$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78d35d18-3ab0-3586-8363-2fa340e3a405.roa File: 78d35d18-3ab0-3586-8363-2fa340e3a405.roa (raw, json) Hash identifier: 2VfCt5BotFxpEykFiaBIGOCoj5sO0Q5v7PCyele4hYc= Subject key identifier: 44:4E:44:38:4D:B2:E3:BB:80:AA:F1:5F:07:98:4E:63:68:F9:E3:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2BA0571834EE59AA1AC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78d35d18-3ab0-3586-8363-2fa340e3a405.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.190.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ba:05:71:83:4e:e5:9a:a1:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=f02ee302-2e38-4434-8bf9-9eea1c8861d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:8c:62:0c:4a:fb:90:2e:93:cb:5c:d1:7b: b3:f3:00:d4:b7:14:1f:07:64:3f:b4:fb:56:2e:97: e4:a1:66:c1:54:ed:e1:7d:b6:e5:86:64:13:09:9a: 80:a3:75:aa:2b:a7:d2:59:a9:fc:93:05:04:55:1d: 07:93:be:34:a0:30:6e:5f:7a:f6:a2:0e:3f:8e:13: 0f:89:1f:a2:7f:da:97:81:7b:57:ec:be:02:0a:0e: 86:43:09:28:fd:52:5f:53:52:73:04:dc:f7:2e:04: 65:12:f4:2e:d4:d6:6e:16:5b:ea:3f:86:fe:ca:24: 38:be:1a:71:61:d1:5d:eb:be:77:8a:90:a3:57:36: c5:96:36:b1:06:22:75:ae:23:17:92:92:fb:c4:23: a0:48:9b:50:16:61:d2:a6:76:f9:43:d4:6d:34:0f: dd:23:b5:a1:66:8d:74:e7:ab:26:0e:d7:c0:34:cd: ac:fe:37:8a:ad:43:13:8f:8f:75:6f:63:77:79:98: 8a:77:52:01:5c:7c:6f:0f:b7:d9:85:97:dc:a7:b9: e8:d2:68:88:63:02:64:02:d7:ce:61:be:0d:e2:56: e4:60:84:8d:9b:ac:8f:74:71:0c:6e:45:6d:a7:08: ae:de:b5:37:aa:ee:99:df:e0:56:2e:3d:45:80:27: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4E:44:38:4D:B2:E3:BB:80:AA:F1:5F:07:98:4E:63:68:F9:E3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78d35d18-3ab0-3586-8363-2fa340e3a405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:93:a8:e1:9f:3b:4e:71:6b:a5:21:f6:35:82:09:e4:1e:e4: b5:e2:74:5f:62:25:69:7a:ac:7a:66:07:73:5d:5d:e7:2b:df: cf:c9:74:ab:f7:f9:72:53:e8:ba:39:b4:41:7e:ed:4f:9f:6d: 9e:9e:32:83:8a:a3:f6:79:e4:85:0b:c4:d6:07:77:47:01:5c: aa:ed:f3:59:79:21:3e:a0:48:30:e8:36:19:cc:74:8a:34:45: 20:ca:90:11:5a:2b:b3:63:eb:35:3c:f2:c7:ae:40:33:a7:f9: c0:30:1d:5c:33:51:25:04:d2:09:66:cb:a7:17:d3:07:bd:db: a5:9a:fc:83:8c:e7:86:1a:9d:1a:7b:86:1f:74:7a:c1:3f:d1: 18:24:3d:97:07:ef:68:7a:df:ff:70:6d:13:c6:5f:9a:fc:c8: ac:9a:e0:a0:a7:66:cf:0c:e4:03:7f:86:a2:95:62:85:ec:de: 15:8a:16:36:61:07:e6:a7:24:0f:19:0b:b1:e1:71:3e:65:99: 58:b3:c5:0b:af:44:67:60:39:df:ca:14:45:7a:71:25:dc:20: 74:9e:ec:6b:0e:f9:f7:d9:3a:fb:31:3d:23:63:7e:ad:80:8c: fd:29:c5:6c:91:a5:b5:14:bd:24:23:28:d6:73:70:82:ca:23: f4:a7:ab:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0roFcYNO5ZqhrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZjAyZWUzMDItMmUzOC00NDM0LThiZjktOWVlYTFjODg2MWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW+MYgxK+5Auk8tc0Xuz8wDUtxQfB2Q/tPtW LpfkoWbBVO3hfbblhmQTCZqAo3WqK6fSWan8kwUEVR0Hk740oDBuX3r2og4/jhMP iR+if9qXgXtX7L4CCg6GQwko/VJfU1JzBNz3LgRlEvQu1NZuFlvqP4b+yiQ4vhpx YdFd6753ipCjVzbFljaxBiJ1riMXkpL7xCOgSJtQFmHSpnb5Q9RtNA/dI7WhZo10 56smDtfANM2s/jeKrUMTj491b2N3eZiKd1IBXHxvD7fZhZfcp7no0miIYwJkAtfO Yb4N4lbkYISNm6yPdHEMbkVtpwiu3rU3qu6Z3+BWLj1FgCcuMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERORDhNsuO7gKrxXweYTmNo+eMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzhkMzVkMTgtM2FiMC0z NTg2LTgzNjMtMmZhMzQwZTNhNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISTqOGfO05xa6Uh9jWCCeQe5LXidF9iJWl6rHpmB3NdXecr38/JdKv3 +XJT6Lo5tEF+7U+fbZ6eMoOKo/Z55IULxNYHd0cBXKrt81l5IT6gSDDoNhnMdIo0 RSDKkBFaK7Nj6zU88seuQDOn+cAwHVwzUSUE0glmy6cX0we926Wa/IOM54YanRp7 hh90esE/0RgkPZcH72h63/9wbRPGX5r8yKya4KCnZs8M5AN/hqKVYoXs3hWKFjZh B+anJA8ZC7HhcT5lmVizxQuvRGdgOd/KFEV6cSXcIHSe7GsO+ffZOvsxPSNjfq2A jP0pxWyRpbUUvSQjKNZzcILKI/Snq34= -----END CERTIFICATE-----Generated at Mon Sep 28 04:32:29 2026 by rpki-client