$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ebfcdd-e246-31f5-bf4c-227b2114b836.roa File: 95ebfcdd-e246-31f5-bf4c-227b2114b836.roa (raw, json) Hash identifier: ZPonZXlFiJRkxsasUhcDNUc3FCdwQq/WuIfrcnOzSjg= Subject key identifier: F4:1F:BC:6E:4B:58:E4:0D:23:E0:9A:3F:F1:AB:19:3C:BC:BD:BB:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4542989E22B0849282609200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ebfcdd-e246-31f5-bf4c-227b2114b836.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 7029 IP address blocks: 209.253.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:98:9e:22:b0:84:92:82:60:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=9810f1cc-a9f7-464c-8b16-d7f051b8a0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:c0:d7:dc:c0:b7:fc:ed:68:2d:72:45:b1: af:2d:fd:84:3c:4f:10:ce:a5:cb:cb:64:56:11:aa: bb:06:9f:b5:f7:a1:2b:01:51:27:9c:46:1e:57:d1: 81:75:b6:d5:37:52:a6:e3:dc:c4:6b:32:a9:e5:22: 4d:d1:1e:4a:b2:76:81:c7:ec:33:2f:46:21:ae:42: 66:74:87:fd:a5:04:ee:96:2a:13:28:02:c3:2e:1b: a5:2d:cb:c2:1e:fd:cc:2e:d6:5d:3e:fd:af:cb:54: 74:53:b1:aa:21:0f:bf:a5:32:33:16:37:e6:1b:5e: eb:88:46:86:65:ae:3f:74:12:05:ad:38:c9:f4:b8: 66:30:65:53:07:e9:74:5e:73:11:2b:ea:ce:0e:e5: a3:e7:ae:74:05:bd:be:72:40:b1:93:c8:21:c1:cb: fb:4c:e6:66:3d:e0:46:da:00:a0:bf:4d:81:92:5d: da:75:8a:a4:76:50:12:0f:8e:e5:d6:98:bb:a6:24: 87:d3:44:02:76:57:1c:2b:27:57:ce:a3:8c:4e:2a: 7d:a8:fa:e2:3e:3c:43:bd:c1:04:19:9b:f1:bc:a5: e4:4e:de:ea:b3:87:cb:ed:f9:d0:7f:bc:d3:2a:75: 1e:89:9f:fa:80:95:af:1a:da:ac:01:c4:c8:e5:c9: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:BC:6E:4B:58:E4:0D:23:E0:9A:3F:F1:AB:19:3C:BC:BD:BB:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ebfcdd-e246-31f5-bf4c-227b2114b836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6e:ab:3f:f3:97:7c:aa:18:bf:f8:49:55:e7:73:61:9d:38: 68:af:42:37:96:0f:0b:54:58:16:20:a6:a4:a2:30:e8:d3:de: 49:4e:47:16:d3:a7:2c:32:e9:79:e4:c1:fc:f8:c0:1c:5c:87: ec:50:b3:ce:ed:5f:0d:0b:d3:9d:e6:08:5d:a4:2a:fc:d9:7a: 50:3c:95:2a:55:86:55:7e:56:3c:24:f8:cc:78:14:10:96:d5: 62:5a:e2:4a:67:57:ba:60:35:38:35:1d:68:12:8e:5c:8b:f8: 76:4c:4a:30:92:cb:0f:79:e3:45:e3:76:18:01:8b:c2:6f:e4: 63:61:fd:76:d3:6e:7c:02:dd:8a:33:71:41:09:84:a4:28:54: 3c:4d:c3:04:25:02:96:2a:46:5d:a4:41:e2:e3:09:3a:01:8f: 30:c0:eb:93:30:8e:06:60:5d:11:19:9b:63:7c:db:c3:ad:8b: 84:94:55:f0:b8:d2:ef:a9:91:13:83:cf:f9:50:00:f1:94:01: b8:15:6d:8d:b7:a5:ac:d8:f7:97:52:d3:94:af:81:9f:87:89: 21:28:56:69:61:76:61:47:8a:f9:54:db:df:10:4c:ab:f3:e8: 31:d4:2c:59:0d:e7:8c:38:b5:28:ca:cd:fc:63:91:b0:47:81: 80:df:29:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQpieIrCEkoJgkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk OTgxMGYxY2MtYTlmNy00NjRjLThiMTYtZDdmMDUxYjhhMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSjA19zAt/ztaC1yRbGvLf2EPE8QzqXLy2RW Eaq7Bp+196ErAVEnnEYeV9GBdbbVN1Km49zEazKp5SJN0R5KsnaBx+wzL0YhrkJm dIf9pQTulioTKALDLhulLcvCHv3MLtZdPv2vy1R0U7GqIQ+/pTIzFjfmG17riEaG Za4/dBIFrTjJ9LhmMGVTB+l0XnMRK+rODuWj5650Bb2+ckCxk8ghwcv7TOZmPeBG 2gCgv02Bkl3adYqkdlASD47l1pi7piSH00QCdlccKydXzqOMTip9qPriPjxDvcEE GZvxvKXkTt7qs4fL7fnQf7zTKnUeiZ/6gJWvGtqsAcTI5clCjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQfvG5LWOQNI+CaP/GrGTy8vbsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVlYmZjZGQtZTI0Ni0z MWY1LWJmNGMtMjI3YjIxMTRiODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0f3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtuqz/zl3yqGL/4SVXnc2GdOGivQjeWDwtUWBYgpqSiMOjT3klORxbT pywy6Xnkwfz4wBxch+xQs87tXw0L053mCF2kKvzZelA8lSpVhlV+Vjwk+Mx4FBCW 1WJa4kpnV7pgNTg1HWgSjlyL+HZMSjCSyw9540XjdhgBi8Jv5GNh/XbTbnwC3Yoz cUEJhKQoVDxNwwQlApYqRl2kQeLjCToBjzDA65MwjgZgXREZm2N828Oti4SUVfC4 0u+pkRODz/lQAPGUAbgVbY23pazY95dS05SvgZ+HiSEoVmlhdmFHivlU298QTKvz 6DHULFkN54w4tSjKzfxjkbBHgYDfKSk= -----END CERTIFICATE-----Generated at Sat Sep 26 00:21:49 2026 by rpki-client