$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a67b775-3483-399e-856e-2792bb63644c.roa File: 2a67b775-3483-399e-856e-2792bb63644c.roa (raw, json) Hash identifier: Y9Rs/rS+SlAPw8eaeJ2Bi15zrwduVWBgAAbLwTpsE9I= Subject key identifier: CA:EC:13:44:C0:CA:B9:ED:E4:3C:0D:1B:1A:87:E7:33:66:3E:19:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1161539E4FFB990A82F36680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a67b775-3483-399e-856e-2792bb63644c.roa Signing time: Fri 04 Sep 2026 23:00:18 +0000 ROA not before: Fri 04 Sep 2026 23:00:18 +0000 ROA not after: Fri 04 Dec 2026 00:00:18 +0000 asID: 7029 IP address blocks: 173.213.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:61:53:9e:4f:fb:99:0a:82:f3:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 23:00:18 2026 GMT Not After : Dec 4 00:00:18 2026 GMT Subject: CN=a0716150-953c-4d3a-8fa8-9e3dcb0f9b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:43:2f:97:6f:b0:e9:86:0d:c6:f8:85:60:aa: 08:aa:8a:59:10:ab:bc:08:9a:f9:7a:a7:cc:4e:6c: ab:44:4b:aa:ce:fd:a1:b4:a9:68:d6:c9:42:3e:5a: de:b4:6f:dc:13:fb:16:72:24:f7:36:d5:6c:67:94: 8b:82:f9:10:16:3c:2d:64:4f:b3:28:5e:c7:65:91: 7a:1c:8a:2e:1e:ec:82:09:ed:e7:46:e3:b9:d6:ed: 33:ee:a4:ba:1a:13:1d:7f:22:8e:e5:f7:82:88:91: 34:80:27:25:ae:ef:35:52:cc:ae:0b:64:62:38:b3: 5a:00:71:5b:22:fb:4b:de:d8:d0:6f:e4:7f:9b:d6: 88:dc:51:19:7a:c8:31:cb:21:48:50:a4:62:4a:91: 80:38:0d:05:84:32:5c:4b:f5:ef:df:41:46:23:16: 4d:8f:67:b0:ad:76:5f:b8:48:d8:82:32:8f:35:e0: 29:95:13:51:d2:a6:e6:5e:7d:66:78:27:24:c9:f9: 83:39:35:9b:ea:5f:02:60:e1:99:f0:3c:b2:a7:fe: 48:91:32:d6:0a:5a:14:33:bf:9a:5f:ba:95:5e:e9: a5:2b:5d:d3:2a:d2:35:8e:e1:6e:2c:e8:b2:07:e9: 6d:1f:8f:2e:e2:74:e4:b6:da:d5:5a:9e:cd:9a:2e: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EC:13:44:C0:CA:B9:ED:E4:3C:0D:1B:1A:87:E7:33:66:3E:19:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a67b775-3483-399e-856e-2792bb63644c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:39:9b:59:9a:57:36:33:f1:75:96:9f:cc:2e:5b:da:e6:35: 72:bf:24:54:eb:da:a8:e4:33:2f:a2:87:77:4d:44:b7:9f:61: 4d:1a:7c:29:9e:2d:fd:41:c7:6a:72:87:cc:7f:98:45:18:65: 95:84:39:8c:7f:29:dc:8c:47:36:db:47:da:5d:31:80:f5:28: a3:b3:16:5a:23:df:a3:23:dc:ec:8c:db:c1:b5:57:db:d3:8a: 01:f6:c1:c6:a9:5b:7a:90:27:5c:82:2e:e2:6e:1b:57:d4:82: e4:92:00:99:60:4a:3d:dc:3c:2e:5b:25:18:9b:82:04:6c:bc: 51:92:ff:f7:07:e9:f0:78:96:70:9f:ec:df:98:e6:17:eb:89: 19:9e:4a:f1:43:61:3f:75:90:01:71:03:ec:ac:1f:1a:4e:6b: cf:1c:f1:06:5c:7a:e0:ea:80:92:47:e5:48:25:04:27:01:19: 4e:4f:59:14:8c:f7:b5:14:12:5b:e6:e7:42:dd:4a:bc:2e:60: 87:72:09:a8:b6:f4:a4:f7:75:1f:cf:ca:a3:57:fb:bb:12:4f: 63:40:c1:83:ac:ef:39:94:4e:85:13:37:5f:f4:d3:61:2e:0f: c3:d5:01:7b:1d:e4:53:68:a1:89:45:15:4d:b0:11:33:ac:eb: 04:00:2e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RYVOeT/uZCoLzZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDIzMDAxOFoXDTI2MTIwNDAwMDAxOFowLzEtMCsGA1UEAxMk YTA3MTYxNTAtOTUzYy00ZDNhLThmYTgtOWUzZGNiMGY5YjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUMvl2+w6YYNxviFYKoIqopZEKu8CJr5eqfM TmyrREuqzv2htKlo1slCPlretG/cE/sWciT3NtVsZ5SLgvkQFjwtZE+zKF7HZZF6 HIouHuyCCe3nRuO51u0z7qS6GhMdfyKO5feCiJE0gCclru81UsyuC2RiOLNaAHFb IvtL3tjQb+R/m9aI3FEZesgxyyFIUKRiSpGAOA0FhDJcS/Xv30FGIxZNj2ewrXZf uEjYgjKPNeAplRNR0qbmXn1meCckyfmDOTWb6l8CYOGZ8Dyyp/5IkTLWCloUM7+a X7qVXumlK13TKtI1juFuLOiyB+ltH48u4nTkttrVWp7Nmi6sPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrsE0TAyrnt5DwNGxqH5zNmPhm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE2N2I3NzUtMzQ4My0z OTllLTg1NmUtMjc5MmJiNjM2NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo5m1maVzYz8XWWn8wuW9rmNXK/JFTr2qjkMy+ih3dNRLefYU0afCme Lf1Bx2pyh8x/mEUYZZWEOYx/KdyMRzbbR9pdMYD1KKOzFloj36Mj3OyM28G1V9vT igH2wcapW3qQJ1yCLuJuG1fUguSSAJlgSj3cPC5bJRibggRsvFGS//cH6fB4lnCf 7N+Y5hfriRmeSvFDYT91kAFxA+ysHxpOa88c8QZceuDqgJJH5UglBCcBGU5PWRSM 97UUElvm50LdSrwuYIdyCai29KT3dR/PyqNX+7sST2NAwYOs7zmUToUTN1/002Eu D8PVAXsd5FNooYlFFU2wETOs6wQALqs= -----END CERTIFICATE-----Generated at Tue Sep 22 22:14:05 2026 by rpki-client