$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e298066-1de1-325b-86aa-bf14d1489710.roa File: 2e298066-1de1-325b-86aa-bf14d1489710.roa (raw, json) Hash identifier: xQOmZSmc0UeOfhCEUXUlPJ3OmBZJ1HHnzGl7oDN53XQ= Subject key identifier: E5:2C:C9:C7:D1:AD:71:32:46:C6:54:81:2D:EB:88:AD:7B:AD:42:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1125C2A5B65DF929E791DB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e298066-1de1-325b-86aa-bf14d1489710.roa Signing time: Fri 04 Sep 2026 21:00:16 +0000 ROA not before: Fri 04 Sep 2026 21:00:16 +0000 ROA not after: Thu 03 Dec 2026 22:00:16 +0000 asID: 7029 IP address blocks: 173.213.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:25:c2:a5:b6:5d:f9:29:e7:91:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 21:00:16 2026 GMT Not After : Dec 3 22:00:16 2026 GMT Subject: CN=a9dc1708-31c3-46ec-9c4d-78df42ffa93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:53:48:4f:a4:e8:4d:c2:33:00:70:38:be: 42:2f:05:23:5b:4d:f3:29:13:8f:14:ef:36:0a:b7: f3:1b:9e:57:a5:c0:15:c9:72:8d:83:ac:6e:76:f4: bc:bc:d0:0b:ee:f1:ae:0f:69:33:ae:a7:00:1b:04: 4f:46:5d:07:c9:9e:ba:21:c5:4b:bc:3d:c1:a2:88: 04:2f:84:36:6a:d6:55:e2:3c:1a:a6:08:ea:cb:78: 7b:20:96:1b:3b:cf:c3:34:6f:08:b1:9a:cd:04:3e: 1f:c9:e1:64:68:a6:d8:f2:80:98:73:26:44:e2:41: ca:54:ce:df:c2:ed:f7:7c:3f:20:27:c5:11:cf:24: 64:d3:a1:83:dd:15:cc:8c:61:0e:7b:42:62:8e:36: de:fe:ad:17:6e:c0:94:5d:9d:74:d3:42:76:f9:02: 8f:d4:1e:59:e3:27:cd:e2:a4:14:de:0d:3d:fa:dc: 98:56:51:d9:73:c9:84:b5:5e:23:64:a8:31:23:83: f2:36:4f:0c:09:0e:a1:8c:8e:17:31:81:fd:c2:15: de:11:45:2f:15:86:a1:28:e4:36:29:f5:a5:1f:ef: 2a:5e:49:57:c5:40:c6:13:ae:e0:dc:21:f5:76:23: 31:32:1e:31:b2:fa:bc:4b:c0:7a:cf:a8:74:32:38: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2C:C9:C7:D1:AD:71:32:46:C6:54:81:2D:EB:88:AD:7B:AD:42:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e298066-1de1-325b-86aa-bf14d1489710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3b:6f:21:64:09:bb:86:e5:fe:72:0e:05:64:86:1d:c7:01: 5d:49:d8:e6:a1:9d:b1:31:84:7a:b5:57:65:c3:8d:f0:a0:33: 0d:e0:02:6d:0b:4e:df:5d:50:7b:89:67:53:55:1c:68:2d:3d: 80:18:dc:03:ea:62:2c:02:c5:6d:c2:17:40:e5:4d:e9:bf:38: ef:45:e7:e2:6c:c6:ec:c6:fb:7c:db:18:05:fd:c0:f4:e7:29: 7e:25:62:85:3a:a2:86:f6:5e:cf:6e:84:83:44:cb:f7:d1:66: ab:6c:d9:58:d3:ac:fc:92:e2:8b:26:7b:58:92:b0:f3:ff:46: 79:2f:e8:a3:8a:65:73:a4:22:42:7c:08:7e:8e:05:47:c4:d7: 58:d5:b2:04:06:23:99:e6:c9:e9:d2:ef:88:b1:42:82:ff:42: cf:5f:72:3b:59:5d:5b:4c:31:d9:07:38:69:7c:e4:2c:7d:1f: 13:2e:6a:07:2a:ab:ec:4c:9f:1c:de:fc:20:48:84:be:24:32: 1a:f3:1e:18:c8:c2:19:27:c9:10:96:9c:ed:b4:51:bb:c0:ce: dd:18:0d:0b:f2:12:70:fc:51:7d:56:aa:23:b0:83:6a:af:08: ff:9f:af:a2:ba:51:3a:a6:13:b5:60:ae:62:b3:1c:f0:30:a8: 5c:ff:98:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RJcKltl35KeeR2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDIxMDAxNloXDTI2MTIwMzIyMDAxNlowLzEtMCsGA1UEAxMk YTlkYzE3MDgtMzFjMy00NmVjLTljNGQtNzhkZjQyZmZhOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8VTSE+k6E3CMwBwOL5CLwUjW03zKROPFO82 CrfzG55XpcAVyXKNg6xudvS8vNAL7vGuD2kzrqcAGwRPRl0HyZ66IcVLvD3BoogE L4Q2atZV4jwapgjqy3h7IJYbO8/DNG8IsZrNBD4fyeFkaKbY8oCYcyZE4kHKVM7f wu33fD8gJ8URzyRk06GD3RXMjGEOe0Jijjbe/q0XbsCUXZ1000J2+QKP1B5Z4yfN 4qQU3g09+tyYVlHZc8mEtV4jZKgxI4PyNk8MCQ6hjI4XMYH9whXeEUUvFYahKOQ2 KfWlH+8qXklXxUDGE67g3CH1diMxMh4xsvq8S8B6z6h0Mjh9/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUsycfRrXEyRsZUgS3riK17rUJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmUyOTgwNjYtMWRlMS0z MjViLTg2YWEtYmYxNGQxNDg5NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs7byFkCbuG5f5yDgVkhh3HAV1J2OahnbExhHq1V2XDjfCgMw3gAm0L Tt9dUHuJZ1NVHGgtPYAY3APqYiwCxW3CF0DlTem/OO9F5+JsxuzG+3zbGAX9wPTn KX4lYoU6oob2Xs9uhINEy/fRZqts2VjTrPyS4osme1iSsPP/Rnkv6KOKZXOkIkJ8 CH6OBUfE11jVsgQGI5nmyenS74ixQoL/Qs9fcjtZXVtMMdkHOGl85Cx9HxMuagcq q+xMnxze/CBIhL4kMhrzHhjIwhknyRCWnO20UbvAzt0YDQvyEnD8UX1WqiOwg2qv CP+fr6K6UTqmE7VgrmKzHPAwqFz/mMA= -----END CERTIFICATE-----Generated at Tue Sep 22 16:59:54 2026 by rpki-client