$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32092096-6733-3a7a-8886-3bab2468880e.roa File: 32092096-6733-3a7a-8886-3bab2468880e.roa (raw, json) Hash identifier: oDjJZ6gp26OVyzaSVDCDYMqYllmqeWjVqPAMkQ4U2xA= Subject key identifier: 38:C8:14:18:FD:67:58:ED:1F:3C:45:81:DC:23:07:B7:0C:57:B5:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D9572333BB69CBB269B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32092096-6733-3a7a-8886-3bab2468880e.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 209.92.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:95:72:33:3b:b6:9c:bb:26:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=a7f56e0e-415f-4b4d-b4e0-aa08f618a233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:31:4d:2c:39:8a:24:27:11:17:9d:56:57: f9:d7:92:3c:41:c4:61:d3:ac:09:e1:ec:71:80:22: 84:df:2f:ad:f1:8b:01:9d:82:3b:b1:91:80:81:d3: fd:23:9b:cd:c3:b6:bf:d1:38:2d:08:0a:6f:cd:88: af:21:5d:0e:a5:07:f7:63:01:85:0a:ea:1a:46:77: 8c:cb:05:b9:e7:3c:e4:1f:73:0e:03:ab:22:4f:05: 95:57:87:58:43:fb:ca:e9:64:ff:81:12:23:5a:c7: e2:cc:33:be:61:56:9f:68:11:0a:35:cd:11:40:58: fb:fc:f4:e5:f9:89:3d:16:d7:57:8a:71:91:5e:44: cf:e8:bb:5f:71:d3:81:13:60:4a:04:84:ca:79:b3: a7:04:4f:17:70:98:48:80:08:08:76:fa:2e:ba:80: 4f:d9:21:a4:98:eb:58:46:e0:4b:71:34:51:a8:1c: 32:e5:e5:43:3c:83:3f:8f:52:d3:e2:71:02:08:79: a9:4c:bb:9e:fb:0f:cb:23:8a:a6:0c:02:3c:01:00: f9:d0:7d:d0:f2:93:43:fc:39:db:11:80:8a:2b:21: 6f:92:f7:79:1d:8e:93:81:b1:4a:f2:6a:6b:c9:60: 92:ba:45:a0:e3:16:84:9d:c9:3d:b2:ba:92:be:42: 65:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C8:14:18:FD:67:58:ED:1F:3C:45:81:DC:23:07:B7:0C:57:B5:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32092096-6733-3a7a-8886-3bab2468880e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bc:5a:85:ab:af:7f:14:1b:cc:67:b4:b1:b1:ac:ef:6c:28: 2d:f3:21:55:a1:48:c5:bf:74:82:13:da:95:e1:97:21:1b:54: 8c:44:35:40:e1:7a:9a:1d:69:67:9b:8f:b1:d3:30:37:df:35: c4:d9:c1:47:bc:f6:00:0d:d8:5c:d8:3d:12:97:f5:b6:59:68: 32:c6:3c:46:38:59:c4:ef:30:f1:c0:59:39:87:50:d6:8d:54: 11:9b:33:d9:aa:70:96:d7:78:96:8e:14:42:95:9f:3a:11:44: 46:48:6f:29:bc:73:4c:95:ee:ef:4c:bf:b4:44:41:82:41:ce: 5a:18:ea:6e:84:3b:d4:b5:48:eb:63:97:be:bd:66:4e:45:83: 3d:0b:51:da:d8:d5:59:b8:d9:af:1e:19:97:47:eb:8b:af:ba: 0c:5a:6d:d3:ab:b2:0e:be:74:7a:3d:26:45:a2:78:7f:ec:16: ac:0e:37:92:6f:bc:17:ea:42:63:3d:c6:06:67:12:48:95:e4: 66:bc:b1:5c:2a:7d:ac:5b:a6:35:4c:14:87:71:3a:d7:2b:14: b3:5b:61:a0:ab:b8:92:e6:31:67:d5:43:e2:82:e8:c9:0a:42: df:74:27:c7:64:a8:93:81:8a:75:78:c9:cc:49:4f:e1:50:17: 28:ce:a7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZVyMzu2nLsmmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YTdmNTZlMGUtNDE1Zi00YjRkLWI0ZTAtYWEwOGY2MThhMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6wxTSw5iiQnERedVlf515I8QcRh06wJ4exx gCKE3y+t8YsBnYI7sZGAgdP9I5vNw7a/0TgtCApvzYivIV0OpQf3YwGFCuoaRneM ywW55zzkH3MOA6siTwWVV4dYQ/vK6WT/gRIjWsfizDO+YVafaBEKNc0RQFj7/PTl +Yk9FtdXinGRXkTP6LtfcdOBE2BKBITKebOnBE8XcJhIgAgIdvouuoBP2SGkmOtY RuBLcTRRqBwy5eVDPIM/j1LT4nECCHmpTLue+w/LI4qmDAI8AQD50H3Q8pND/Dnb EYCKKyFvkvd5HY6TgbFK8mpryWCSukWg4xaEnck9srqSvkJluwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjIFBj9Z1jtHzxFgdwjB7cMV7UgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzIwOTIwOTYtNjczMy0z YTdhLTg4ODYtM2JhYjI0Njg4ODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0VxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy8WoWrr38UG8xntLGxrO9sKC3zIVWhSMW/dIIT2pXhlyEbVIxENUDh epodaWebj7HTMDffNcTZwUe89gAN2FzYPRKX9bZZaDLGPEY4WcTvMPHAWTmHUNaN VBGbM9mqcJbXeJaOFEKVnzoRREZIbym8c0yV7u9Mv7REQYJBzloY6m6EO9S1SOtj l769Zk5Fgz0LUdrY1Vm42a8eGZdH64uvugxabdOrsg6+dHo9JkWieH/sFqwON5Jv vBfqQmM9xgZnEkiV5Ga8sVwqfaxbpjVMFIdxOtcrFLNbYaCruJLmMWfVQ+KC6MkK Qt90J8dkqJOBinV4ycxJT+FQFyjOp7Q= -----END CERTIFICATE-----Generated at Sun Oct 11 12:57:51 2026 by rpki-client