$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa File: 3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa (raw, json) Hash identifier: uQ/0DcLOW/VOJI1EzXeQx3CAB0f1599k4apWF44wXVQ= Subject key identifier: DB:44:26:0E:CC:8A:3C:62:AA:EB:2E:2D:54:C9:DF:29:39:16:10:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F61A82F9675CA1BCD41C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.188.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:61:a8:2f:96:75:ca:1b:cd:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1211a995-2fc4-431e-a424-43197ee87496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:87:b1:6c:2e:9e:07:7c:75:8a:25:f7:e8: 0c:cc:0a:e2:13:f3:e9:0c:27:8c:77:45:9a:4b:5e: c5:b0:27:c9:d4:f2:e5:6a:66:6f:94:7f:22:2d:3b: bb:da:1b:94:f6:7e:31:08:bc:71:c3:66:bc:7e:51: a1:6f:3c:b0:4d:86:da:0c:df:e3:fd:78:27:e8:aa: 40:ef:ad:69:2c:c8:ff:55:28:c0:79:87:a8:3c:d2: a7:5e:d3:2a:f6:bb:08:3e:67:a3:2a:e9:d7:1f:6f: d7:5c:85:c5:f4:d8:67:be:e2:2c:17:c5:57:ed:62: c8:82:d1:a0:cb:9a:dc:74:25:c9:ff:e4:b8:42:ec: f4:fd:ab:76:94:5f:78:f1:fe:59:70:06:5b:e2:50: b9:95:f5:24:4c:fd:7a:96:6d:b7:6d:3d:26:6f:51: fb:d0:67:a4:3b:29:44:43:7c:eb:02:92:3c:3b:7b: cb:0d:85:dc:5c:fd:0b:63:b3:ac:6e:4c:6e:c5:1b: b4:24:35:6e:1c:84:b3:44:57:6d:c5:56:a7:4b:23: 4b:d7:16:3d:f6:bc:95:ee:78:ec:e9:3e:45:18:c6: 70:35:84:ba:1f:9d:b7:0c:fd:fa:43:ad:69:cc:a3: 2d:21:5e:d5:62:7a:1d:c7:9e:28:8b:ed:17:77:e7: 78:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:44:26:0E:CC:8A:3C:62:AA:EB:2E:2D:54:C9:DF:29:39:16:10:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f3:31:cb:19:3b:3d:49:c5:fd:c1:07:f0:15:05:97:7b:95: 0c:5c:84:3c:00:81:bf:b9:88:94:1d:32:13:24:50:d6:72:37: 01:e7:9c:21:ca:a8:e9:80:cd:79:1d:7a:df:dd:ed:b1:f1:2a: be:9f:31:56:40:d1:b2:d7:df:7f:cf:4f:8e:d1:71:fb:1f:21: 9e:54:61:33:e3:ba:f2:bc:31:78:76:3d:7d:94:3c:d3:26:84: 6b:e4:fb:c2:ed:35:e8:d1:b6:3d:35:4e:a6:3a:94:dc:49:3b: 74:73:d7:16:59:a4:23:98:1a:21:09:d2:cf:b7:dd:2a:97:38: 75:50:42:30:d1:84:5c:82:0c:95:fd:d9:ff:9a:fd:18:f7:be: cc:be:a3:8e:e2:6c:c7:89:3f:44:e3:2b:10:aa:72:23:7d:d1: 07:0e:37:c7:24:c7:49:19:82:88:5f:ab:d5:28:1d:96:d9:2b: 86:70:26:91:7d:fa:26:53:82:5a:68:5a:c9:0f:54:03:79:15: 5a:af:9a:65:b6:e5:79:04:c0:b3:de:d4:12:a2:32:51:53:68: a1:4e:48:fb:0d:18:39:2c:1e:77:f0:28:3e:c6:9b:c8:9e:bf: e0:73:81:58:6b:6b:4d:8e:03:59:da:24:c1:3a:89:eb:35:ff: 92:ff:79:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf2GoL5Z1yhvNQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTIxMWE5OTUtMmZjNC00MzFlLWE0MjQtNDMxOTdlZTg3NDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo52HsWwungd8dYol9+gMzAriE/PpDCeMd0Wa S17FsCfJ1PLlamZvlH8iLTu72huU9n4xCLxxw2a8flGhbzywTYbaDN/j/Xgn6KpA 761pLMj/VSjAeYeoPNKnXtMq9rsIPmejKunXH2/XXIXF9NhnvuIsF8VX7WLIgtGg y5rcdCXJ/+S4Quz0/at2lF948f5ZcAZb4lC5lfUkTP16lm23bT0mb1H70GekOylE Q3zrApI8O3vLDYXcXP0LY7OsbkxuxRu0JDVuHISzRFdtxVanSyNL1xY99ryV7njs 6T5FGMZwNYS6H523DP36Q61pzKMtIV7VYnodx54oi+0Xd+d4dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtEJg7MijxiqusuLVTJ3yk5FhB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2RhODI0ZWItYzQ4YS0z YjU4LThlMjUtYzFlNWYwNjRhMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjzMcsZOz1Jxf3BB/AVBZd7lQxchDwAgb+5iJQdMhMkUNZyNwHnnCHK qOmAzXkdet/d7bHxKr6fMVZA0bLX33/PT47RcfsfIZ5UYTPjuvK8MXh2PX2UPNMm hGvk+8LtNejRtj01TqY6lNxJO3Rz1xZZpCOYGiEJ0s+33SqXOHVQQjDRhFyCDJX9 2f+a/Rj3vsy+o47ibMeJP0TjKxCqciN90QcON8ckx0kZgohfq9UoHZbZK4ZwJpF9 +iZTglpoWskPVAN5FVqvmmW25XkEwLPe1BKiMlFTaKFOSPsNGDksHnfwKD7Gm8ie v+BzgVhra02OA1naJME6ies1/5L/efY= -----END CERTIFICATE-----Generated at Fri Sep 25 08:01:08 2026 by rpki-client