$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afcf17c1-ce4a-3acf-bc8e-6846858d9a18.roa File: afcf17c1-ce4a-3acf-bc8e-6846858d9a18.roa (raw, json) Hash identifier: UQy6pp/8xszeN9rN9+8Km0KGaApsmOL/cKTq9M8/Rao= Subject key identifier: CE:95:FE:45:DB:DD:2D:AB:43:7C:AB:5F:AC:05:64:EB:89:3B:B9:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7C9BE6EE90EC183322A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afcf17c1-ce4a-3acf-bc8e-6846858d9a18.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 32833 IP address blocks: 72.248.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7c:9b:e6:ee:90:ec:18:33:22:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2c63103f-cf4f-4806-b159-ab3795d44d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:4b:0e:99:8c:fc:4d:69:ce:37:7f:5b:0c: 5e:7c:9c:3b:15:12:d7:b3:e0:e3:bc:97:bf:3f:71: 1d:ba:6e:36:a6:a2:63:6c:d2:b0:4e:3b:fe:89:a2: fe:5a:5d:67:6f:e7:93:b6:12:6c:ea:56:b5:97:e0: 3d:33:67:b1:eb:50:ac:12:44:8d:cb:ff:b9:a6:4e: c7:7f:53:c7:a5:98:30:2f:d5:72:5a:8d:7d:3e:41: e0:1f:04:b8:aa:67:bf:06:65:26:71:2b:5d:c2:03: 1a:f1:cd:ff:72:b5:dd:04:04:db:a9:45:21:12:63: 9d:13:24:4c:ab:45:e1:bb:f3:f9:bd:1e:99:f6:b0: fe:b4:5c:8c:5b:4a:85:7c:cb:e9:71:23:59:28:4d: e5:80:7c:60:12:1d:7f:6b:c1:2f:25:65:1e:fc:74: 34:9d:9d:8c:75:01:88:7b:c9:d5:83:1a:46:69:89: 1d:b6:bf:08:6d:1c:ff:eb:9d:19:48:1a:9c:f1:0a: f3:8b:00:5c:e7:76:5c:07:42:ef:e0:5b:8e:d1:07: 49:17:90:d1:34:18:9c:05:8b:98:75:a3:ea:d2:15: e1:7f:27:16:0d:27:f8:b7:9b:2e:3e:cd:5a:7c:fd: 1c:e0:17:1e:25:29:69:a8:29:4b:3a:fa:8e:75:12: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:95:FE:45:DB:DD:2D:AB:43:7C:AB:5F:AC:05:64:EB:89:3B:B9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afcf17c1-ce4a-3acf-bc8e-6846858d9a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.248.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c0:59:75:aa:59:0b:34:d1:15:19:3d:39:4d:6d:de:2d:e9: 80:f6:57:2b:00:a8:3a:1a:9c:10:22:63:2e:66:5d:2d:53:9b: 20:df:03:58:2e:ae:d5:2e:76:c4:76:4b:54:a8:30:e2:d8:14: 95:e5:70:63:09:37:6b:3f:ac:a5:86:65:fc:b3:6d:bd:41:0c: db:3a:05:3c:50:bb:4d:24:3a:c8:46:bd:5b:bb:2e:d6:9c:ec: 15:d2:76:01:4a:e8:54:66:e1:87:bf:f8:13:a3:7a:c6:5d:87: d8:2f:a3:80:fe:84:1a:6c:d6:ea:44:e9:57:58:9d:b7:ca:f3: 32:1d:2c:56:ff:7b:3a:35:aa:1f:18:05:3d:22:a5:8b:00:e3: 7a:51:dd:b3:58:b8:8f:02:58:e6:16:57:d5:3d:65:db:17:93: eb:71:3a:40:88:ac:15:ef:0e:80:b9:b1:4a:3f:6d:84:0c:7f: b5:be:fb:96:aa:07:50:b1:cd:a5:8e:ff:16:07:d4:cb:b0:9e: fc:d3:32:26:7b:84:fd:dc:70:47:30:22:b2:c6:97:67:6c:ef: ce:ca:1a:68:0f:db:63:92:41:0c:07:39:42:34:85:55:66:59: 0a:89:ac:75:35:49:92:f5:3e:a2:f2:d3:c2:0b:bb:90:86:80: 2e:8f:72:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXyb5u6Q7BgzIqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmM2MzEwM2YtY2Y0Zi00ODA2LWIxNTktYWIzNzk1ZDQ0ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDdLDpmM/E1pzjd/WwxefJw7FRLXs+DjvJe/ P3Edum42pqJjbNKwTjv+iaL+Wl1nb+eTthJs6la1l+A9M2ex61CsEkSNy/+5pk7H f1PHpZgwL9VyWo19PkHgHwS4qme/BmUmcStdwgMa8c3/crXdBATbqUUhEmOdEyRM q0Xhu/P5vR6Z9rD+tFyMW0qFfMvpcSNZKE3lgHxgEh1/a8EvJWUe/HQ0nZ2MdQGI e8nVgxpGaYkdtr8IbRz/650ZSBqc8QrziwBc53ZcB0Lv4FuO0QdJF5DRNBicBYuY daPq0hXhfycWDSf4t5suPs1afP0c4BceJSlpqClLOvqOdRJ1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6V/kXb3S2rQ3yrX6wFZOuJO7mAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZjZjE3YzEtY2U0YS0z YWNmLWJjOGUtNjg0Njg1OGQ5YTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbAWXWqWQs00RUZPTlNbd4t6YD2VysAqDoanBAiYy5mXS1TmyDfA1gu rtUudsR2S1SoMOLYFJXlcGMJN2s/rKWGZfyzbb1BDNs6BTxQu00kOshGvVu7Ltac 7BXSdgFK6FRm4Ye/+BOjesZdh9gvo4D+hBps1upE6VdYnbfK8zIdLFb/ezo1qh8Y BT0ipYsA43pR3bNYuI8CWOYWV9U9ZdsXk+txOkCIrBXvDoC5sUo/bYQMf7W++5aq B1CxzaWO/xYH1MuwnvzTMiZ7hP3ccEcwIrLGl2ds787KGmgP22OSQQwHOUI0hVVm WQqJrHU1SZL1PqLy08ILu5CGgC6Pctw= -----END CERTIFICATE-----Generated at Wed Sep 30 02:44:04 2026 by rpki-client