$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22e3ba43-908b-3993-b52d-674fe0d22ee8.roa File: 22e3ba43-908b-3993-b52d-674fe0d22ee8.roa (raw, json) Hash identifier: VdYXTas/oSbVIAz67UUJPa21/A5oo3vu/mGLhTPNCyA= Subject key identifier: 64:42:3C:A7:B9:5D:FC:50:E9:F2:7B:F2:99:1F:EE:C6:A1:27:37:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F173239E381A99EF673FE0480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22e3ba43-908b-3993-b52d-674fe0d22ee8.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 7029 IP address blocks: 208.101.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:39:e3:81:a9:9e:f6:73:fe:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=ecf5899b-fa46-48f3-a58d-c471972c9c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:57:dc:a3:cf:c4:0c:03:3b:2a:52:b6:77:c2: c2:15:0a:81:09:81:bd:c0:cd:89:e5:81:03:6f:13: 66:f8:9e:dc:c2:c6:42:90:f5:0a:6b:17:56:bd:fb: f5:f0:4e:45:96:88:45:3c:50:f1:a3:0a:3b:09:14: f0:86:4a:67:95:20:36:68:a1:9d:9c:ba:16:48:2d: 11:61:0b:42:29:78:ed:9e:98:6d:15:ae:17:e2:f1: 55:af:1e:08:b4:1f:45:de:ae:5d:bd:a8:19:ba:9f: 06:e7:2b:a0:05:4b:6b:f3:71:2f:6a:3b:b8:3d:6d: 28:fe:16:71:15:30:25:27:98:a9:9d:14:e2:ae:d9: e8:26:0a:83:df:e1:d7:0f:f2:64:6d:3c:90:df:b1: ec:4d:66:f6:d7:ed:d5:76:a4:f9:21:0b:94:7a:3b: 0b:36:45:0a:dd:6b:0d:9e:9c:c1:9c:2e:44:d6:be: 84:07:09:b7:96:8f:80:b2:46:3b:fa:ab:a2:7b:70: c8:87:99:26:99:dd:18:aa:0c:e6:fe:af:a1:9d:90: 54:7c:b9:71:51:4f:01:6f:ea:44:4f:24:14:3a:45: 5b:8a:3e:74:80:6e:5f:7f:ae:ec:b8:96:3d:0b:35: 41:11:3e:86:f4:47:19:71:53:8e:80:ff:8e:17:ed: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:42:3C:A7:B9:5D:FC:50:E9:F2:7B:F2:99:1F:EE:C6:A1:27:37:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22e3ba43-908b-3993-b52d-674fe0d22ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:25:2d:ab:81:57:47:14:f2:89:65:8a:66:75:26:82:d2:85: 39:22:dc:46:b1:6f:8c:34:c5:a8:9d:fc:06:fd:43:af:32:da: 49:bc:14:bc:31:4f:f3:d3:74:81:0a:03:ee:26:55:6a:03:b1: eb:b8:75:18:d7:7f:33:e7:57:38:32:3b:84:66:e8:ba:2a:5e: 4a:bd:51:f4:fa:d7:3e:c3:c1:56:46:a9:2d:90:3c:9a:fc:88: 03:a8:72:d0:2d:95:87:bf:21:58:88:5a:13:25:76:6a:94:8f: be:c5:bf:7b:bd:50:d2:42:f4:dc:1c:80:c5:40:78:ac:c6:68: 3c:49:04:61:b7:63:8e:57:03:34:fa:67:9e:99:56:2f:a9:2e: b9:06:f5:8a:54:29:2d:59:9f:9f:55:61:35:89:9a:af:8f:6c: 24:51:97:fa:4e:a3:92:2e:35:8c:d3:93:86:70:2e:26:ed:68: 2d:63:d8:a6:f9:5f:54:e8:3a:10:fd:4f:b8:81:70:04:d8:f3: 8c:01:32:2b:46:26:c0:6a:68:b0:4d:dd:36:cd:2f:bc:12:55: 74:f7:d5:61:53:03:64:03:e1:5a:a2:88:e3:2f:ab:6d:a6:c0: c7:5a:21:75:8b:05:a7:35:83:8e:45:90:48:95:64:76:d3:07: 18:c9:bc:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjnjgame9nP+BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZWNmNTg5OWItZmE0Ni00OGYzLWE1OGQtYzQ3MTk3MmM5YzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilfco8/EDAM7KlK2d8LCFQqBCYG9wM2J5YED bxNm+J7cwsZCkPUKaxdWvfv18E5FlohFPFDxowo7CRTwhkpnlSA2aKGdnLoWSC0R YQtCKXjtnphtFa4X4vFVrx4ItB9F3q5dvagZup8G5yugBUtr83Evaju4PW0o/hZx FTAlJ5ipnRTirtnoJgqD3+HXD/JkbTyQ37HsTWb21+3VdqT5IQuUejsLNkUK3WsN npzBnC5E1r6EBwm3lo+AskY7+quie3DIh5kmmd0Yqgzm/q+hnZBUfLlxUU8Bb+pE TyQUOkVbij50gG5ff67suJY9CzVBET6G9EcZcVOOgP+OF+1HCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRCPKe5XfxQ6fJ78pkf7sahJzcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjJlM2JhNDMtOTA4Yi0z OTkzLWI1MmQtNjc0ZmUwZDIyZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GWWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABklLauBV0cU8ollimZ1JoLShTki3Eaxb4w0xaid/Ab9Q68y2km8FLwx T/PTdIEKA+4mVWoDseu4dRjXfzPnVzgyO4Rm6LoqXkq9UfT61z7DwVZGqS2QPJr8 iAOoctAtlYe/IViIWhMldmqUj77Fv3u9UNJC9NwcgMVAeKzGaDxJBGG3Y45XAzT6 Z56ZVi+pLrkG9YpUKS1Zn59VYTWJmq+PbCRRl/pOo5IuNYzTk4ZwLibtaC1j2Kb5 X1ToOhD9T7iBcATY84wBMitGJsBqaLBN3TbNL7wSVXT31WFTA2QD4VqiiOMvq22m wMdaIXWLBac1g45FkEiVZHbTBxjJvPQ= -----END CERTIFICATE-----Generated at Mon Sep 28 23:06:50 2026 by rpki-client