$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10e1922c-c383-33fd-a1de-cb929670c275.roa File: 10e1922c-c383-33fd-a1de-cb929670c275.roa (raw, json) Hash identifier: 6CZV7+oG8mGkY1yCOeW48Qlvj3LxeS15lfXbCE7JCc4= Subject key identifier: 4C:75:F6:78:59:A3:6B:E5:D1:F8:FA:6F:A0:65:60:2F:7C:DB:20:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D68165178FAF4C916C140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10e1922c-c383-33fd-a1de-cb929670c275.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 174.131.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:68:16:51:78:fa:f4:c9:16:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=85783bcc-3267-41a3-a818-ea094b324c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:7e:03:fc:d9:79:9c:bf:8d:5f:2b:c2:ad: 01:6c:4e:71:62:6a:2d:12:95:75:40:c1:5c:d4:e6: 47:f0:31:d3:d1:13:ab:26:e1:8a:fa:c2:68:48:ed: 6e:f6:02:a5:38:63:71:11:e6:d9:cb:94:42:54:f3: 65:34:41:d5:2f:ef:de:14:f9:93:ec:72:47:b6:e6: 0b:a5:d0:10:92:f4:7f:2d:97:47:e1:ad:2a:02:fb: 4e:87:a9:06:ce:83:01:d6:ff:c6:29:af:b3:42:37: 70:9d:cf:0c:24:68:ad:f8:44:05:7f:69:6f:e8:86: 7f:36:6f:2b:14:93:cc:77:4d:53:bd:46:dd:f1:ec: b2:cd:4d:17:c8:bd:fa:42:3a:7e:e7:06:a9:e9:3b: 10:87:18:f6:97:b2:c4:4b:4d:08:ee:26:ab:5a:c2: 35:bb:50:5f:38:b0:6b:dd:74:76:51:ae:9c:e1:15: 11:0d:8e:d7:88:a1:67:16:2f:90:bf:f5:83:55:72: fb:fd:f3:8b:7f:46:4d:ec:6f:f1:58:45:9e:82:aa: 51:73:2f:d8:94:94:78:14:00:b3:7f:ac:54:48:6b: 73:d1:fa:be:9f:fe:4c:99:35:d3:1c:c9:6f:eb:a4: 40:60:e3:20:d8:a2:d0:a5:90:67:b7:3b:5c:2c:a2: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:75:F6:78:59:A3:6B:E5:D1:F8:FA:6F:A0:65:60:2F:7C:DB:20:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10e1922c-c383-33fd-a1de-cb929670c275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ca:a8:37:be:52:e0:fa:3a:f7:df:71:14:e2:9e:94:07:7e: 79:89:bd:30:55:aa:09:70:4f:0b:10:2d:a9:5c:8c:80:4b:ca: 0f:d2:95:b6:b4:f5:8a:07:61:b9:b7:cf:aa:0d:56:06:42:96: 62:15:96:10:27:be:20:7b:96:0c:56:df:bc:29:a3:ca:86:68: 60:74:7f:4e:52:e4:84:4f:63:50:6b:7b:91:23:0c:6d:e5:1f: f5:9c:83:1e:40:38:89:b6:ac:c7:51:59:31:d9:d8:33:a4:3e: c1:cb:5e:85:17:bc:ff:2f:c9:a6:9e:ad:1a:f3:5a:2e:25:61: e6:3f:b2:8a:9d:04:a3:55:5d:bc:2e:e2:77:22:87:77:5e:65: 32:98:3a:48:60:76:bf:5b:29:5d:7d:a8:68:3e:b1:69:46:17: 87:3e:c1:33:05:c8:5a:37:89:48:b8:20:fc:40:e4:b3:b0:98: 59:d7:01:6e:84:fd:1d:b5:a5:1d:2a:c7:25:b4:8c:8b:77:69: 24:1d:74:47:7f:f3:79:df:a2:03:99:9d:a6:8a:ea:34:97:19: 03:95:df:9d:7e:e4:6a:02:3e:44:f2:f2:36:24:42:98:1b:bc: 7f:f8:b7:49:99:d5:46:49:89:45:6a:51:e3:ba:7f:1e:be:eb: c8:49:fe:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWgWUXj69MkWwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ODU3ODNiY2MtMzI2Ny00MWEzLWE4MTgtZWEwOTRiMzI0YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3x+A/zZeZy/jV8rwq0BbE5xYmotEpV1QMFc 1OZH8DHT0ROrJuGK+sJoSO1u9gKlOGNxEebZy5RCVPNlNEHVL+/eFPmT7HJHtuYL pdAQkvR/LZdH4a0qAvtOh6kGzoMB1v/GKa+zQjdwnc8MJGit+EQFf2lv6IZ/Nm8r FJPMd01TvUbd8eyyzU0XyL36Qjp+5wap6TsQhxj2l7LES00I7iarWsI1u1BfOLBr 3XR2Ua6c4RURDY7XiKFnFi+Qv/WDVXL7/fOLf0ZN7G/xWEWegqpRcy/YlJR4FACz f6xUSGtz0fq+n/5MmTXTHMlv66RAYOMg2KLQpZBntztcLKKX9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx19nhZo2vl0fj6b6BlYC982yAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTBlMTkyMmMtYzM4My0z M2ZkLWExZGUtY2I5Mjk2NzBjMjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7KqDe+UuD6OvffcRTinpQHfnmJvTBVqglwTwsQLalcjIBLyg/Slba0 9YoHYbm3z6oNVgZClmIVlhAnviB7lgxW37wpo8qGaGB0f05S5IRPY1Bre5EjDG3l H/Wcgx5AOIm2rMdRWTHZ2DOkPsHLXoUXvP8vyaaerRrzWi4lYeY/soqdBKNVXbwu 4ncih3deZTKYOkhgdr9bKV19qGg+sWlGF4c+wTMFyFo3iUi4IPxA5LOwmFnXAW6E /R21pR0qxyW0jIt3aSQddEd/83nfogOZnaaK6jSXGQOV351+5GoCPkTy8jYkQpgb vH/4t0mZ1UZJiUVqUeO6fx6+68hJ/gs= -----END CERTIFICATE-----Generated at Sun Oct 11 07:44:44 2026 by rpki-client