$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/655617f8-076a-3f56-9950-c52d6fc07c81.roa File: 655617f8-076a-3f56-9950-c52d6fc07c81.roa (raw, json) Hash identifier: SfEFIa7SqvFoVPXSZq5UMIM4xqsFDfwxEZF7Pi8SNKY= Subject key identifier: B6:D7:1E:23:75:A8:99:6E:3D:4C:B3:3C:4A:B7:96:DE:70:84:43:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F2957A7214BE436A89E106280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/655617f8-076a-3f56-9950-c52d6fc07c81.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 7029 IP address blocks: 162.40.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:a7:21:4b:e4:36:a8:9e:10:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=d0224605-8e46-42af-8e59-c37b46fe161d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:09:1c:de:85:5a:45:d3:a0:59:b0:d6:be: f0:b4:c9:fd:0a:83:57:3f:2a:5c:39:44:ca:99:14: c4:1f:dc:bd:b0:de:7b:38:4b:a6:7d:15:e4:74:7a: bb:6b:b0:1a:b0:7d:3e:38:28:49:38:ce:a2:52:25: c9:83:00:ff:67:c0:8f:21:0f:ad:5b:94:c8:12:15: 6a:ea:39:1e:fb:6e:9d:91:77:c8:5d:a7:05:1e:45: 2a:6c:1e:2d:c5:95:27:3a:8d:ea:ae:4b:a8:9e:13: 97:c4:bf:ca:23:c2:70:c0:97:e6:35:ca:c9:59:c0: 39:29:9f:2b:79:57:ac:86:a3:2f:b6:b6:96:79:d3: 1a:56:e8:a2:d2:38:d9:dd:24:61:35:ae:7f:c5:60: d1:2b:fd:c3:e8:6a:46:45:19:db:46:97:40:d3:bd: ec:f5:8e:e3:24:88:88:a7:7b:c2:37:1d:00:b0:6b: 01:b7:d7:0a:7f:c0:ae:59:65:ec:47:42:98:db:47: f6:cd:81:fb:fc:f1:c0:e8:1f:82:28:dd:95:7c:5b: f6:57:36:60:62:f6:41:31:5c:ea:cf:92:d6:94:c1: 23:0e:21:09:ef:35:40:a9:66:47:a7:9d:21:ce:72: 40:e4:4c:16:05:34:0c:b5:c0:cc:fd:e4:8b:3e:92: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D7:1E:23:75:A8:99:6E:3D:4C:B3:3C:4A:B7:96:DE:70:84:43:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/655617f8-076a-3f56-9950-c52d6fc07c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:12:67:6f:3c:1f:e4:1d:77:6c:b3:5d:ab:be:04:b5:83:24: 9a:48:72:13:b6:88:2f:91:ac:89:ee:f1:99:6f:52:9a:91:a9: f7:fd:a1:9a:45:46:ae:0e:f5:27:5f:52:70:bd:2b:5f:ed:08: 11:23:a2:6d:16:32:61:ac:78:ae:de:b6:14:46:e4:06:20:4a: 03:03:d6:2b:fa:39:fc:55:5a:f8:c9:87:8b:09:ef:bc:bd:e0: 39:b0:27:0d:ed:c1:b8:c9:c3:ed:c7:b9:b4:4d:ec:f3:b5:f9: 92:c1:3a:21:03:eb:66:90:f0:c5:f4:a6:dc:ef:41:86:15:f0: 1f:0a:8a:f0:e7:2b:a5:32:5b:67:1b:ae:c6:02:75:3f:1f:57: 1c:02:52:61:fa:58:1d:5c:08:40:36:e6:80:8e:e7:1b:f2:84: 20:fb:b1:b1:68:64:bd:b2:dc:7d:af:52:af:76:2a:05:3a:a0: 72:f9:99:55:b4:09:55:a4:4a:ac:ab:b6:63:94:65:f5:72:6b: 21:37:8a:67:c3:24:ad:fc:4a:49:05:20:4e:d1:36:35:9c:ca: be:65:a1:17:e5:57:6e:fe:d4:35:e5:45:70:cf:37:ec:76:0a: 9f:a2:57:da:c1:d1:d1:90:bf:4a:80:5a:57:85:dc:07:bd:72: 02:9d:17:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV6chS+Q2qJ4QYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZDAyMjQ2MDUtOGU0Ni00MmFmLThlNTktYzM3YjQ2ZmUxNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFcJHN6FWkXToFmw1r7wtMn9CoNXPypcOUTK mRTEH9y9sN57OEumfRXkdHq7a7AasH0+OChJOM6iUiXJgwD/Z8CPIQ+tW5TIEhVq 6jke+26dkXfIXacFHkUqbB4txZUnOo3qrkuonhOXxL/KI8JwwJfmNcrJWcA5KZ8r eVeshqMvtraWedMaVuii0jjZ3SRhNa5/xWDRK/3D6GpGRRnbRpdA073s9Y7jJIiI p3vCNx0AsGsBt9cKf8CuWWXsR0KY20f2zYH7/PHA6B+CKN2VfFv2VzZgYvZBMVzq z5LWlMEjDiEJ7zVAqWZHp50hznJA5EwWBTQMtcDM/eSLPpJl8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbXHiN1qJluPUyzPEq3lt5whEM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjU1NjE3ZjgtMDc2YS0z ZjU2LTk5NTAtYzUyZDZmYzA3YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoijmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJESZ288H+Qdd2yzXau+BLWDJJpIchO2iC+RrInu8ZlvUpqRqff9oZpF Rq4O9SdfUnC9K1/tCBEjom0WMmGseK7ethRG5AYgSgMD1iv6OfxVWvjJh4sJ77y9 4DmwJw3twbjJw+3HubRN7PO1+ZLBOiED62aQ8MX0ptzvQYYV8B8KivDnK6UyW2cb rsYCdT8fVxwCUmH6WB1cCEA25oCO5xvyhCD7sbFoZL2y3H2vUq92KgU6oHL5mVW0 CVWkSqyrtmOUZfVyayE3imfDJK38SkkFIE7RNjWcyr5loRflV27+1DXlRXDPN+x2 Cp+iV9rB0dGQv0qAWleF3Ae9cgKdFy0= -----END CERTIFICATE-----Generated at Sun Sep 20 17:46:41 2026 by rpki-client