$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa File: 08f9e3af-a77c-300b-90ce-7f032359dcfa.roa (raw, json) Hash identifier: zGrp/b4f0jajkqbIP3lSkqoszEyaMJVxDbMR44X6K74= Subject key identifier: 78:6D:1C:93:94:8B:BD:D7:B0:1B:02:F1:AB:ED:4F:A1:AE:30:76:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B92FD6A273E8FD660EE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 151.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b9:2f:d6:a2:73:e8:fd:66:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=a8113565-4fcf-4976-88bf-1ecc8735e2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:ec:7c:b8:89:56:01:60:b8:5e:20:52:45: f0:c9:54:cc:36:92:7c:92:97:6d:f4:07:9c:b3:57: 2d:69:3a:5a:88:87:24:0b:c2:11:d2:c5:37:72:ba: 6c:07:0b:22:c0:0c:d7:48:f6:34:e6:06:bc:28:c1: ef:be:78:d7:50:30:d6:9f:67:17:da:3f:95:45:71: 4c:66:74:ca:98:fd:32:97:ce:04:27:26:e6:f8:e2: aa:f3:57:e6:46:a3:7f:1f:2b:a2:41:5b:e5:13:30: 3c:59:34:d3:63:74:6a:78:2d:b4:5b:7e:10:4f:60: 2c:ad:06:88:10:b7:24:86:18:16:89:3e:18:0f:54: 03:dc:c6:30:d8:0d:e2:54:95:80:30:6e:9e:df:fd: a7:48:67:04:fa:44:57:fc:48:b1:85:cb:0b:a5:b0: 55:f1:ba:e1:01:1a:0e:9d:6f:0e:61:33:f7:22:7d: 4c:ed:f8:e6:42:33:db:5f:7d:c8:45:75:26:2d:7c: d4:11:37:f3:c4:e6:6c:ef:99:1b:a9:cd:74:95:51: da:4a:a1:1e:c2:d7:5b:fe:c5:9e:28:63:fd:be:ec: ee:b1:54:62:03:33:17:bf:2c:a4:b4:89:cf:5c:48: 71:30:ee:24:02:f8:f7:97:3a:e5:3b:d8:9a:e7:03: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6D:1C:93:94:8B:BD:D7:B0:1B:02:F1:AB:ED:4F:A1:AE:30:76:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2e:31:e9:2a:62:e6:9c:ec:2b:42:3a:be:be:74:32:ff:80: 05:f3:1f:b7:77:79:cb:c5:fb:94:f3:26:79:f8:eb:4e:d3:11: 74:17:13:ef:6b:76:e1:4c:6e:4c:82:82:40:b0:73:93:e0:88: 30:d8:55:62:28:4d:76:15:7e:b3:b3:0f:8e:56:de:15:78:a6: 40:39:fd:d2:c6:88:db:d0:e9:c1:b4:b3:35:af:f1:62:bc:88: 66:8e:0a:53:62:4e:f8:d0:d7:f6:e0:11:3f:cc:55:eb:83:05: 2b:8a:f7:e9:6d:d2:b2:6a:75:d2:13:bc:20:d1:30:67:87:65: 93:d7:d4:13:41:ac:1e:0e:c1:62:fa:bd:a9:c8:15:4d:3f:ae: 79:3c:9d:02:ec:de:e6:2d:9e:61:91:62:68:80:18:4d:a8:8e: bc:cc:a3:f2:a3:91:7e:7c:67:9c:83:94:92:d4:f5:98:c7:69: b6:c1:d0:59:a6:69:ce:70:d0:4e:24:07:37:5d:61:ec:76:19: 11:36:54:10:7d:a1:78:84:c4:35:20:70:ea:af:87:cd:25:b3: 89:5e:e6:d4:b0:4e:dc:09:92:1b:ce:11:c2:02:6d:be:71:07: 21:67:74:e0:31:6f:ce:7c:25:32:7b:db:66:5c:5e:6a:04:22: f4:b9:8c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rkv1qJz6P1mDuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YTgxMTM1NjUtNGZjZi00OTc2LTg4YmYtMWVjYzg3MzVlMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdXsfLiJVgFguF4gUkXwyVTMNpJ8kpdt9Aec s1ctaTpaiIckC8IR0sU3crpsBwsiwAzXSPY05ga8KMHvvnjXUDDWn2cX2j+VRXFM ZnTKmP0yl84EJybm+OKq81fmRqN/HyuiQVvlEzA8WTTTY3RqeC20W34QT2AsrQaI ELckhhgWiT4YD1QD3MYw2A3iVJWAMG6e3/2nSGcE+kRX/EixhcsLpbBV8brhARoO nW8OYTP3In1M7fjmQjPbX33IRXUmLXzUETfzxOZs75kbqc10lVHaSqEewtdb/sWe KGP9vuzusVRiAzMXvyyktInPXEhxMO4kAvj3lzrlO9ia5wMhWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhtHJOUi73XsBsC8avtT6GuMHaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhmOWUzYWYtYTc3Yy0z MDBiLTkwY2UtN2YwMzIzNTlkY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwuMekqYuac7CtCOr6+dDL/gAXzH7d3ecvF+5TzJnn4607TEXQXE+9r duFMbkyCgkCwc5PgiDDYVWIoTXYVfrOzD45W3hV4pkA5/dLGiNvQ6cG0szWv8WK8 iGaOClNiTvjQ1/bgET/MVeuDBSuK9+lt0rJqddITvCDRMGeHZZPX1BNBrB4OwWL6 vanIFU0/rnk8nQLs3uYtnmGRYmiAGE2ojrzMo/KjkX58Z5yDlJLU9ZjHabbB0Fmm ac5w0E4kBzddYex2GRE2VBB9oXiExDUgcOqvh80ls4le5tSwTtwJkhvOEcICbb5x ByFndOAxb858JTJ722ZcXmoEIvS5jK8= -----END CERTIFICATE-----Generated at Tue Oct 13 06:21:00 2026 by rpki-client