$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa File: db315c54-2d45-3c4c-a01d-39465b270b1e.roa (raw, json) Hash identifier: whNYVGFCOWWddyrGu8V2EG5Kkh2ZaqOLNyClWxqDZXE= Subject key identifier: DA:86:ED:2A:E8:06:8F:2E:1A:23:60:21:6F:44:2B:90:72:48:2E:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F498635582866B2FACD531800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 27338 IP address blocks: 209.192.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:35:58:28:66:b2:fa:cd:53:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3d4ec62-659f-4788-9646-8ce9de481667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:17:78:d0:bc:75:8e:fc:08:9a:db:66:47: fd:ec:58:ae:da:18:e7:f6:1c:e6:40:a7:0c:43:49: b2:8c:6c:e3:81:66:59:33:b1:25:26:0d:eb:30:86: f9:e3:ff:f6:6f:5e:76:29:42:c7:89:c9:d9:e8:e7: 50:92:28:a6:94:a5:2a:ab:c4:cb:ce:3f:41:90:9d: d3:ac:de:cc:25:aa:25:b7:65:6c:6d:0a:c9:cc:e7: 74:36:e8:69:68:6d:ac:f8:97:3e:bb:fa:9a:06:84: dc:49:29:52:9e:27:cc:d0:62:4a:85:bf:c0:9d:85: 42:7f:9d:e7:5a:7d:c6:95:7f:a3:58:50:95:f4:56: aa:70:bb:14:78:43:b9:62:1c:6d:b8:73:39:bb:3f: a0:4a:49:ff:d2:2f:0d:41:31:1b:74:bf:50:fe:92: f7:da:d2:7d:68:e8:00:54:32:cc:a7:a7:28:ed:e9: d6:82:2b:1c:d6:a2:74:3b:4c:ea:65:ca:a9:23:bc: 82:6b:49:36:04:51:c4:bf:5b:dc:fe:3b:e7:a4:cd: 1a:c6:4d:c9:a4:fe:6d:5c:a6:27:df:4d:22:46:47: 0a:75:2e:50:1a:8f:7a:37:e0:28:84:82:5d:4b:7f: 6a:d6:26:b5:8e:10:02:24:60:80:d0:29:80:20:34: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:86:ED:2A:E8:06:8F:2E:1A:23:60:21:6F:44:2B:90:72:48:2E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c7:7a:0f:33:62:14:2c:e6:44:8f:de:3b:59:2f:cc:fe:d1: 4f:d7:b9:83:ca:0a:34:61:33:be:62:ee:58:f9:60:2d:da:aa: db:78:9c:12:83:87:80:bc:36:d2:64:e6:66:e0:72:f8:8e:e4: 61:25:3f:78:1d:c3:b1:32:8b:86:eb:95:4d:d1:53:e6:6c:1a: 22:24:a1:1e:0e:05:8e:04:af:b8:f7:f1:51:e5:6d:a0:11:71: 7e:ef:e8:10:40:1a:25:ef:03:cd:cc:e4:94:6d:47:29:1b:fe: 86:e5:a1:21:29:08:34:73:77:e0:a6:8f:a4:c3:ee:db:d8:48: c3:77:7f:3b:8e:ce:ea:2d:53:4c:cc:61:51:b0:3f:91:66:07: f2:08:68:ba:65:54:2e:75:c1:a9:ce:9e:c9:65:e5:5a:f8:96: f0:40:ab:6c:96:63:3a:9a:b4:a5:ea:50:4b:88:a6:97:99:26: d4:32:2c:38:f1:9e:c2:67:be:18:93:80:c3:20:eb:f0:de:eb: 07:6f:db:3d:69:e1:0a:4f:32:ce:79:c1:d9:ad:f8:e9:d3:88: 40:37:7c:af:97:f3:fa:2b:f3:cb:12:8b:8e:0d:b3:80:9f:2b: a3:08:d8:f0:d8:ca:87:ec:d4:6c:83:fe:71:62:52:02:ea:0b: c7:21:ec:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhjVYKGay+s1TGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTNkNGVjNjItNjU5Zi00Nzg4LTk2NDYtOGNlOWRlNDgxNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDQXeNC8dY78CJrbZkf97Fiu2hjn9hzmQKcM Q0myjGzjgWZZM7ElJg3rMIb54//2b152KULHicnZ6OdQkiimlKUqq8TLzj9BkJ3T rN7MJaolt2VsbQrJzOd0NuhpaG2s+Jc+u/qaBoTcSSlSnifM0GJKhb/AnYVCf53n Wn3GlX+jWFCV9FaqcLsUeEO5YhxtuHM5uz+gSkn/0i8NQTEbdL9Q/pL32tJ9aOgA VDLMp6co7enWgisc1qJ0O0zqZcqpI7yCa0k2BFHEv1vc/jvnpM0axk3JpP5tXKYn 300iRkcKdS5QGo96N+AohIJdS39q1ia1jhACJGCA0CmAIDRdFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqG7SroBo8uGiNgIW9EK5BySC40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIzMTVjNTQtMmQ0NS0z YzRjLWEwMWQtMzk0NjViMjcwYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbHeg8zYhQs5kSP3jtZL8z+0U/XuYPKCjRhM75i7lj5YC3aqtt4nBKD h4C8NtJk5mbgcviO5GElP3gdw7Eyi4brlU3RU+ZsGiIkoR4OBY4Er7j38VHlbaAR cX7v6BBAGiXvA83M5JRtRykb/obloSEpCDRzd+Cmj6TD7tvYSMN3fzuOzuotU0zM YVGwP5FmB/IIaLplVC51wanOnsll5Vr4lvBAq2yWYzqatKXqUEuIppeZJtQyLDjx nsJnvhiTgMMg6/De6wdv2z1p4QpPMs55wdmt+OnTiEA3fK+X8/or88sSi44Ns4Cf K6MI2PDYyofs1GyD/nFiUgLqC8ch7KU= -----END CERTIFICATE-----Generated at Sun Sep 27 00:50:35 2026 by rpki-client