$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa File: aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa (raw, json) Hash identifier: erTLCLwJJBDk0tEkp+7Kfu77gK1+iXra0x0lH5ObdEY= Subject key identifier: 0E:70:83:A2:77:4C:83:04:93:A1:7A:52:FB:7E:33:63:8A:C9:4F:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B2F7243055CE54D1E870 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.190.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b2:f7:24:30:55:ce:54:d1:e8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=c22ecbb9-4ba3-4698-97e9-0eb6552690a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:c9:30:8b:e7:dc:0e:3e:5c:20:76:b2:ab: 32:aa:2a:ca:18:9c:35:31:44:94:6c:c0:5b:e7:30: 28:20:82:66:66:3b:0a:61:12:aa:59:5b:58:0c:a0: 19:ec:72:c2:9f:1c:b6:c5:47:1c:63:f9:cf:af:fa: f1:05:e2:68:c0:3a:1b:06:c8:f2:27:39:58:8e:c2: ed:10:26:6e:0a:89:be:7e:9f:d8:d8:2d:6b:82:95: 38:07:a1:f7:85:b3:ff:7f:e3:48:29:06:4b:63:66: 69:24:2a:69:ff:6e:39:e4:27:85:af:9e:72:39:d0: 6a:ec:0f:57:e3:c8:4d:c3:77:8e:8c:84:96:ed:0e: 3c:16:dd:11:9e:b5:e1:57:c7:0a:c4:41:ae:2c:f6: db:7e:bc:d2:72:90:22:85:d3:43:37:fe:04:cf:77: 60:f3:e0:72:4a:ba:0c:c1:71:f6:7c:6b:e0:cc:6a: 7c:93:3e:18:16:e0:b6:32:75:63:5b:da:f4:5c:b6: 3a:77:98:d1:ff:9f:f4:f1:7b:5b:58:01:81:b8:55: b5:bc:3c:9d:1c:2c:1e:a0:d3:be:d2:41:93:f4:fc: 39:80:fc:6c:93:ca:0b:bd:42:66:c6:5a:17:8f:08: 00:c2:c3:94:db:46:10:cd:42:8d:12:71:a4:61:7f: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:70:83:A2:77:4C:83:04:93:A1:7A:52:FB:7E:33:63:8A:C9:4F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:90:6a:28:b4:ce:31:85:e3:cc:07:30:9e:cf:6d:52:e6:3e: 0c:3c:47:09:62:4e:84:b2:37:c1:17:14:e8:e4:2e:42:b4:86: d3:8d:65:34:47:35:ed:85:8a:b9:d4:8a:b0:8d:a9:48:27:6d: bc:57:94:9f:32:b7:36:c8:22:a8:f5:1d:e5:4e:7e:8e:5c:db: 8f:31:19:7c:a6:46:c8:8c:82:cb:09:f3:86:24:97:6a:9e:e0: db:f7:70:ed:b6:82:7e:7d:08:b2:7f:b2:47:5f:e3:13:65:e8: c1:d9:19:b6:67:09:06:79:b8:08:5f:5c:c8:2f:f4:2e:23:63: fa:15:fe:cd:2b:c9:c4:da:de:17:ae:6b:57:d9:1c:8a:5a:88: bc:fc:37:13:e1:2d:78:df:ed:d7:51:15:e0:df:5b:59:25:e7: c6:57:df:f9:72:23:d1:dc:c5:98:3b:8a:ea:b3:2a:01:27:f9: 1f:82:6a:5c:16:03:dd:9f:50:fc:ed:29:74:f6:34:2a:fa:79: 02:6c:c4:3f:cc:03:9f:34:0a:b3:ca:1d:7d:dc:51:b9:02:6b: d8:3d:4d:8d:6a:19:a3:54:18:5b:85:7b:43:b5:f4:cd:62:4f: 57:ca:21:87:8c:36:5c:5e:0b:b8:17:7d:c8:ca:86:ad:b0:d8: 22:33:19:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rL3JDBVzlTR6HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YzIyZWNiYjktNGJhMy00Njk4LTk3ZTktMGViNjU1MjY5MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh47JMIvn3A4+XCB2sqsyqirKGJw1MUSUbMBb 5zAoIIJmZjsKYRKqWVtYDKAZ7HLCnxy2xUccY/nPr/rxBeJowDobBsjyJzlYjsLt ECZuCom+fp/Y2C1rgpU4B6H3hbP/f+NIKQZLY2ZpJCpp/2455CeFr55yOdBq7A9X 48hNw3eOjISW7Q48Ft0RnrXhV8cKxEGuLPbbfrzScpAihdNDN/4Ez3dg8+BySroM wXH2fGvgzGp8kz4YFuC2MnVjW9r0XLY6d5jR/5/08XtbWAGBuFW1vDydHCweoNO+ 0kGT9Pw5gPxsk8oLvUJmxloXjwgAwsOU20YQzUKNEnGkYX8oBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5wg6J3TIMEk6F6Uvt+M2OKyU99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVkZmMzNmYtZjlhYi0z OGJjLThmMWEtMTA4ODMyMzdkZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeQaii0zjGF48wHMJ7PbVLmPgw8RwliToSyN8EXFOjkLkK0htONZTRH Ne2FirnUirCNqUgnbbxXlJ8ytzbIIqj1HeVOfo5c248xGXymRsiMgssJ84Ykl2qe 4Nv3cO22gn59CLJ/skdf4xNl6MHZGbZnCQZ5uAhfXMgv9C4jY/oV/s0rycTa3heu a1fZHIpaiLz8NxPhLXjf7ddRFeDfW1kl58ZX3/lyI9HcxZg7iuqzKgEn+R+CalwW A92fUPztKXT2NCr6eQJsxD/MA580CrPKHX3cUbkCa9g9TY1qGaNUGFuFe0O19M1i T1fKIYeMNlxeC7gXfcjKhq2w2CIzGZ4= -----END CERTIFICATE-----Generated at Mon Sep 28 22:00:07 2026 by rpki-client