$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9d5a65-c078-3d1c-9f74-0b42aadacc55.roa File: 0d9d5a65-c078-3d1c-9f74-0b42aadacc55.roa (raw, json) Hash identifier: SV3X5RTPzyyeypxrAxV/l5U5+E8F3UVvEs6ut90q5hY= Subject key identifier: A4:A6:D0:A6:DD:3A:B2:A1:14:17:85:24:79:3E:A2:0E:03:64:27:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B98BFED6B94FB86C9720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9d5a65-c078-3d1c-9f74-0b42aadacc55.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.184.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b9:8b:fe:d6:b9:4f:b8:6c:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=88f58a97-1ea0-47b0-bfe3-be7599b97ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:21:cb:b5:70:d2:10:66:f5:27:86:48:a6: 70:1b:2c:4b:68:3b:69:b2:a1:b8:75:fd:4c:e4:f6: a4:c0:3f:6b:db:08:68:dc:5b:8e:53:6f:ea:7a:78: 65:52:fd:16:9b:75:71:a4:e2:ae:ca:8c:e5:67:44: 25:2b:b7:db:a2:0c:99:aa:88:1d:b7:de:5f:2a:58: 7b:6b:1e:83:4f:7c:2a:1e:e4:10:e8:6d:13:0d:55: 6f:ee:55:bc:42:53:43:a6:a6:8d:77:25:b3:b8:ef: 9c:f5:22:73:3d:de:e5:f4:40:eb:8a:8c:98:c2:6c: 37:70:61:35:99:d2:41:d4:6b:09:4f:db:51:6e:cc: 45:03:a8:d7:c4:f5:f0:5e:70:68:27:73:0a:3c:82: e4:7d:22:49:c5:a3:26:68:e5:94:71:e3:de:5a:dd: f6:cd:28:42:50:35:96:2b:66:1a:32:e8:d0:49:a4: 9f:2c:8d:b4:98:79:e6:69:5e:36:84:27:a2:21:93: 78:6a:b1:ca:19:b0:68:54:a0:49:3f:22:0e:e7:ea: 8f:54:4f:b4:ea:5d:b7:97:7a:d9:a8:d8:00:0d:d1: 12:05:74:c8:a6:42:71:b5:c4:79:20:a5:ce:11:16: 01:2e:57:2f:55:a2:0a:44:03:a5:5f:7d:47:60:7f: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:D0:A6:DD:3A:B2:A1:14:17:85:24:79:3E:A2:0E:03:64:27:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9d5a65-c078-3d1c-9f74-0b42aadacc55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:48:e7:cf:03:78:e8:5b:42:b2:a7:be:fb:b1:88:cc:6a:ba: 55:42:35:3f:36:4d:38:d0:31:35:cd:8d:bd:cf:a2:30:5d:7b: 9e:a1:84:cb:71:fa:b9:5d:0a:ae:95:63:7e:dd:0f:13:89:98: 7f:42:f2:07:98:ae:ff:81:22:56:e5:7f:64:24:b3:1c:18:89: 7f:65:d4:bc:30:07:6f:ce:7b:ef:a8:99:72:12:9e:22:2b:30: 33:0f:a6:7d:be:44:f7:32:f8:7c:c6:02:84:0a:c6:b3:74:bf: b4:3e:d5:aa:62:34:df:f5:cf:79:72:27:44:99:93:65:1c:fd: 0b:20:bb:6a:24:54:5e:e4:63:d8:fe:d6:ad:89:c4:f3:79:cd: 90:43:f5:88:bd:81:bb:c8:60:5c:22:76:90:02:9a:6d:96:fd: b4:e2:8a:00:cf:82:d1:3a:47:13:9d:ab:06:28:a6:4c:84:3d: 10:0c:7e:50:d1:2f:b1:74:82:84:5d:c2:e7:7d:27:92:a9:71: 7e:15:9a:eb:27:c1:bb:35:fc:45:ba:d0:f1:cc:49:d8:0b:68: 48:c2:79:5a:ba:be:4f:ca:cb:8f:2e:f4:f6:ef:67:28:46:74: 8e:13:7f:98:68:4f:ed:f2:74:3a:0d:27:9f:9a:a2:56:2c:e4: 4c:ed:5e:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rmL/ta5T7hslyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODhmNThhOTctMWVhMC00N2IwLWJmZTMtYmU3NTk5Yjk3Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ghy7Vw0hBm9SeGSKZwGyxLaDtpsqG4df1M 5PakwD9r2who3FuOU2/qenhlUv0Wm3VxpOKuyozlZ0QlK7fbogyZqogdt95fKlh7 ax6DT3wqHuQQ6G0TDVVv7lW8QlNDpqaNdyWzuO+c9SJzPd7l9EDrioyYwmw3cGE1 mdJB1GsJT9tRbsxFA6jXxPXwXnBoJ3MKPILkfSJJxaMmaOWUcePeWt32zShCUDWW K2YaMujQSaSfLI20mHnmaV42hCeiIZN4arHKGbBoVKBJPyIO5+qPVE+06l23l3rZ qNgADdESBXTIpkJxtcR5IKXOERYBLlcvVaIKRAOlX31HYH/H3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSm0KbdOrKhFBeFJHk+og4DZCdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQ5ZDVhNjUtYzA3OC0z ZDFjLTlmNzQtMGI0MmFhZGFjYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlI588DeOhbQrKnvvuxiMxqulVCNT82TTjQMTXNjb3PojBde56hhMtx +rldCq6VY37dDxOJmH9C8geYrv+BIlblf2QksxwYiX9l1LwwB2/Oe++omXISniIr MDMPpn2+RPcy+HzGAoQKxrN0v7Q+1apiNN/1z3lyJ0SZk2Uc/Qsgu2okVF7kY9j+ 1q2JxPN5zZBD9Yi9gbvIYFwidpACmm2W/bTiigDPgtE6RxOdqwYopkyEPRAMflDR L7F0goRdwud9J5KpcX4Vmusnwbs1/EW60PHMSdgLaEjCeVq6vk/Ky48u9PbvZyhG dI4Tf5hoT+3ydDoNJ5+aolYs5EztXsU= -----END CERTIFICATE-----Generated at Thu Oct 8 16:44:53 2026 by rpki-client