$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16e389b4-9785-3b56-a5bf-a4f4ff3d0c12.roa File: 16e389b4-9785-3b56-a5bf-a4f4ff3d0c12.roa (raw, json) Hash identifier: LsC6JCtfSEnYOf2kLpU8QQ0Y+RfVQr0uu0zAWcobcP8= Subject key identifier: 82:3B:40:AD:D8:FA:D9:C5:02:A4:0F:63:05:88:DF:49:6E:9A:06:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F20F7D872B09E0E4FFAD66980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16e389b4-9785-3b56-a5bf-a4f4ff3d0c12.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 208.101.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d8:72:b0:9e:0e:4f:fa:d6:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=c4b90834-85ff-47b7-9028-2a63a75d4815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:fa:d5:a4:13:f3:90:1c:7f:a4:7d:3e:b4: c4:d0:e8:4a:89:46:f1:b3:88:ea:20:59:cd:c3:47: af:3c:76:cb:98:70:c7:04:cb:de:b5:e8:3f:6f:99: 11:f1:5c:d6:9a:0c:81:a0:83:0e:83:9b:dd:6d:9f: 32:ca:80:4b:6f:97:0c:31:9b:25:ef:60:2c:51:75: 2d:a5:34:e3:7d:0c:0d:5b:15:3d:c6:6a:11:24:8b: 13:84:8a:e4:42:d1:b1:77:1d:fc:6c:25:a8:cd:cc: 49:f1:17:ef:82:12:f4:4a:c5:b1:0c:fd:35:25:86: cb:b1:d5:f7:92:22:25:f1:12:ad:a2:d4:e6:3c:0b: 0f:57:7e:3a:cf:49:93:30:70:18:7b:11:79:28:04: e8:8e:51:d8:04:95:83:aa:91:3c:6a:a3:7a:96:e1: 3d:ce:33:80:b2:72:39:44:b5:86:84:8f:14:f6:03: 78:24:10:4f:26:04:c9:0a:4c:58:2f:71:f6:6f:1a: b3:b5:78:64:99:81:de:9e:db:02:a0:72:c5:2b:a3: 98:3b:d5:25:38:6e:36:a7:99:b0:48:93:2a:42:5e: ac:96:b3:7e:d6:fb:fb:47:7e:87:e6:8a:90:42:26: ee:14:b9:d5:e3:88:30:11:99:04:17:5e:bf:56:c5: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3B:40:AD:D8:FA:D9:C5:02:A4:0F:63:05:88:DF:49:6E:9A:06:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16e389b4-9785-3b56-a5bf-a4f4ff3d0c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e1:e0:0f:35:fb:d7:bc:16:68:1b:1e:4a:16:da:88:8b:b2: 7b:d2:ae:54:5b:a3:df:22:aa:66:ac:7b:22:eb:9a:a1:c8:23: 17:15:97:f6:59:ab:7e:6f:b1:6b:40:60:f6:2b:67:f0:14:07: b4:8a:40:e6:3a:cd:8f:f5:59:26:37:f9:f8:c2:7f:ea:51:f8: 87:68:a8:8b:ba:72:2f:21:c7:10:71:85:44:32:3d:93:4c:77: a5:a0:85:17:80:75:03:5b:16:eb:ff:19:55:2c:f0:a4:ae:f6: 88:ae:ea:14:6e:1b:53:5b:a5:ec:f4:48:e7:1b:03:51:a2:08: 4d:95:8a:9d:d4:c6:6e:a6:f1:2e:22:9b:aa:00:63:46:6e:49: 88:9d:39:0c:93:1a:b7:67:53:f5:8e:db:37:4a:06:9b:38:9c: e1:fa:40:29:f7:8c:ca:96:dc:de:b0:a0:9e:99:cd:83:33:15: f9:f6:dd:e9:cc:e9:2e:fc:02:12:8d:74:70:32:68:ed:72:54: 74:fc:ba:bc:eb:2e:df:3e:ae:7e:16:dc:61:30:ad:04:51:0f: 50:c5:9e:eb:27:fb:98:66:fa:3c:8b:42:37:b3:df:2e:a1:7e: 89:e2:d7:ee:53:fe:84:f1:50:3d:67:d4:01:5e:97:07:b7:cf: a9:23:60:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99hysJ4OT/rWaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YzRiOTA4MzQtODVmZi00N2I3LTkwMjgtMmE2M2E3NWQ0ODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nr61aQT85Acf6R9PrTE0OhKiUbxs4jqIFnN w0evPHbLmHDHBMveteg/b5kR8VzWmgyBoIMOg5vdbZ8yyoBLb5cMMZsl72AsUXUt pTTjfQwNWxU9xmoRJIsThIrkQtGxdx38bCWozcxJ8RfvghL0SsWxDP01JYbLsdX3 kiIl8RKtotTmPAsPV346z0mTMHAYexF5KATojlHYBJWDqpE8aqN6luE9zjOAsnI5 RLWGhI8U9gN4JBBPJgTJCkxYL3H2bxqztXhkmYHentsCoHLFK6OYO9UlOG42p5mw SJMqQl6slrN+1vv7R36H5oqQQibuFLnV44gwEZkEF16/VsXoPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFII7QK3Y+tnFAqQPYwWI30lumgZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTZlMzg5YjQtOTc4NS0z YjU2LWE1YmYtYTRmNGZmM2QwYzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHh4A81+9e8FmgbHkoW2oiLsnvSrlRbo98iqmaseyLrmqHIIxcVl/ZZ q35vsWtAYPYrZ/AUB7SKQOY6zY/1WSY3+fjCf+pR+IdoqIu6ci8hxxBxhUQyPZNM d6WghReAdQNbFuv/GVUs8KSu9oiu6hRuG1Nbpez0SOcbA1GiCE2Vip3Uxm6m8S4i m6oAY0ZuSYidOQyTGrdnU/WO2zdKBps4nOH6QCn3jMqW3N6woJ6ZzYMzFfn23enM 6S78AhKNdHAyaO1yVHT8urzrLt8+rn4W3GEwrQRRD1DFnusn+5hm+jyLQjez3y6h foni1+5T/oTxUD1n1AFelwe3z6kjYPY= -----END CERTIFICATE-----Generated at Sun Sep 20 20:54:14 2026 by rpki-client