$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f5b071c-f8c4-33f2-83ac-505e007b23f6.roa File: 4f5b071c-f8c4-33f2-83ac-505e007b23f6.roa (raw, json) Hash identifier: EsDDKi2Gq09gSihPEgLsHfpvT3UUbmmUEYucy1A4sEQ= Subject key identifier: E9:C9:CD:18:CD:E6:C6:4F:E4:B1:2B:A3:DC:3C:B4:B7:75:58:94:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6C5835A9201DAD9924C70240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f5b071c-f8c4-33f2-83ac-505e007b23f6.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 209.2.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:35:a9:20:1d:ad:99:24:c7:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=b2b6689a-a121-49b8-9755-15b144b71222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:19:ae:80:5e:69:cd:d7:37:be:e6:8a:0f:32: d8:8e:a7:77:f1:d7:0b:ea:e9:12:ac:90:a9:9e:8e: 01:3c:9f:86:ff:cf:5d:be:8f:26:1b:0d:d5:ad:a8: a2:39:ff:da:ab:d7:65:88:68:20:02:5b:1b:a3:cd: 93:b5:ac:a0:54:49:4d:cd:5b:81:c3:6b:9e:00:33: d8:90:9d:60:14:14:bf:d2:5b:72:df:87:ba:95:06: c4:1d:14:44:5f:13:1a:7a:a4:a4:66:12:69:ed:8a: 24:60:e0:9f:bb:a0:d6:38:48:35:30:a7:c1:bb:c0: 8f:4a:26:44:4e:8f:bb:a2:b7:5e:81:f5:4d:20:34: ab:98:35:15:38:7b:d9:3d:43:82:cf:33:9e:e2:04: 3b:ec:d0:8e:f9:0d:db:92:c5:a4:4a:7e:e2:1e:b7: 61:a0:09:fb:26:26:1a:3a:6a:6e:db:1e:fc:cb:26: bd:e7:c8:a0:11:31:6c:68:f4:be:a5:3b:59:b9:09: 61:ab:b8:3b:4a:fb:5f:c9:a3:a1:32:fb:2a:91:77: 3f:aa:3f:9c:5f:a7:ac:61:1e:7b:7c:49:4c:61:74: 63:f2:c7:2a:5e:50:79:e6:33:06:67:ed:5f:d0:ca: 93:e0:32:74:8a:86:1d:94:c3:87:42:fb:3e:ae:fd: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C9:CD:18:CD:E6:C6:4F:E4:B1:2B:A3:DC:3C:B4:B7:75:58:94:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f5b071c-f8c4-33f2-83ac-505e007b23f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:de:64:7d:5a:87:77:e5:22:84:32:59:17:d0:95:7d:a8:36: e1:de:f2:43:46:57:6a:4c:7c:57:44:71:9d:fa:ed:36:63:ba: de:c7:8b:3e:9f:4d:8f:ed:59:93:d4:1e:e1:78:16:ad:df:4a: a9:63:5c:16:34:f3:95:c7:58:33:2c:09:ad:31:69:46:5e:84: a8:50:5c:8f:ef:91:5c:b5:b4:e1:45:07:84:e1:48:2b:2f:86: 25:6d:3d:96:75:e4:ce:53:cc:8e:42:72:ab:7b:a0:1d:f4:1c: 3e:81:4c:4a:10:14:80:79:95:92:db:aa:02:70:34:89:43:7b: 56:c1:d8:4f:63:4b:0a:e1:fe:75:a4:26:f5:06:19:11:5f:20: c3:b2:ee:35:e7:3a:d5:c1:eb:49:58:11:23:5c:db:c2:dc:00: 04:15:17:90:55:54:e0:c6:99:d6:f0:26:19:b5:01:94:25:07: 25:bd:dc:62:b6:7a:e5:d1:53:b0:9c:96:43:1f:2a:fa:a3:86: 12:1c:77:e4:47:58:cd:10:05:d1:8d:42:13:52:de:5b:91:4b: d2:80:a4:ca:9c:a6:6d:79:a8:3d:2b:3c:48:b1:8e:e0:ea:db: 6b:59:8b:25:18:85:3d:72:a8:ad:ed:db:f2:6b:2d:9d:5c:d2: f4:67:ba:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDWpIB2tmSTHAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YjJiNjY4OWEtYTEyMS00OWI4LTk3NTUtMTViMTQ0YjcxMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xmugF5pzdc3vuaKDzLYjqd38dcL6ukSrJCp no4BPJ+G/89dvo8mGw3VraiiOf/aq9dliGggAlsbo82TtaygVElNzVuBw2ueADPY kJ1gFBS/0lty34e6lQbEHRREXxMaeqSkZhJp7YokYOCfu6DWOEg1MKfBu8CPSiZE To+7ordegfVNIDSrmDUVOHvZPUOCzzOe4gQ77NCO+Q3bksWkSn7iHrdhoAn7JiYa Ompu2x78yya958igETFsaPS+pTtZuQlhq7g7SvtfyaOhMvsqkXc/qj+cX6esYR57 fElMYXRj8scqXlB55jMGZ+1f0MqT4DJ0ioYdlMOHQvs+rv2lpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnJzRjN5sZP5LEro9w8tLd1WJQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY1YjA3MWMtZjhjNC0z M2YyLTgzYWMtNTA1ZTAwN2IyM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0QKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzeZH1ah3flIoQyWRfQlX2oNuHe8kNGV2pMfFdEcZ367TZjut7Hiz6f TY/tWZPUHuF4Fq3fSqljXBY085XHWDMsCa0xaUZehKhQXI/vkVy1tOFFB4ThSCsv hiVtPZZ15M5TzI5Ccqt7oB30HD6BTEoQFIB5lZLbqgJwNIlDe1bB2E9jSwrh/nWk JvUGGRFfIMOy7jXnOtXB60lYESNc28LcAAQVF5BVVODGmdbwJhm1AZQlByW93GK2 euXRU7CclkMfKvqjhhIcd+RHWM0QBdGNQhNS3luRS9KApMqcpm15qD0rPEixjuDq 22tZiyUYhT1yqK3t2/JrLZ1c0vRnuno= -----END CERTIFICATE-----Generated at Thu Oct 8 15:44:16 2026 by rpki-client