$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9de87a13-1246-3663-a01f-1b9b6b8ff4da.roa File: 9de87a13-1246-3663-a01f-1b9b6b8ff4da.roa (raw, json) Hash identifier: GZyUsyc1kbEHvgBsgHTFI12nJYHhnkpW96z5W9tZuC0= Subject key identifier: 29:D3:7E:E2:A6:C0:79:99:5C:D4:60:40:2F:94:C3:1C:87:9A:15:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F38B26C2DEA867D81B100FA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9de87a13-1246-3663-a01f-1b9b6b8ff4da.roa Signing time: Sat 19 Sep 2026 01:00:12 +0000 ROA not before: Sat 19 Sep 2026 01:00:12 +0000 ROA not after: Fri 18 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.189.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:b2:6c:2d:ea:86:7d:81:b1:00:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 01:00:12 2026 GMT Not After : Dec 18 02:00:12 2026 GMT Subject: CN=308e00c5-77de-428e-a515-4013f9614766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c3:37:f1:80:97:c9:dd:b3:7d:a8:16:75:dd: b3:5b:9c:5f:19:41:b6:84:85:97:f2:73:69:9a:f0: a6:bb:e8:e8:71:ab:73:69:4a:58:a6:03:b7:d8:4a: 84:76:86:16:91:3a:97:f0:6f:42:03:f7:96:53:00: 5f:a5:92:fe:c4:0f:6c:e6:29:47:eb:40:78:a3:06: d0:c0:5c:53:53:40:7b:7d:b4:ac:f3:ef:0e:e5:09: 6f:f5:cc:eb:4e:f7:02:00:85:6d:51:3a:06:c9:e1: b6:5b:16:c1:0e:27:c1:25:97:fe:52:74:58:24:e6: 5c:97:9a:c2:be:68:74:fb:d4:73:96:b2:7d:6a:c7: 6a:30:3d:79:11:f8:df:b9:f6:0a:c4:97:55:22:67: 7e:69:5e:4f:2e:18:e1:e4:1a:9c:44:da:6e:76:fb: f1:13:5e:2d:9d:89:1b:10:f1:47:89:77:52:97:56: bb:b8:e3:54:f3:22:78:c7:34:8b:34:0c:42:f1:43: 09:80:e8:1b:1e:68:46:67:9e:db:96:63:57:f9:a3: e5:40:4f:b3:e5:6c:b6:a7:7d:85:98:cb:02:39:84: 26:72:d2:b8:e2:e1:3e:14:31:24:ac:00:6f:da:90: b8:a1:5c:86:a0:9a:02:7b:fb:7d:1f:af:d9:96:30: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D3:7E:E2:A6:C0:79:99:5C:D4:60:40:2F:94:C3:1C:87:9A:15:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9de87a13-1246-3663-a01f-1b9b6b8ff4da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:52:d7:6f:c1:be:96:44:5c:8c:cf:fd:59:bd:6e:45:32:58: 9e:f5:00:de:e4:27:87:d8:33:4b:0b:73:b1:89:cf:f6:91:ed: 35:09:1a:1b:f7:99:9e:bc:43:96:38:df:47:0b:d5:9f:0d:72: 6f:6c:d0:cc:b2:fd:61:21:46:6e:c9:91:d5:7e:be:6f:16:e7: 74:96:85:79:16:79:5d:b3:95:f7:56:2a:26:42:20:bf:6f:9b: 03:f2:a0:23:40:97:ed:66:26:1d:c4:b6:5e:01:75:46:b6:b0: 88:dc:fe:2e:f7:ba:d2:fa:e2:40:93:ea:27:9f:ba:9c:08:96: 84:eb:2d:6a:c7:cb:e0:48:48:3c:8e:61:4f:1b:80:6b:ec:16: 46:30:0d:ca:fc:2a:e6:91:23:3e:58:3e:46:a2:c8:70:87:0d: 4a:0e:66:28:5b:80:59:51:cd:d1:6d:4f:e3:7f:96:6f:cb:ef: 05:bd:26:a9:14:b1:e1:bf:f1:c7:58:34:80:98:bc:aa:44:fd: 6b:82:1b:20:a3:82:f0:18:c9:d5:25:94:1d:db:76:a6:19:70: f4:25:11:1f:5b:4a:87:a1:cb:1d:76:de:65:84:26:9c:2f:26: e7:d7:98:ae:30:67:62:6f:e4:74:52:73:96:7d:d8:a2:3c:06: 04:e5:51:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE84smwt6oZ9gbEA+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxOTAxMDAxMloXDTI2MTIxODAyMDAxMlowLzEtMCsGA1UEAxMk MzA4ZTAwYzUtNzdkZS00MjhlLWE1MTUtNDAxM2Y5NjE0NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsM38YCXyd2zfagWdd2zW5xfGUG2hIWX8nNp mvCmu+jocatzaUpYpgO32EqEdoYWkTqX8G9CA/eWUwBfpZL+xA9s5ilH60B4owbQ wFxTU0B7fbSs8+8O5Qlv9czrTvcCAIVtUToGyeG2WxbBDifBJZf+UnRYJOZcl5rC vmh0+9RzlrJ9asdqMD15EfjfufYKxJdVImd+aV5PLhjh5BqcRNpudvvxE14tnYkb EPFHiXdSl1a7uONU8yJ4xzSLNAxC8UMJgOgbHmhGZ57blmNX+aPlQE+z5Wy2p32F mMsCOYQmctK44uE+FDEkrABv2pC4oVyGoJoCe/t9H6/ZljCyzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnTfuKmwHmZXNRgQC+UwxyHmhU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWRlODdhMTMtMTI0Ni0z NjYzLWEwMWYtMWI5YjZiOGZmNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJS12/BvpZEXIzP/Vm9bkUyWJ71AN7kJ4fYM0sLc7GJz/aR7TUJGhv3 mZ68Q5Y430cL1Z8Ncm9s0Myy/WEhRm7JkdV+vm8W53SWhXkWeV2zlfdWKiZCIL9v mwPyoCNAl+1mJh3Etl4BdUa2sIjc/i73utL64kCT6iefupwIloTrLWrHy+BISDyO YU8bgGvsFkYwDcr8KuaRIz5YPkaiyHCHDUoOZihbgFlRzdFtT+N/lm/L7wW9JqkU seG/8cdYNICYvKpE/WuCGyCjgvAYydUllB3bdqYZcPQlER9bSoehyx123mWEJpwv JufXmK4wZ2Jv5HRSc5Z92KI8BgTlUcw= -----END CERTIFICATE-----Generated at Tue Sep 22 15:07:42 2026 by rpki-client