$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0ee4b24-8956-3854-b46d-9d16faaa2dca.roa File: a0ee4b24-8956-3854-b46d-9d16faaa2dca.roa (raw, json) Hash identifier: Fy4Pn4N5DyB9Ztwnusa8IsCQ9zzyT7Q43fcZGR9O/oQ= Subject key identifier: F0:8F:F8:53:FC:B1:00:5C:26:FA:3A:B4:01:FE:1E:AA:BC:9D:4F:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F3E47FEB6F6E2A37FCBDC1E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0ee4b24-8956-3854-b46d-9d16faaa2dca.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 7029 IP address blocks: 162.40.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fe:b6:f6:e2:a3:7f:cb:dc:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=83b9492a-dc32-425e-a73b-e6d87f2069e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:46:b8:f0:ac:36:a0:36:fc:30:ab:a8:0f: 4e:69:24:d9:9c:4a:27:c3:31:1b:ea:18:a0:a1:ab: 84:aa:a4:bc:23:87:e6:be:0e:bb:01:1c:17:48:74: f4:6b:8a:78:eb:02:e4:50:93:a1:4b:49:2b:78:33: 32:27:47:9f:4b:16:23:d4:b4:d3:f5:1e:11:c4:8d: bf:94:cd:30:6c:53:90:d8:9b:06:3e:31:14:43:13: a0:9b:93:56:dd:ad:c4:63:20:cb:2a:c8:a7:60:ef: 8f:a8:5d:36:9b:fb:86:53:ee:ae:ef:88:7c:a0:6d: 48:24:f4:a7:a7:14:26:ed:fe:73:43:6b:27:d6:06: 3b:96:06:be:05:07:a1:e5:31:4c:86:e2:3c:b1:d3: 70:13:98:1c:dd:13:fb:74:36:a3:29:d4:e6:a0:b5: 1d:45:5f:f8:f8:dc:aa:98:a4:9a:d0:a4:54:33:0b: 41:4c:8e:9a:88:5c:7e:1c:9a:bf:6d:df:3d:97:a2: c0:cc:01:9f:bb:d7:52:bd:09:11:65:fd:8a:2e:82: fc:d4:f4:ae:2c:3a:35:83:b9:18:28:1e:44:cf:bf: eb:9c:8a:9c:d1:0b:85:dd:32:c9:c2:fc:65:19:71: 39:13:5f:0e:a6:6e:0e:65:a0:50:0d:b6:83:7e:81: 73:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8F:F8:53:FC:B1:00:5C:26:FA:3A:B4:01:FE:1E:AA:BC:9D:4F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0ee4b24-8956-3854-b46d-9d16faaa2dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:15:14:7f:45:12:5f:17:32:86:a1:e0:70:18:f3:d2:49:0a: cf:bb:56:67:8a:8f:01:47:68:62:5a:03:8d:43:7b:4d:1c:63: 2b:43:18:14:b7:37:86:62:97:4a:1a:e0:c0:f5:1e:6e:fd:dd: df:5e:74:8b:56:79:76:a9:fc:ea:1f:ff:fc:d3:52:3e:63:3b: ba:a2:11:f6:1d:2e:03:c6:08:0a:6e:10:3b:1e:cc:13:ac:48: 60:0a:1b:72:45:17:df:3a:a0:d2:4f:e3:3b:32:ee:c3:c6:68: f0:90:5a:c2:68:41:6e:b5:57:dd:dd:8c:22:66:99:9f:35:de: c2:b2:01:de:97:62:a3:30:09:4c:45:cf:10:3d:8a:9b:15:c6: 1b:ad:b2:17:3b:61:d6:20:86:c2:bd:63:0b:69:a9:87:53:97: e2:1b:8c:86:30:0a:ab:9a:cc:df:fc:db:5b:fd:ef:c5:fd:6c: c1:85:68:fb:c1:6d:c8:0e:10:9f:0a:fa:fb:a6:08:99:c0:ec: 7c:11:9d:a6:2a:1f:ab:e6:56:17:88:92:e9:90:62:b8:02:f4: 8d:ba:7b:51:8d:49:ad:42:2d:37:8b:fa:5a:a8:a4:a1:ba:60: 36:53:23:6f:2e:82:a7:79:48:8d:5b:2d:52:32:21:3f:52:68: 87:cb:80:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/629uKjf8vcHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ODNiOTQ5MmEtZGMzMi00MjVlLWE3M2ItZTZkODdmMjA2OWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwBGuPCsNqA2/DCrqA9OaSTZnEonwzEb6hig oauEqqS8I4fmvg67ARwXSHT0a4p46wLkUJOhS0kreDMyJ0efSxYj1LTT9R4RxI2/ lM0wbFOQ2JsGPjEUQxOgm5NW3a3EYyDLKsinYO+PqF02m/uGU+6u74h8oG1IJPSn pxQm7f5zQ2sn1gY7lga+BQeh5TFMhuI8sdNwE5gc3RP7dDajKdTmoLUdRV/4+Nyq mKSa0KRUMwtBTI6aiFx+HJq/bd89l6LAzAGfu9dSvQkRZf2KLoL81PSuLDo1g7kY KB5Ez7/rnIqc0QuF3TLJwvxlGXE5E18Opm4OZaBQDbaDfoFzOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCP+FP8sQBcJvo6tAH+Hqq8nU+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTBlZTRiMjQtODk1Ni0z ODU0LWI0NmQtOWQxNmZhYWEyZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoijyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEVFH9FEl8XMoah4HAY89JJCs+7VmeKjwFHaGJaA41De00cYytDGBS3 N4Zil0oa4MD1Hm793d9edItWeXap/Oof//zTUj5jO7qiEfYdLgPGCApuEDsezBOs SGAKG3JFF986oNJP4zsy7sPGaPCQWsJoQW61V93djCJmmZ813sKyAd6XYqMwCUxF zxA9ipsVxhutshc7YdYghsK9YwtpqYdTl+IbjIYwCquazN/821v978X9bMGFaPvB bcgOEJ8K+vumCJnA7HwRnaYqH6vmVheIkumQYrgC9I26e1GNSa1CLTeL+lqopKG6 YDZTI28ugqd5SI1bLVIyIT9SaIfLgHA= -----END CERTIFICATE-----Generated at Tue Sep 22 10:31:59 2026 by rpki-client