$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46a1b189-748a-3544-b289-361d8367ae39.roa File: 46a1b189-748a-3544-b289-361d8367ae39.roa (raw, json) Hash identifier: 7m9VDseUq2vWWW2ILXOtedoJuBewrP/R0+6EqmK5Uo0= Subject key identifier: 9C:F4:13:63:D4:CB:3E:4B:BE:E8:E9:D5:5C:2C:6D:74:7C:09:B5:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D9389C882EDC977A2F080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46a1b189-748a-3544-b289-361d8367ae39.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 174.130.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:93:89:c8:82:ed:c9:77:a2:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=a28cd926-00cb-4b71-8a94-75b648d32b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:7e:72:63:d6:59:73:1d:89:8c:28:d5:65: 85:d9:30:28:41:b1:ad:b4:22:5d:6e:a6:d2:ef:59: 7a:70:ff:51:00:7f:b6:49:3e:17:e2:74:1d:65:b7: 99:aa:e0:01:37:ba:5a:40:ed:26:76:9c:a4:ad:4d: b6:71:e1:c7:d5:3b:8b:0b:f9:7f:0b:1b:e6:d7:e0: a0:22:c5:64:e7:bb:b3:ce:9c:1f:b3:42:84:c2:77: 23:5a:5c:ec:5b:66:18:b5:3e:84:1e:74:a4:10:16: 63:f1:eb:c3:cd:51:c3:c8:88:a6:10:b4:d0:cf:5f: 43:ed:a0:71:71:75:a2:0f:e3:58:9c:17:73:e7:25: f5:4d:61:a4:38:5f:78:31:95:ce:4e:e6:33:58:ba: 63:4b:ed:84:9a:7a:0f:39:e6:58:2e:ea:2b:cb:c0: 66:25:29:98:e7:4e:02:a6:b0:7b:fe:25:8b:31:7b: f4:79:ff:60:70:b1:f7:90:74:25:2c:2c:13:4b:0a: 0c:ef:e2:2b:d4:e3:73:32:9d:e6:71:49:99:69:04: 01:1f:c2:16:5d:35:c6:1f:ce:52:63:7d:4e:01:6f: 5d:30:1b:fe:01:a4:23:b0:6a:34:35:a2:73:c3:37: 11:80:5c:4b:31:49:ad:b3:22:f3:4d:73:e8:dd:20: 47:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F4:13:63:D4:CB:3E:4B:BE:E8:E9:D5:5C:2C:6D:74:7C:09:B5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46a1b189-748a-3544-b289-361d8367ae39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:94:81:78:98:b3:b4:97:d8:f7:89:f2:2d:4c:13:b5:10:a3: 73:ea:1b:b2:8d:2e:76:5a:e6:a2:f1:18:c0:f9:ca:6a:f7:b4: 18:bb:97:46:2e:59:d2:3a:35:e5:f5:f6:fe:ab:b1:78:d3:a2: 6f:1c:df:87:5d:8b:0e:47:51:94:7a:76:7b:b8:e0:ac:d4:8f: 8a:70:2b:0f:d6:55:9c:a1:b4:ae:f2:92:7f:a0:75:e3:b9:54: 39:0c:26:f7:dc:25:2a:55:ac:99:7d:ab:a7:78:3d:85:b2:90: 7a:d7:9a:3c:11:3a:e2:8e:09:09:c9:64:22:91:39:47:42:c8: 18:78:66:eb:e4:c1:c9:d2:22:06:b6:cb:e8:39:04:ff:1b:bd: 3c:4d:44:3c:45:b2:dc:a7:fa:3c:3c:5b:80:c7:02:3e:48:93: ec:ae:a9:66:73:85:7a:0e:d5:7b:d9:74:97:b6:4e:74:c5:fb: db:fa:e2:f4:c5:fb:ee:7c:75:1d:7a:ce:7d:5e:e3:49:84:64: da:a6:6e:1a:bd:55:b4:5f:a0:6b:7f:86:f0:45:68:71:97:64: 2c:95:54:e7:bb:95:ba:66:a1:df:02:fa:48:e3:cc:5b:67:10: d4:63:e6:d3:30:68:2f:c4:c3:25:de:18:28:83:03:6a:81:b7: a3:20:4f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZOJyILtyXei8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YTI4Y2Q5MjYtMDBjYi00YjcxLThhOTQtNzViNjQ4ZDMyYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJt+cmPWWXMdiYwo1WWF2TAoQbGttCJdbqbS 71l6cP9RAH+2ST4X4nQdZbeZquABN7paQO0mdpykrU22ceHH1TuLC/l/Cxvm1+Cg IsVk57uzzpwfs0KEwncjWlzsW2YYtT6EHnSkEBZj8evDzVHDyIimELTQz19D7aBx cXWiD+NYnBdz5yX1TWGkOF94MZXOTuYzWLpjS+2EmnoPOeZYLuory8BmJSmY504C prB7/iWLMXv0ef9gcLH3kHQlLCwTSwoM7+Ir1ONzMp3mcUmZaQQBH8IWXTXGH85S Y31OAW9dMBv+AaQjsGo0NaJzwzcRgFxLMUmtsyLzTXPo3SBHPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz0E2PUyz5Lvujp1VwsbXR8CbU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDZhMWIxODktNzQ4YS0z NTQ0LWIyODktMzYxZDgzNjdhZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqUgXiYs7SX2PeJ8i1ME7UQo3PqG7KNLnZa5qLxGMD5ymr3tBi7l0Yu WdI6NeX19v6rsXjTom8c34ddiw5HUZR6dnu44KzUj4pwKw/WVZyhtK7ykn+gdeO5 VDkMJvfcJSpVrJl9q6d4PYWykHrXmjwROuKOCQnJZCKROUdCyBh4ZuvkwcnSIga2 y+g5BP8bvTxNRDxFstyn+jw8W4DHAj5Ik+yuqWZzhXoO1XvZdJe2TnTF+9v64vTF ++58dR16zn1e40mEZNqmbhq9VbRfoGt/hvBFaHGXZCyVVOe7lbpmod8C+kjjzFtn ENRj5tMwaC/EwyXeGCiDA2qBt6MgT0A= -----END CERTIFICATE-----Generated at Sun Oct 4 22:50:56 2026 by rpki-client