$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b682a83-347e-35b7-927d-1d2639d327cc.roa File: 4b682a83-347e-35b7-927d-1d2639d327cc.roa (raw, json) Hash identifier: AHWbSngaDUpmO8LJq/hdcPF2gDyZoZB45cE97qVCXXo= Subject key identifier: 1E:3A:9E:C3:E4:39:95:7A:70:6E:85:09:5D:F1:D1:EA:F3:81:3B:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F153F889E7351CB5996D8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b682a83-347e-35b7-927d-1d2639d327cc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.191.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:15:3f:88:9e:73:51:cb:59:96:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0077409e-5679-4c1d-ad14-eb47f3810e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:21:60:ff:86:f6:37:42:3d:cc:7a:d2:79: 68:5b:7f:b2:4e:2a:9e:25:37:ae:66:7b:f0:96:68: fd:a5:dc:59:03:90:d0:61:8b:f3:91:fc:cf:f3:ca: 94:37:c1:19:f1:cd:ca:e5:b9:29:dd:4c:1e:29:b4: fb:d0:93:07:b4:8c:33:ed:54:28:ab:22:21:05:90: ca:72:33:31:a8:a1:51:47:a2:ad:72:28:90:2b:86: 2d:e0:0c:e9:13:56:61:ca:09:0f:8f:97:7b:08:c1: 9b:36:0f:ff:a8:86:4f:d9:90:c7:00:79:43:e1:a7: 22:0a:f8:b8:9f:a4:b9:ea:67:3a:1a:e1:b6:9e:28: f4:4e:cb:f6:a9:de:2b:80:d9:d9:b2:53:97:fb:50: dc:cb:76:ff:5d:12:c7:b0:77:ef:bb:e1:c8:4f:b1: 6f:71:86:df:8d:5c:55:1a:b3:13:8c:3e:22:d1:f6: 84:09:da:8d:17:27:90:5f:57:ff:d7:ff:e2:e9:1d: e2:12:4b:f9:1d:1a:6b:a2:2a:67:d6:f6:e3:21:80: 4a:07:f5:8c:b4:3d:2f:29:c5:62:79:01:e5:7d:c2: 15:49:a8:4c:30:25:14:0a:46:ee:15:7e:cd:4f:5d: ce:f0:2a:1b:af:2d:4b:94:f1:ca:47:89:26:b9:57: 0c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3A:9E:C3:E4:39:95:7A:70:6E:85:09:5D:F1:D1:EA:F3:81:3B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b682a83-347e-35b7-927d-1d2639d327cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e9:ac:87:97:88:85:66:84:51:b2:fa:ba:ad:a2:85:a7:54: 3c:d7:42:58:f9:0e:85:26:7f:43:33:d8:37:8e:f3:4c:23:18: 6d:78:9a:61:ef:de:53:b7:92:f4:96:86:ae:dc:59:18:c1:db: 51:da:4b:87:b7:cd:1a:07:1c:67:87:8b:4b:c8:cc:fb:9a:08: bb:16:d8:3c:9b:e8:88:11:d7:22:3b:97:fc:50:31:7f:23:29: 12:c5:34:96:ba:8f:a5:7d:4b:11:de:bb:e5:89:60:23:fa:87: 5b:6f:6e:e5:56:73:4f:e0:18:ae:53:27:0b:f8:13:c5:05:b0: bc:76:aa:7c:9f:e8:d8:49:70:6d:f0:d6:98:f6:f4:2b:f1:c6: 15:e2:86:a0:84:d8:63:18:fb:c4:9d:05:69:0d:59:3d:1a:55: 8a:92:ed:e8:c9:79:7a:59:e4:ef:9c:f3:02:b2:13:3a:7c:12: eb:a1:54:11:bf:a5:5c:cb:43:13:31:0a:ef:0c:11:43:c2:85: a1:1e:c1:85:60:de:dc:07:2d:5f:5d:ec:95:c2:21:4a:58:21: 2c:2b:00:f7:02:0d:79:30:21:4a:ce:d8:2e:ad:29:5a:4b:78: 6a:f7:4b:5a:9a:19:ef:78:a2:2e:81:b1:97:56:30:88:19:10: 8b:b8:fd:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxU/iJ5zUctZltgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDA3NzQwOWUtNTY3OS00YzFkLWFkMTQtZWI0N2YzODEwZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiighYP+G9jdCPcx60nloW3+yTiqeJTeuZnvw lmj9pdxZA5DQYYvzkfzP88qUN8EZ8c3K5bkp3UweKbT70JMHtIwz7VQoqyIhBZDK cjMxqKFRR6KtciiQK4Yt4AzpE1ZhygkPj5d7CMGbNg//qIZP2ZDHAHlD4aciCvi4 n6S56mc6GuG2nij0Tsv2qd4rgNnZslOX+1Dcy3b/XRLHsHfvu+HIT7FvcYbfjVxV GrMTjD4i0faECdqNFyeQX1f/1//i6R3iEkv5HRproipn1vbjIYBKB/WMtD0vKcVi eQHlfcIVSahMMCUUCkbuFX7NT13O8Cobry1LlPHKR4kmuVcMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB46nsPkOZV6cG6FCV3x0erzgTvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGI2ODJhODMtMzQ3ZS0z NWI3LTkyN2QtMWQyNjM5ZDMyN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnprIeXiIVmhFGy+rqtooWnVDzXQlj5DoUmf0Mz2DeO80wjGG14mmHv 3lO3kvSWhq7cWRjB21HaS4e3zRoHHGeHi0vIzPuaCLsW2Dyb6IgR1yI7l/xQMX8j KRLFNJa6j6V9SxHeu+WJYCP6h1tvbuVWc0/gGK5TJwv4E8UFsLx2qnyf6NhJcG3w 1pj29CvxxhXihqCE2GMY+8SdBWkNWT0aVYqS7ejJeXpZ5O+c8wKyEzp8EuuhVBG/ pVzLQxMxCu8MEUPChaEewYVg3twHLV9d7JXCIUpYISwrAPcCDXkwIUrO2C6tKVpL eGr3S1qaGe94oi6BsZdWMIgZEIu4/YQ= -----END CERTIFICATE-----Generated at Sun Sep 27 00:11:51 2026 by rpki-client