$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88a03cc3-fe4c-3376-9d66-5ec76225ba85.roa File: 88a03cc3-fe4c-3376-9d66-5ec76225ba85.roa (raw, json) Hash identifier: HPBhz6EjTw9x9xtMTWmYCAWACNqSJ59OGl7QkfVAQG8= Subject key identifier: 54:77:78:FA:E6:15:F9:65:23:22:92:06:80:44:A0:6E:8A:69:2B:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F15CCDE39F69814DA549F82C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88a03cc3-fe4c-3376-9d66-5ec76225ba85.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 208.101.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:de:39:f6:98:14:da:54:9f:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=35501a98-0602-4140-bcf6-40f1fdcb2450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:3d:d9:f4:a5:e0:8a:ea:58:b5:34:39:f4: 96:62:4d:87:98:eb:ca:b2:72:29:20:04:11:4f:12: 4f:e8:a5:ba:48:b3:18:72:17:f0:01:42:46:fb:f6: 8d:12:e5:cf:3d:7a:9b:4a:3f:69:51:cc:dc:e3:db: 3b:34:e8:b7:d5:51:0f:46:77:11:ce:74:ab:c2:78: 15:c0:e8:f2:db:f7:3d:b8:9d:e0:4b:e3:62:ac:08: 30:d7:cb:49:bc:70:ff:49:f3:34:9f:b9:eb:3f:15: 9c:a9:77:62:96:75:2d:21:6a:74:af:27:02:fd:8d: f4:af:97:2e:a5:9a:a0:34:ee:d3:31:f0:84:3c:78: 09:42:72:56:21:5d:d7:ea:98:2e:d1:96:b3:f0:d5: e0:f0:6f:ce:cf:9c:01:39:e3:0e:2a:f0:fa:08:53: 2f:99:28:b8:e5:fb:f1:ce:8a:2e:8a:5c:3e:7d:47: ba:8e:42:e2:a9:d2:01:19:2e:b6:8e:79:67:c0:9c: 57:6b:4c:8b:72:f5:fb:34:b0:30:3c:b1:c5:24:73: 31:3d:03:1f:3b:23:20:12:59:af:8f:09:ec:ae:8e: 0f:6e:c5:67:d5:9f:d3:1b:31:c8:a4:ab:6f:ad:e8: b2:5c:6a:96:5a:7a:03:df:d4:94:3c:0a:42:2b:35: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:77:78:FA:E6:15:F9:65:23:22:92:06:80:44:A0:6E:8A:69:2B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88a03cc3-fe4c-3376-9d66-5ec76225ba85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c1:96:68:e0:d6:15:a6:d9:36:e3:58:24:d2:c5:39:f4:ad: ff:14:df:f3:55:e5:5f:ab:be:56:5a:83:87:33:3f:f5:f3:fa: 85:c6:0e:33:35:3f:3b:26:98:4e:30:27:18:cb:1b:00:c0:b8: 7a:62:8e:ca:10:6b:e4:05:aa:ef:bc:71:72:f4:f6:67:df:5a: 61:e5:6c:3b:fb:96:f3:cc:91:3d:7d:15:b9:37:e4:db:87:3f: 5e:d0:7a:b9:6b:54:c1:3f:d5:b5:cd:58:bb:86:64:39:dc:a3: 89:92:20:2a:45:9b:21:fd:58:77:d4:57:36:d8:b8:9e:bf:eb: bb:8c:d3:af:04:3e:75:5c:42:6f:94:9d:f2:ed:ff:97:b8:49: 90:c8:27:ba:ab:a1:06:c8:f1:5e:8d:62:af:38:b7:67:fa:27: 3b:75:75:56:be:1a:48:89:69:86:9d:46:b7:b0:8c:21:05:10: 3e:f1:0a:6d:f6:f9:c8:9b:55:c5:9e:46:f4:cc:e9:18:de:d4: 92:0c:e3:9c:e3:37:d3:d2:79:de:ed:0e:a6:c3:72:88:54:eb: b1:55:1e:87:fd:e4:b3:5a:b8:ad:1a:08:aa:6d:7c:34:2a:7d: 12:28:86:bd:cc:43:d2:e3:a0:5d:4a:f2:3b:45:5f:fc:02:59: 7d:6a:3e:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzN459pgU2lSfgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MzU1MDFhOTgtMDYwMi00MTQwLWJjZjYtNDBmMWZkY2IyNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziA92fSl4IrqWLU0OfSWYk2HmOvKsnIpIAQR TxJP6KW6SLMYchfwAUJG+/aNEuXPPXqbSj9pUczc49s7NOi31VEPRncRznSrwngV wOjy2/c9uJ3gS+NirAgw18tJvHD/SfM0n7nrPxWcqXdilnUtIWp0rycC/Y30r5cu pZqgNO7TMfCEPHgJQnJWIV3X6pgu0Zaz8NXg8G/Oz5wBOeMOKvD6CFMvmSi45fvx zoouilw+fUe6jkLiqdIBGS62jnlnwJxXa0yLcvX7NLAwPLHFJHMxPQMfOyMgElmv jwnsro4PbsVn1Z/TGzHIpKtvreiyXGqWWnoD39SUPApCKzVcvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR3ePrmFfllIyKSBoBEoG6KaSvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODhhMDNjYzMtZmU0Yy0z Mzc2LTlkNjYtNWVjNzYyMjViYTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnBlmjg1hWm2TbjWCTSxTn0rf8U3/NV5V+rvlZag4czP/Xz+oXGDjM1 PzsmmE4wJxjLGwDAuHpijsoQa+QFqu+8cXL09mffWmHlbDv7lvPMkT19Fbk35NuH P17QerlrVME/1bXNWLuGZDnco4mSICpFmyH9WHfUVzbYuJ6/67uM068EPnVcQm+U nfLt/5e4SZDIJ7qroQbI8V6NYq84t2f6Jzt1dVa+GkiJaYadRrewjCEFED7xCm32 +cibVcWeRvTM6Rje1JIM45zjN9PSed7tDqbDcohU67FVHof95LNauK0aCKptfDQq fRIohr3MQ9LjoF1K8jtFX/wCWX1qPpM= -----END CERTIFICATE-----Generated at Tue Sep 22 22:44:12 2026 by rpki-client