61:85:25:1b:7a:e8:b3:9c:7c:49:be: fa:44:4e:1d:67:ef:9a:9c:5a:49:a8:13:ec:52:34:06:54:47: b8:db:a0:dd:51:bb:6a:aa:39:f4:b1:ee:1f:d1:a6:63:96:a2: 50:71:60:f2:e4:16:5c:77:09:2d:78:b7:45:8f:56:bb:5c:f1: fa:8a:c2:15:52:2c:e1:cb:de:2d:6e:69:2d:5e:d0:81:59:30: b2:ec:54:16:87:7e:26:6f:fa:e6:cb:f9:7b:ab:e2:3d:de:ce: 8e:77:2d:7a:0b:03:45:71:1a:d9:0c:d6:96:5d:de:43:28:4c: 8d:1b:ce:c2:a2:5b:3e:98:ad:70:be:a9:b8:b4:89:62:b6:39: 33:10:ca:70:35:c8:7f:84:94:00:8f:28:c6:95:b0:34:99:f5: d7:9c:04:f7:f4:92:26:dd:bd:cd:98:4e:ad:7c:c7:8d:91:3f: 37:7f:58:04:8f:76:6c:84:1e:94:5e:11:0b:f2:5b:5a:27:23: 27:e9:e3:45:6a:5a:21:b9:83:7c:76:58:82:b9:e3:2a:20:72: d7:56:f6:7e:fa:1f:e2:4f:71:a4:a5:74:e0:f3:27:1e:3a:94: 69:6f:39:17:82:e2:85:a0:e3:b0:db:37:08:27:a7:b8:ff:83: 62:01:27:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/ZKfn4tgjsiBOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTBiMGRmOTYtMjg1MS00ODBmLWE1ZWUtMWE5M2Q4NGE1NjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMrTVHSQFLdSlVo6egD/n9uDdFYIDVwoTiUx JicHaClbgITrsMU0TAkLIOhXoVwO0/z+ygh19O+M+khMMo7naeScTM8lxLnpFr6H PNf2K3XBmj0y3B+g7xaXPdvBHhScpZqvKQenqaz8oueoNXseFxhGHHySS95GYieU i56MKxsgc8GUjAK4e4oS1Z19kp2o8xglVR8jSXn5L9VEc7cBeymUjH+izawQBfty XtcxntUQqgESofTiWc505pr+22SJcHLMSyK0z0ZDEJ8X08DaJ0RUuTAwVeMsqMPh XPZ0P4mWYDb+i0r/dsZRM9j/jzkM88e+aKHAe88NxZzkuvSmoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVuZbMto53NuiJiNgvJYDHoEy4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIzMTVjNTQtMmQ0NS0z YzRjLWEwMWQtMzk0NjViMjcwYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFswI12vM/5hhSUbeuiznHxJvvpETh1n75qcWkmoE+xSNAZUR7jboN1R u2qqOfSx7h/RpmOWolBxYPLkFlx3CS14t0WPVrtc8fqKwhVSLOHL3i1uaS1e0IFZ MLLsVBaHfiZv+ubL+Xur4j3ezo53LXoLA0VxGtkM1pZd3kMoTI0bzsKiWz6YrXC+ qbi0iWK2OTMQynA1yH+ElACPKMaVsDSZ9decBPf0kibdvc2YTq18x42RPzd/WASP dmyEHpReEQvyW1onIyfp40VqWiG5g3x2WIK54yogctdW9n76H+JPcaSldODzJx46 lGlvOReC4oWg47DbNwgnp7j/g2IBJzQ= -----END CERTIFICATE-----Generated at Wed Jul 29 04:13:07 2026 by rpki-client