$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51ada71-9eee-3f42-a21d-fceb50af00ed.roa File: a51ada71-9eee-3f42-a21d-fceb50af00ed.roa (raw, json) Hash identifier: jTyBEdqe1HzEAfJIVJk02+LhyujhOsTfrditlQAsMe4= Subject key identifier: 79:4A:72:9F:B4:C0:12:D6:34:ED:7F:CE:09:FA:07:BF:AE:BB:FC:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D95AA0CCA0419F9F04980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51ada71-9eee-3f42-a21d-fceb50af00ed.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 209.218.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:95:aa:0c:ca:04:19:f9:f0:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=10841aaf-1778-4a80-9525-d7f0d43fc8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:8d:27:aa:34:38:bf:01:ec:48:65:e8:9f: 07:63:c1:b4:9c:d5:c7:6c:1b:0b:8c:e4:e2:a1:21: be:46:b5:0a:45:31:7f:ff:56:8f:ff:37:e2:76:f2: f9:5c:2d:e3:53:8b:42:5c:42:75:f6:0a:6f:dc:50: 6b:67:ac:7d:70:86:f8:27:4a:8d:00:44:56:1f:70: 80:00:92:fc:03:fc:1c:8c:60:c5:46:b3:8c:3d:31: 5b:26:3e:26:23:e6:79:08:86:56:37:a7:61:f3:39: 7e:18:fc:12:95:00:d3:57:43:51:9c:0b:87:13:0e: 97:6d:81:d2:08:a4:73:ee:01:0e:14:4b:39:a3:0f: 68:24:ed:90:d6:2f:9f:70:2d:47:44:2c:b5:8d:59: 6e:78:f5:c7:cd:59:c2:e6:82:55:af:06:0f:37:b6: 0a:5a:27:02:6a:cf:f5:08:65:fe:4f:51:a3:a1:d9: 46:3e:66:85:dd:4d:cf:0e:35:80:3d:f5:a7:fc:1e: 78:96:7c:8d:9b:4b:97:06:f3:08:0e:7d:52:af:f8: 40:ac:8d:4b:75:fa:d3:de:ed:e7:49:50:8f:d6:d8: 50:9b:70:81:0d:a2:10:92:be:a6:12:fd:63:b0:0b: 2b:8f:3d:fb:b3:51:2f:9d:e5:9f:af:9d:d4:5d:6a: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4A:72:9F:B4:C0:12:D6:34:ED:7F:CE:09:FA:07:BF:AE:BB:FC:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51ada71-9eee-3f42-a21d-fceb50af00ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.218.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f1:d5:f6:bd:02:91:2d:2d:0e:3f:6b:ab:87:36:09:78:19: c6:0a:bb:b8:d0:d9:83:cc:87:dc:3a:e9:07:e0:6b:83:04:a9: 07:be:85:9a:42:28:84:5a:3d:50:b7:ba:3b:a7:f4:ed:3b:82: 07:11:69:20:79:5f:08:9b:ff:20:51:f7:b9:cc:f9:0b:c3:58: 86:91:e5:d0:5c:c0:a7:69:0f:4c:be:f0:7f:80:e0:ac:dc:ea: 0f:fc:1a:13:69:b6:2c:3c:fd:38:02:23:d3:22:00:00:ef:1a: 95:be:ed:93:86:2d:3e:c1:38:ba:f4:80:85:64:63:76:dd:0e: 7d:91:cb:a1:06:17:13:9c:3c:b0:34:ae:82:b0:92:9c:f4:24: 2c:66:c7:8c:ee:e6:35:d8:f6:9b:19:d9:3e:35:23:2d:8d:ca: 19:d4:59:5a:03:04:8e:a1:ce:b0:fa:44:9c:e4:08:31:7c:35: ee:a3:f5:e7:e0:95:6f:c9:28:9b:35:a9:7b:9d:f3:8e:68:0f: b0:d2:d8:cb:cd:2a:b7:a3:7a:d6:09:aa:c9:55:07:dd:1c:ca: 3b:eb:ed:f9:a3:1a:79:67:96:9d:10:04:ec:8b:d3:1a:e9:22: a8:cd:79:a0:29:f3:18:73:d0:89:b0:f5:cf:f6:b4:70:18:5e: c9:8e:d2:74 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnZWqDMoEGfnwSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MTA4NDFhYWYtMTc3OC00YTgwLTk1MjUtZDdmMGQ0M2ZjOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQCNJ6o0OL8B7Ehl6J8HY8G0nNXHbBsLjOTi oSG+RrUKRTF//1aP/zfidvL5XC3jU4tCXEJ19gpv3FBrZ6x9cIb4J0qNAERWH3CA AJL8A/wcjGDFRrOMPTFbJj4mI+Z5CIZWN6dh8zl+GPwSlQDTV0NRnAuHEw6XbYHS CKRz7gEOFEs5ow9oJO2Q1i+fcC1HRCy1jVluePXHzVnC5oJVrwYPN7YKWicCas/1 CGX+T1GjodlGPmaF3U3PDjWAPfWn/B54lnyNm0uXBvMIDn1Sr/hArI1LdfrT3u3n SVCP1thQm3CBDaIQkr6mEv1jsAsrjz37s1EvneWfr53UXWp7RwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHlKcp+0wBLWNO1/zgn6B7+uu/xpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTUxYWRhNzEtOWVlZS0z ZjQyLWEyMWQtZmNlYjUwYWYwMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0dowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAh/HV9r0CkS0tDj9rq4c2CXgZxgq7uNDZg8yH3DrpB+BrgwSpB76FmkIo hFo9ULe6O6f07TuCBxFpIHlfCJv/IFH3ucz5C8NYhpHl0FzAp2kPTL7wf4DgrNzq D/waE2m2LDz9OAIj0yIAAO8alb7tk4YtPsE4uvSAhWRjdt0OfZHLoQYXE5w8sDSu grCSnPQkLGbHjO7mNdj2mxnZPjUjLY3KGdRZWgMEjqHOsPpEnOQIMXw17qP15+CV b8komzWpe53zjmgPsNLYy80qt6N61gmqyVUH3RzKO+vt+aMaeWeWnRAE7IvTGuki qM15oCnzGHPQibD1z/a0cBheyY7SdA== -----END CERTIFICATE-----Generated at Thu Oct 1 21:04:08 2026 by rpki-client