$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f746c31a-5878-3f42-af4f-a93559fd3879.roa File: f746c31a-5878-3f42-af4f-a93559fd3879.roa (raw, json) Hash identifier: oCKEzh/uTyvq1l9QJF9RlFWmPU4LdlIs7ESTwLto9eI= Subject key identifier: 05:E4:D8:1D:A4:A8:9C:92:28:9D:BA:E1:ED:56:6C:66:F2:50:C4:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1134A1C04FBCAE97E05CA500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f746c31a-5878-3f42-af4f-a93559fd3879.roa Signing time: Fri 04 Sep 2026 21:30:14 +0000 ROA not before: Fri 04 Sep 2026 21:30:14 +0000 ROA not after: Thu 03 Dec 2026 22:30:14 +0000 asID: 7029 IP address blocks: 173.213.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:34:a1:c0:4f:bc:ae:97:e0:5c:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 21:30:14 2026 GMT Not After : Dec 3 22:30:14 2026 GMT Subject: CN=4fdc7121-6a39-4e63-82b3-983957f58212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:0f:24:81:45:a2:f8:c4:0d:bd:7c:53:98: ab:69:a7:fe:90:f9:95:4e:e0:de:24:99:38:67:d2: 21:3b:e5:2d:a1:39:71:06:19:f5:9c:74:91:1d:49: b6:47:56:ac:32:10:e7:bf:cc:29:c0:65:49:fc:f5: be:8a:a0:f0:95:d7:d3:d8:05:8e:07:95:3d:1e:a9: c0:4d:e8:7e:e2:62:cd:2e:91:8b:d6:03:58:25:48: 0f:cf:5d:2f:d3:fc:03:d3:cf:eb:02:99:af:8e:2c: f8:c6:d1:8a:70:19:eb:b3:4e:c7:8f:6b:6d:0e:85: 5f:51:14:55:37:8b:6e:73:f4:2f:94:0b:f3:56:8c: a0:83:99:c8:d5:d8:45:53:ca:99:f0:ad:2c:e2:dc: 8e:1e:aa:42:7e:fd:ae:22:9d:fb:71:1a:b0:a2:19: 1c:1f:de:44:5d:04:64:dd:8f:cd:c6:59:d3:c1:0c: bd:b5:32:c6:a3:19:1e:51:1b:3b:1e:5c:0c:73:c7: d5:c1:7d:0e:ae:bf:a3:c7:d1:90:b6:08:8d:e2:45: 63:6b:ed:6f:80:9c:33:c7:24:94:3b:9c:e5:89:6a: 3c:c3:59:b2:bb:a6:74:0a:65:1b:56:de:dc:4f:a8: c6:67:a4:01:00:45:5a:72:38:de:e1:d5:dc:23:24: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E4:D8:1D:A4:A8:9C:92:28:9D:BA:E1:ED:56:6C:66:F2:50:C4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f746c31a-5878-3f42-af4f-a93559fd3879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:27:d3:6b:66:44:1e:8d:87:2b:44:ed:32:e4:1c:14:04:71: 93:ae:50:e6:5d:e7:be:17:f3:81:fe:ce:38:2e:98:90:88:31: 00:d6:c4:33:29:d5:3b:7d:7d:fe:a8:c1:ef:9c:55:83:af:e3: e0:98:17:2d:a2:ea:cd:f3:17:4f:ee:44:1d:b4:c5:a1:0b:ed: 8f:c7:11:85:cb:3b:f3:1a:e8:22:a5:32:c3:01:46:0b:c6:b8: 49:3a:07:4e:8a:53:64:39:e1:c5:2b:1a:c3:fb:dc:b3:cf:97: da:2f:4f:d7:c1:88:b2:27:2f:ab:a1:62:cc:62:3d:7e:19:3e: 2b:f6:e6:16:05:66:4d:54:71:e0:3b:08:1a:63:97:1e:71:9f: 81:30:53:e5:d6:8a:d5:c4:16:68:d6:ff:7f:91:e2:a3:e8:ce: 7b:a4:ec:91:16:17:26:5e:82:fe:2e:cf:6a:c0:88:ad:28:b7: 40:77:74:29:3a:f0:aa:b8:ce:ee:6e:3f:95:3f:fa:b4:33:e9: e4:fd:cc:4c:2d:7d:d6:8c:85:fe:78:8e:ea:8a:4a:4d:e4:c6: 6b:1a:a3:8b:7b:bc:4f:bd:b8:b7:25:1d:9a:7b:1b:ba:f2:59: ae:1b:f6:50:ba:b5:4a:25:d1:08:46:79:8a:e2:1f:38:78:0d: a9:53:f7:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RNKHAT7yul+BcpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDIxMzAxNFoXDTI2MTIwMzIyMzAxNFowLzEtMCsGA1UEAxMk NGZkYzcxMjEtNmEzOS00ZTYzLTgyYjMtOTgzOTU3ZjU4MjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAPJIFFovjEDb18U5iraaf+kPmVTuDeJJk4 Z9IhO+UtoTlxBhn1nHSRHUm2R1asMhDnv8wpwGVJ/PW+iqDwldfT2AWOB5U9HqnA Teh+4mLNLpGL1gNYJUgPz10v0/wD08/rApmvjiz4xtGKcBnrs07Hj2ttDoVfURRV N4tuc/QvlAvzVoygg5nI1dhFU8qZ8K0s4tyOHqpCfv2uIp37cRqwohkcH95EXQRk 3Y/NxlnTwQy9tTLGoxkeURs7HlwMc8fVwX0Orr+jx9GQtgiN4kVja+1vgJwzxySU O5zliWo8w1myu6Z0CmUbVt7cT6jGZ6QBAEVacjje4dXcIySIbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXk2B2kqJySKJ264e1WbGbyUMRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjc0NmMzMWEtNTg3OC0z ZjQyLWFmNGYtYTkzNTU5ZmQzODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdWCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0n02tmRB6NhytE7TLkHBQEcZOuUOZd574X84H+zjgumJCIMQDWxDMp 1Tt9ff6owe+cVYOv4+CYFy2i6s3zF0/uRB20xaEL7Y/HEYXLO/Ma6CKlMsMBRgvG uEk6B06KU2Q54cUrGsP73LPPl9ovT9fBiLInL6uhYsxiPX4ZPiv25hYFZk1UceA7 CBpjlx5xn4EwU+XWitXEFmjW/3+R4qPoznuk7JEWFyZegv4uz2rAiK0ot0B3dCk6 8Kq4zu5uP5U/+rQz6eT9zEwtfdaMhf54juqKSk3kxmsao4t7vE+9uLclHZp7G7ry Wa4b9lC6tUol0QhGeYriHzh4DalT96M= -----END CERTIFICATE-----Generated at Sun Sep 20 21:13:57 2026 by rpki-client