$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a96bc15-8dac-3441-a332-06b6d61ab16d.roa File: 5a96bc15-8dac-3441-a332-06b6d61ab16d.roa (raw, json) Hash identifier: /VjwKS4zgiqPTy8b+gIZfyZJ2rvhhDxMPEhZDmdX4Y0= Subject key identifier: 31:81:08:74:EF:D7:47:65:87:7E:6E:AD:59:E3:F0:40:E8:50:09:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F498A6D2A4526C45E0BE51388 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a96bc15-8dac-3441-a332-06b6d61ab16d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.189.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:6d:2a:45:26:c4:5e:0b:e5:13:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=60bf722b-5340-4711-86fd-d26ec5276506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:8b:c0:33:18:bf:74:29:ea:c6:b7:26:00: 9e:03:9e:13:68:72:0e:7c:63:73:8a:70:c8:34:d0: c3:26:02:9d:3a:bf:a9:dc:38:68:55:6b:04:bf:e0: 82:b3:53:a0:98:fc:6c:80:cb:17:57:fc:0d:0b:7c: 0d:f3:d7:75:5b:38:5a:53:41:09:e1:8f:5b:95:8a: ba:3f:aa:51:50:18:8e:bc:d2:b5:a1:e0:f9:de:6c: 98:bf:63:4b:d6:9f:80:0c:cc:5b:af:d9:28:c2:84: 94:7b:b8:53:1f:4b:79:23:48:f5:1c:bb:b8:31:0c: 76:84:f0:32:14:d7:2d:5e:b8:5b:07:bb:d1:de:c0: 5d:cb:37:7d:54:79:fe:e9:26:88:9f:ee:01:46:cd: f8:65:8f:7c:30:5c:19:59:3b:47:52:a8:ff:4c:4b: c2:41:7a:43:f7:dc:9f:21:21:4a:b6:5e:4a:de:62: 62:cc:d2:3d:c6:30:83:f5:e3:a6:3b:0a:a0:bf:e2: 65:b0:44:07:14:68:34:65:c0:a0:d0:2a:62:16:e5: bf:94:02:3d:1c:15:ca:cf:c2:4e:65:c3:ba:95:86: e8:f1:32:bf:dd:2a:cc:05:37:c3:1c:a4:ed:a8:e2: 34:69:32:46:e7:ac:93:01:d4:e8:c9:45:1d:c7:2b: b5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:81:08:74:EF:D7:47:65:87:7E:6E:AD:59:E3:F0:40:E8:50:09:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a96bc15-8dac-3441-a332-06b6d61ab16d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:34:69:4c:dd:92:ff:57:b1:3e:c5:9c:70:eb:cb:17:ac:b3: 9e:5e:ad:f8:fe:63:ae:36:2b:54:b2:c7:f5:7e:3d:4a:d8:fd: c0:52:1a:c2:de:43:69:6f:6b:89:cc:fb:90:1f:02:ed:c3:b7: a5:4e:b1:d0:4c:4a:b9:18:04:74:37:36:18:46:72:4b:e1:6b: 3a:ff:49:a6:dc:10:87:1f:f3:12:1a:a5:e3:56:3a:23:a9:f7: 75:b8:61:ad:7f:22:32:54:34:4a:a6:bc:e4:d5:b0:91:a4:b2: 11:f7:d4:41:92:4c:81:48:ef:9d:de:cf:19:55:29:a1:4c:68: 17:5d:0a:21:7a:95:98:9d:13:07:eb:ba:70:78:d4:d2:d2:b5: f4:43:10:5e:88:ba:2c:99:c2:45:55:d5:19:5c:7a:72:1b:08: fc:62:c8:cb:60:8a:28:eb:8e:ea:9d:5d:e7:3f:54:f4:7a:23: b6:54:45:83:68:67:d7:f4:ac:68:a1:33:b4:c7:67:52:29:32: 20:70:39:2a:0f:3d:2f:9e:6f:51:51:13:4a:79:ca:ce:bc:8d: db:2f:59:c5:da:11:b9:e2:79:21:9b:32:f3:26:f7:f9:80:d9: 70:52:56:d0:41:dc:53:13:17:d7:30:ee:9f:1b:7e:f1:3d:3c: d7:86:1a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jim0qRSbEXgvlE4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjBiZjcyMmItNTM0MC00NzExLTg2ZmQtZDI2ZWM1Mjc2NTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP2LwDMYv3Qp6sa3JgCeA54TaHIOfGNzinDI NNDDJgKdOr+p3DhoVWsEv+CCs1OgmPxsgMsXV/wNC3wN89d1WzhaU0EJ4Y9blYq6 P6pRUBiOvNK1oeD53myYv2NL1p+ADMxbr9kowoSUe7hTH0t5I0j1HLu4MQx2hPAy FNctXrhbB7vR3sBdyzd9VHn+6SaIn+4BRs34ZY98MFwZWTtHUqj/TEvCQXpD99yf ISFKtl5K3mJizNI9xjCD9eOmOwqgv+JlsEQHFGg0ZcCg0CpiFuW/lAI9HBXKz8JO ZcO6lYbo8TK/3SrMBTfDHKTtqOI0aTJG56yTAdToyUUdxyu1VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGBCHTv10dlh35urVnj8EDoUAntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWE5NmJjMTUtOGRhYy0z NDQxLWEzMzItMDZiNmQ2MWFiMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY0aUzdkv9XsT7FnHDryxess55erfj+Y642K1Syx/V+PUrY/cBSGsLe Q2lva4nM+5AfAu3Dt6VOsdBMSrkYBHQ3NhhGckvhazr/SabcEIcf8xIapeNWOiOp 93W4Ya1/IjJUNEqmvOTVsJGkshH31EGSTIFI753ezxlVKaFMaBddCiF6lZidEwfr unB41NLStfRDEF6IuiyZwkVV1RlcenIbCPxiyMtgiijrjuqdXec/VPR6I7ZURYNo Z9f0rGihM7THZ1IpMiBwOSoPPS+eb1FRE0p5ys68jdsvWcXaEbnieSGbMvMm9/mA 2XBSVtBB3FMTF9cw7p8bfvE9PNeGGjA= -----END CERTIFICATE-----Generated at Sat Sep 26 02:54:13 2026 by rpki-client