$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a20907c-8789-30e0-8b4e-fbd791134a9f.roa File: 4a20907c-8789-30e0-8b4e-fbd791134a9f.roa (raw, json) Hash identifier: VGtcDoteNlDPm6HkXylfO2eB4U7I4DqefcJZ3tsWvB4= Subject key identifier: 34:23:91:59:5C:6D:1E:59:15:99:E8:2F:3B:FF:2F:05:5E:9D:37:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D93187869D76541AD61A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a20907c-8789-30e0-8b4e-fbd791134a9f.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.189.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:93:18:78:69:d7:65:41:ad:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d4b70809-48ff-4cb8-b816-54cf75ab9bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:96:5e:75:6f:03:cb:60:a0:fb:25:32:6d: c4:9a:0d:29:c3:ee:30:6f:72:88:4e:4d:86:c3:bc: e0:c2:e7:b6:0e:a4:2b:ed:44:a1:4e:ed:e4:65:8a: fa:63:48:0f:2d:39:a1:e3:6f:a6:72:5d:d1:48:67: 76:80:18:dc:42:e2:de:83:55:e5:e0:c6:60:8f:52: 73:b8:b7:36:9e:76:96:03:54:a4:67:e3:e8:6b:b4: af:65:96:12:50:af:73:0d:f0:95:00:5d:8b:07:8e: b2:f5:90:28:25:81:40:a1:12:7a:27:de:e6:e1:24: 1c:08:b7:ce:0c:1c:ca:cd:9b:75:63:94:84:61:3b: bd:77:16:ee:32:76:d3:cc:cc:97:3c:ef:6a:69:1c: 04:af:45:19:36:6e:b4:c6:37:8c:39:c6:74:2d:e5: 03:1e:a1:c0:a4:ed:7d:ab:44:85:50:22:85:d8:ab: 61:e5:8d:f7:00:7a:97:7b:3b:ed:89:0a:8a:58:47: 53:51:f3:0f:38:3e:9b:d5:47:97:45:f0:fe:c0:4b: de:94:48:47:93:42:21:0d:9b:7a:ee:75:00:31:4d: 8c:62:d0:d7:5f:ca:0e:29:aa:87:54:5a:4d:83:18: 66:09:da:be:51:8a:05:39:76:10:b8:2a:e4:e0:f2: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:23:91:59:5C:6D:1E:59:15:99:E8:2F:3B:FF:2F:05:5E:9D:37:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a20907c-8789-30e0-8b4e-fbd791134a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d5:bc:19:fa:cd:8f:91:55:7f:55:f9:98:c6:a0:d5:ca:88: 18:f6:bf:ad:9a:62:2e:6b:2e:f4:be:2c:15:9e:23:18:e1:c9: a0:8f:49:1c:a9:a3:32:02:b3:74:b9:25:65:c8:b2:43:d5:03: 7b:61:fb:e2:1d:02:7a:7b:72:cd:9c:64:50:29:58:64:e3:d1: ef:a2:dc:79:f9:5b:e5:74:ca:57:b0:39:16:af:a9:e1:d7:f9: eb:51:89:99:8d:e5:a5:a6:04:a5:40:f5:cf:79:ed:96:6b:37: 39:91:bf:0b:81:62:57:91:ba:ac:09:50:f4:ec:a8:1c:12:26: 89:46:0a:90:2e:9b:06:9e:e9:da:b6:00:fe:2b:f5:d1:90:d3: 6e:95:73:a2:b0:49:27:5c:be:f3:eb:0b:91:74:a3:77:7f:c1: 2a:80:85:a3:fd:34:0e:8e:94:96:96:af:8c:96:e5:33:8b:bf: 98:3c:da:da:22:a6:5f:cf:cc:7a:a2:d7:89:c1:e4:3c:5b:55: cc:f7:23:90:5b:ce:c6:da:91:17:49:d7:38:e0:74:b3:87:59: 52:ee:2f:12:4a:3a:a3:e7:69:ca:6d:97:9b:6c:0a:6c:1f:c9: 99:ce:70:d6:43:ab:3b:72:23:99:64:e5:9f:95:30:d3:e2:b4: 61:73:90:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZMYeGnXZUGtYaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDRiNzA4MDktNDhmZi00Y2I4LWI4MTYtNTRjZjc1YWI5YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYSWXnVvA8tgoPslMm3Emg0pw+4wb3KITk2G w7zgwue2DqQr7UShTu3kZYr6Y0gPLTmh42+mcl3RSGd2gBjcQuLeg1Xl4MZgj1Jz uLc2nnaWA1SkZ+Poa7SvZZYSUK9zDfCVAF2LB46y9ZAoJYFAoRJ6J97m4SQcCLfO DBzKzZt1Y5SEYTu9dxbuMnbTzMyXPO9qaRwEr0UZNm60xjeMOcZ0LeUDHqHApO19 q0SFUCKF2Kth5Y33AHqXezvtiQqKWEdTUfMPOD6b1UeXRfD+wEvelEhHk0IhDZt6 7nUAMU2MYtDXX8oOKaqHVFpNgxhmCdq+UYoFOXYQuCrk4PJaAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQjkVlcbR5ZFZnoLzv/LwVenTdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGEyMDkwN2MtODc4OS0z MGUwLThiNGUtZmJkNzkxMTM0YTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbVvBn6zY+RVX9V+ZjGoNXKiBj2v62aYi5rLvS+LBWeIxjhyaCPSRyp ozICs3S5JWXIskPVA3th++IdAnp7cs2cZFApWGTj0e+i3Hn5W+V0ylewORavqeHX +etRiZmN5aWmBKVA9c957ZZrNzmRvwuBYleRuqwJUPTsqBwSJolGCpAumwae6dq2 AP4r9dGQ026Vc6KwSSdcvvPrC5F0o3d/wSqAhaP9NA6OlJaWr4yW5TOLv5g82toi pl/PzHqi14nB5DxbVcz3I5BbzsbakRdJ1zjgdLOHWVLuLxJKOqPnacptl5tsCmwf yZnOcNZDqztyI5lk5Z+VMNPitGFzkII= -----END CERTIFICATE-----Generated at Sat Oct 3 14:22:36 2026 by rpki-client