$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c967b3e2-1705-3c42-b7b0-eb494109841d.roa File: c967b3e2-1705-3c42-b7b0-eb494109841d.roa (raw, json) Hash identifier: wBTV6miNLFsNtpwIA97Q1fJ7Lo9WVQp+TtCVQWDQwGQ= Subject key identifier: 11:81:1F:96:CD:74:EB:C1:8B:42:CC:2B:E6:C6:9B:E8:63:FD:25:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F118DFA621311A8690C71F280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c967b3e2-1705-3c42-b7b0-eb494109841d.roa Signing time: Sat 05 Sep 2026 00:30:16 +0000 ROA not before: Sat 05 Sep 2026 00:30:16 +0000 ROA not after: Fri 04 Dec 2026 01:30:16 +0000 asID: 7029 IP address blocks: 173.213.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:8d:fa:62:13:11:a8:69:0c:71:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 00:30:16 2026 GMT Not After : Dec 4 01:30:16 2026 GMT Subject: CN=81107b16-998d-40b3-8d29-9954a4b18ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:a8:cb:e3:7a:62:6e:b8:a2:51:1a:c6:e4: 33:c8:61:79:8c:77:7a:02:45:30:9b:2e:64:52:98: 5d:9b:b7:60:c6:5a:f3:af:95:6c:59:67:29:c9:6f: e5:49:63:99:d6:7a:f3:4b:99:01:5d:11:1d:fa:b0: 9e:a8:73:53:32:ed:d3:98:8a:e2:28:48:f8:d9:9c: 2e:ee:56:a6:5e:39:3f:b3:77:8a:4d:3b:42:09:d8: 00:4c:2e:79:5f:f5:d0:90:47:4a:2b:62:2f:f1:dc: 67:52:74:69:65:8f:e7:0b:5e:fe:66:84:55:64:bf: f5:31:9c:1c:c5:76:ca:3f:f1:c0:a9:8b:37:de:6e: 0f:34:61:fa:05:3a:7b:4e:dd:c5:e4:33:b0:58:26: b0:07:f3:31:d7:4f:04:8f:22:52:ac:d9:54:21:30: 52:92:99:0c:20:cd:34:f1:9a:53:9f:b5:8c:95:ae: a7:04:3c:c0:15:95:e6:87:c3:66:10:ff:7c:be:a5: ed:7b:d4:cf:1f:af:7b:67:13:fd:a4:c0:c7:bf:3d: d0:d1:c7:4f:08:6d:60:b6:6e:81:ef:d6:b1:e2:6c: 45:c0:75:72:b3:ad:a7:58:98:17:ab:67:5a:bc:ec: c8:e7:b4:4f:38:16:f4:21:a7:6e:d4:44:96:50:13: d9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:81:1F:96:CD:74:EB:C1:8B:42:CC:2B:E6:C6:9B:E8:63:FD:25:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c967b3e2-1705-3c42-b7b0-eb494109841d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b2:4f:87:58:75:48:07:87:e3:e7:42:17:4a:31:81:7f:49: 22:d7:67:e6:f6:5d:c5:58:43:bd:49:2c:00:15:bf:d8:e4:b7: a2:32:30:a9:7a:b2:0e:57:96:69:41:43:11:b8:e7:b5:2a:a9: 29:ca:19:c1:cd:e5:54:0b:1d:55:29:90:6a:54:ee:1e:d8:1c: c4:70:b5:62:73:8f:3d:d0:31:76:2b:4c:f5:5d:3d:51:8b:76: 36:48:2b:21:01:05:03:8b:40:98:70:ba:2e:24:ce:00:22:9b: 55:7c:fb:20:6a:eb:ff:57:23:22:e1:3e:60:07:f0:c0:5a:d1: 7d:2d:94:1c:ac:d6:17:7f:f0:a9:67:4a:41:d0:1f:b2:f5:7f: aa:88:2b:6c:51:7d:4f:34:8c:5b:e0:84:a6:0c:3b:48:03:a6: bb:f1:63:5c:5b:91:ef:0a:d7:db:82:c3:87:fc:01:ae:f6:03: 66:6a:4f:62:c8:1c:3f:93:07:8c:66:2c:e0:f9:9a:b4:15:25: ff:c2:bf:c3:f8:d3:d9:a2:e4:4c:c2:82:00:d6:00:02:9b:8c: 12:ce:9e:1f:d2:73:a9:0f:aa:a1:e9:13:87:05:3c:7c:48:d9: aa:b4:20:ae:d5:19:21:6a:69:af:17:5d:c9:48:3e:93:a7:48: 75:ca:73:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RjfpiExGoaQxx8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNTAwMzAxNloXDTI2MTIwNDAxMzAxNlowLzEtMCsGA1UEAxMk ODExMDdiMTYtOTk4ZC00MGIzLThkMjktOTk1NGE0YjE4YWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw76oy+N6Ym64olEaxuQzyGF5jHd6AkUwmy5k Uphdm7dgxlrzr5VsWWcpyW/lSWOZ1nrzS5kBXREd+rCeqHNTMu3TmIriKEj42Zwu 7lamXjk/s3eKTTtCCdgATC55X/XQkEdKK2Iv8dxnUnRpZY/nC17+ZoRVZL/1MZwc xXbKP/HAqYs33m4PNGH6BTp7Tt3F5DOwWCawB/Mx108EjyJSrNlUITBSkpkMIM00 8ZpTn7WMla6nBDzAFZXmh8NmEP98vqXte9TPH697ZxP9pMDHvz3Q0cdPCG1gtm6B 79ax4mxFwHVys62nWJgXq2davOzI57RPOBb0Iadu1ESWUBPZ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGBH5bNdOvBi0LMK+bGm+hj/SXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzk2N2IzZTItMTcwNS0z YzQyLWI3YjAtZWI0OTQxMDk4NDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmyT4dYdUgHh+PnQhdKMYF/SSLXZ+b2XcVYQ71JLAAVv9jkt6IyMKl6 sg5XlmlBQxG457UqqSnKGcHN5VQLHVUpkGpU7h7YHMRwtWJzjz3QMXYrTPVdPVGL djZIKyEBBQOLQJhwui4kzgAim1V8+yBq6/9XIyLhPmAH8MBa0X0tlBys1hd/8Kln SkHQH7L1f6qIK2xRfU80jFvghKYMO0gDprvxY1xbke8K19uCw4f8Aa72A2ZqT2LI HD+TB4xmLOD5mrQVJf/Cv8P409mi5EzCggDWAAKbjBLOnh/Sc6kPqqHpE4cFPHxI 2aq0IK7VGSFqaa8XXclIPpOnSHXKc/c= -----END CERTIFICATE-----Generated at Tue Sep 22 16:59:58 2026 by rpki-client