$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa File: e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa (raw, json) Hash identifier: diaU8mSpZiVu3P3U0OcCA9f6T2AmlXFgwok/kxp/i6E= Subject key identifier: 77:E5:01:86:5B:21:C2:C9:53:7A:83:6D:DC:BC:8B:A7:4B:A6:8B:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DA8158B6386745E0636F5A280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 209.83.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:8b:63:86:74:5e:06:36:f5:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=06087a4c-d4d2-4b6d-9ea0-8fada1179484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bd:d8:f7:8a:29:4c:aa:c4:af:58:bf:ce:4b: f9:66:11:2e:19:70:ea:2b:49:53:12:02:77:47:0d: fe:70:97:78:52:8c:99:c0:f5:31:21:8e:e7:8f:1f: a1:91:16:63:ed:f9:4f:09:56:b0:5b:4c:60:5b:3a: 89:74:15:63:7c:3c:1b:03:70:25:3a:43:c1:c5:6b: 4b:6d:d3:ef:56:74:d0:0d:6f:be:42:90:37:66:d7: 2a:90:df:90:6f:5b:c8:43:34:e9:4b:7c:23:fa:0a: 3e:67:c1:99:db:cd:4d:e9:81:fc:18:d3:4c:26:59: 94:e9:46:e3:ba:6d:f2:fe:fd:b1:75:11:e4:57:b2: 00:da:71:54:28:9f:4b:39:7f:8a:33:b8:09:51:2c: 51:ee:73:72:88:aa:8d:e4:42:73:02:5c:c7:de:75: 0e:ed:44:55:b4:98:94:ed:e3:26:29:32:df:d7:d9: 33:82:98:40:92:22:e1:8c:bb:c2:a1:e8:1f:92:23: f6:d7:ac:86:99:29:07:6c:54:97:b0:ed:1e:20:1f: 86:c4:74:78:fb:1a:15:44:da:20:f1:7b:bf:f3:dd: ee:43:80:e0:6d:ab:98:8d:79:9d:7d:f3:a5:64:3d: 1e:93:ed:77:5c:f9:1b:ea:c6:12:85:f8:a2:70:4f: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E5:01:86:5B:21:C2:C9:53:7A:83:6D:DC:BC:8B:A7:4B:A6:8B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.83.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b3:81:2f:c9:1f:0c:3d:34:40:68:e6:0f:d2:cd:07:ce:4a: 26:ee:be:96:0e:92:62:b5:22:eb:19:d3:08:d9:96:2e:c9:01: 95:7d:f0:fb:51:33:40:8d:ff:a1:0c:0c:14:ea:9f:85:96:42: cd:10:e7:18:e1:fa:4b:01:a4:c4:f7:74:e5:81:27:e1:e9:c4: fa:6a:d8:eb:ef:52:d0:a9:d4:04:75:b6:37:00:8f:4d:1c:90: 99:4c:ef:86:89:56:36:3e:2b:1e:39:6b:89:c3:dc:a0:d1:78: 30:bc:62:3a:f8:ad:84:74:23:17:f5:51:ad:10:b6:f2:04:e5: b1:13:da:b3:ab:b5:6f:5f:16:ae:4c:59:62:e0:c5:bb:96:86: aa:5c:5e:22:f6:46:f7:17:be:2b:4d:bb:3a:90:ec:29:8b:89: 6d:c9:93:fd:ec:81:f6:6c:49:4c:f5:6a:0b:d0:95:2a:af:33: 28:e9:14:1d:1c:58:d2:36:a7:f2:88:84:8a:bc:87:6f:d2:bc: af:6f:da:09:36:c1:41:06:e7:9e:48:b4:9b:9a:a8:a6:dd:74: 5f:8d:50:b7:ad:35:f4:27:bd:6c:6d:a3:99:62:fe:31:d9:9e: bf:ee:c9:0d:4b:5b:84:15:ef:f8:cd:a7:70:d0:94:c6:6d:ff: b7:b9:63:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYtjhnReBjb1ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MDYwODdhNGMtZDRkMi00YjZkLTllYTAtOGZhZGExMTc5NDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm73Y94opTKrEr1i/zkv5ZhEuGXDqK0lTEgJ3 Rw3+cJd4UoyZwPUxIY7njx+hkRZj7flPCVawW0xgWzqJdBVjfDwbA3AlOkPBxWtL bdPvVnTQDW++QpA3ZtcqkN+Qb1vIQzTpS3wj+go+Z8GZ281N6YH8GNNMJlmU6Ubj um3y/v2xdRHkV7IA2nFUKJ9LOX+KM7gJUSxR7nNyiKqN5EJzAlzH3nUO7URVtJiU 7eMmKTLf19kzgphAkiLhjLvCoegfkiP216yGmSkHbFSXsO0eIB+GxHR4+xoVRNog 8Xu/893uQ4DgbauYjXmdffOlZD0ek+13XPkb6sYShfiicE/CcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHflAYZbIcLJU3qDbdy8i6dLpoupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY4N2Q0OTktMGI5Zi0z MGY2LWFlOWMtYjdlZTNjZjM4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGezgS/JHww9NEBo5g/SzQfOSibuvpYOkmK1IusZ0wjZli7JAZV98PtR M0CN/6EMDBTqn4WWQs0Q5xjh+ksBpMT3dOWBJ+HpxPpq2OvvUtCp1AR1tjcAj00c kJlM74aJVjY+Kx45a4nD3KDReDC8Yjr4rYR0Ixf1Ua0QtvIE5bET2rOrtW9fFq5M WWLgxbuWhqpcXiL2RvcXvitNuzqQ7CmLiW3Jk/3sgfZsSUz1agvQlSqvMyjpFB0c WNI2p/KIhIq8h2/SvK9v2gk2wUEG555ItJuaqKbddF+NULetNfQnvWxto5li/jHZ nr/uyQ1LW4QV7/jNp3DQlMZt/7e5Y5I= -----END CERTIFICATE-----Generated at Wed May 13 07:03:20 2026 by rpki-client