$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4579cf71-0eef-3d50-9797-46f3b32ae647.roa File: 4579cf71-0eef-3d50-9797-46f3b32ae647.roa (raw, json) Hash identifier: uyT/aCkiHE7lLxKn9iC+Xh0mP566P1KqjLVs1niflGs= Subject key identifier: F4:93:A3:91:E1:9A:12:A8:7A:28:1C:7D:2F:25:4E:BE:8D:9B:ED:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F268D0F1F654479E21FA67500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4579cf71-0eef-3d50-9797-46f3b32ae647.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 162.40.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0f:1f:65:44:79:e2:1f:a6:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=c1701ec1-9859-4772-a2f3-0eda4042490f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:3a:cf:8d:0d:fa:04:c5:05:1f:2b:4f:79: 70:5f:62:56:b8:61:48:c9:9a:29:d8:6d:16:ed:4f: 86:fa:a8:7a:ed:9f:81:a7:d7:6a:0f:50:dc:3f:20: e7:6d:ba:83:5d:d3:26:6f:5b:12:99:b9:92:72:d3: 78:d6:ef:67:a2:b8:1d:27:ce:c3:a3:6e:d0:d4:0e: b0:ae:be:49:f9:c2:ac:af:38:ab:d7:fc:90:b2:a1: cf:70:3f:eb:e7:4d:c2:16:ea:59:12:10:3f:ff:3f: 50:1b:2e:99:06:d1:00:47:94:fd:91:4c:d2:a5:5b: ea:87:6d:5b:57:7e:1e:64:9a:f9:ce:d3:2f:14:b4: aa:ea:8c:f2:78:75:d3:8a:3f:d6:2c:b2:d1:ec:c5: 52:d8:4a:e2:96:ed:4c:1c:bc:61:bc:51:22:5b:a8: ac:cb:55:b8:6a:46:c6:76:f9:be:ec:48:e7:37:56: 4f:eb:83:d3:88:82:cb:31:3d:90:2e:b3:5e:25:1f: 87:6d:e1:17:f1:9a:9c:58:22:2d:48:a8:6c:fc:5f: 5d:98:1f:5f:57:c6:20:e6:1d:3a:d5:c7:23:15:c0: 2e:b3:1c:7b:b0:2e:a5:76:69:92:a5:da:2b:38:b5: b8:1e:f9:3e:d9:a5:2f:f4:4d:d2:73:e3:e6:13:7d: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:93:A3:91:E1:9A:12:A8:7A:28:1C:7D:2F:25:4E:BE:8D:9B:ED:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4579cf71-0eef-3d50-9797-46f3b32ae647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d0:36:4d:eb:fa:9a:65:00:dd:b3:2a:e6:07:6b:b0:e1:2b: c3:b6:4e:93:27:1a:64:c4:18:ba:f5:64:cf:6e:5a:ed:17:2a: 93:6a:24:15:6b:bd:33:68:09:0a:47:55:3e:e4:72:3d:41:7c: 17:76:2b:41:ff:64:c3:9b:c8:6c:9f:7c:81:4e:a8:62:ed:b0: 16:f9:29:c7:f6:92:d7:e8:c5:5a:ca:a5:05:dc:82:5c:e6:e7: 3f:10:64:60:57:2c:c5:3d:cc:1f:4f:a7:76:bf:e6:dc:d6:c6: 2d:d7:04:a4:da:f0:b9:e6:73:e3:67:fe:45:34:77:82:3f:cb: 57:b1:1b:53:ea:fb:ea:86:73:1a:0a:2d:20:3a:c1:07:3c:e7: 1f:da:dd:36:ef:c3:30:6a:d1:eb:ad:15:4c:af:e4:3d:88:5d: 11:7f:ad:25:99:ae:5b:97:70:a3:66:e5:7d:01:2b:71:50:e3: 47:8b:00:c5:04:1a:95:0f:1a:05:86:09:1e:3a:47:d4:86:1c: b5:4c:c9:79:eb:d1:e3:1a:c2:87:aa:87:f8:3a:76:3d:d3:0e: da:1a:73:8b:17:06:bf:4e:aa:4e:4c:26:57:c4:a9:00:6e:9b: c7:1d:44:03:32:30:c4:30:ff:dc:ee:43:c7:4f:37:9f:30:ca: 39:28:93:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQ8fZUR54h+mdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk YzE3MDFlYzEtOTg1OS00NzcyLWEyZjMtMGVkYTQwNDI0OTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKg6z40N+gTFBR8rT3lwX2JWuGFIyZop2G0W 7U+G+qh67Z+Bp9dqD1DcPyDnbbqDXdMmb1sSmbmSctN41u9norgdJ87Do27Q1A6w rr5J+cKsrzir1/yQsqHPcD/r503CFupZEhA//z9QGy6ZBtEAR5T9kUzSpVvqh21b V34eZJr5ztMvFLSq6ozyeHXTij/WLLLR7MVS2Erilu1MHLxhvFEiW6isy1W4akbG dvm+7EjnN1ZP64PTiILLMT2QLrNeJR+HbeEX8ZqcWCItSKhs/F9dmB9fV8Yg5h06 1ccjFcAusxx7sC6ldmmSpdorOLW4Hvk+2aUv9E3Sc+PmE31MdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSTo5HhmhKoeigcfS8lTr6Nm+0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDU3OWNmNzEtMGVlZi0z ZDUwLTk3OTctNDZmM2IzMmFlNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoijkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITQNk3r+pplAN2zKuYHa7DhK8O2TpMnGmTEGLr1ZM9uWu0XKpNqJBVr vTNoCQpHVT7kcj1BfBd2K0H/ZMObyGyffIFOqGLtsBb5Kcf2ktfoxVrKpQXcglzm 5z8QZGBXLMU9zB9Pp3a/5tzWxi3XBKTa8Lnmc+Nn/kU0d4I/y1exG1Pq++qGcxoK LSA6wQc85x/a3TbvwzBq0eutFUyv5D2IXRF/rSWZrluXcKNm5X0BK3FQ40eLAMUE GpUPGgWGCR46R9SGHLVMyXnr0eMawoeqh/g6dj3TDtoac4sXBr9Oqk5MJlfEqQBu m8cdRAMyMMQw/9zuQ8dPN58wyjkok2g= -----END CERTIFICATE-----Generated at Sun Sep 20 18:44:14 2026 by rpki-client