$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac4e2f2-1660-32a9-9900-e9690e843a51.roa File: 1ac4e2f2-1660-32a9-9900-e9690e843a51.roa (raw, json) Hash identifier: 1YUM48q/36Yae2Cei2oxT+aVCzOOuZWjIrDId7x1VWk= Subject key identifier: 9A:52:91:D4:AC:8D:09:29:14:42:38:B8:89:5D:64:A5:A2:21:F5:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62E517FEFFD8DCD08EC800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac4e2f2-1660-32a9-9900-e9690e843a51.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 151.213.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e5:17:fe:ff:d8:dc:d0:8e:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=998a127b-86fe-49ee-8098-c726fd518a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b2:75:b4:89:9f:52:1a:16:a8:c0:48:7b:5d: 89:f4:c3:ee:f5:e9:3d:f2:d8:4c:c0:35:e2:5d:d0: ba:fd:aa:19:20:82:e0:14:76:31:57:2b:f0:0e:59: ab:ce:5f:4a:6a:af:aa:b4:24:03:15:64:27:05:71: c8:a3:0b:7d:9d:df:01:51:8b:3f:1d:54:4c:5c:ba: 0d:2a:db:f3:1e:3d:da:c2:03:02:45:c4:61:74:81: 6c:1f:3a:39:24:18:a2:68:1b:41:3d:1d:3b:5e:91: bb:1a:9d:51:82:ce:97:0e:d3:1b:57:74:34:23:3d: 22:6b:a7:ca:04:1b:31:9b:51:f7:13:e5:95:42:b7: d0:e3:52:2b:cf:0b:6d:b4:c0:48:be:f3:3d:94:fd: 68:9c:b8:72:c3:52:86:e9:be:cc:b4:08:25:d3:e1: 20:d6:de:79:72:cf:de:4c:5b:20:f2:7f:f6:4e:2f: b8:51:3f:85:93:9f:a4:c7:14:67:55:67:98:42:4d: 55:11:f8:6e:bc:13:29:ce:56:23:06:08:30:38:51: b8:a2:7f:fd:b9:77:96:9e:fd:c7:f4:19:f0:bc:f3: 0e:2e:9e:d1:3f:67:ab:61:44:45:2f:bd:7b:7d:7a: 41:96:d2:2a:bf:79:b0:ed:68:6b:90:8d:66:9f:aa: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:52:91:D4:AC:8D:09:29:14:42:38:B8:89:5D:64:A5:A2:21:F5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac4e2f2-1660-32a9-9900-e9690e843a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:71:5a:08:37:56:db:42:97:ed:d0:86:e1:51:ca:2d:ec:74: 22:19:2e:c3:57:c9:ee:16:5a:6a:61:06:0a:3f:3b:df:66:34: 44:f4:44:4d:55:6a:ba:ab:b0:a7:4f:a1:39:3c:da:98:38:33: bd:fa:2f:0e:9d:6b:0a:bb:6b:db:d8:9f:f1:b3:9c:15:b3:fb: 7f:74:1f:32:f5:30:e5:4f:cf:4c:e6:47:70:a4:b4:62:97:a9: d3:d6:5e:3a:11:61:01:34:c6:1e:e6:db:9a:cf:f4:70:9c:8b: 3d:c6:c1:d7:c0:be:b2:6f:ea:4f:33:02:7b:a3:9c:76:c1:cf: a1:f3:17:bc:79:e4:4f:ad:b1:76:be:69:85:cf:66:78:c1:c2: 4b:35:79:2b:da:10:e7:7b:8c:8b:1e:02:90:64:79:5f:14:96: 21:fa:62:16:79:af:a9:d5:4a:05:64:9d:d7:ad:36:90:33:94: 5c:55:68:7b:f6:0f:52:60:dd:fc:74:d0:8e:38:78:09:53:af: a8:a2:c7:bf:62:a2:98:b2:d4:0c:57:90:45:d7:c9:ae:f6:5c: c1:88:d4:4b:38:c2:05:c5:36:ab:4b:f4:d7:62:19:93:ba:22: 5d:b0:f6:be:cc:14:d8:5e:11:cb:5e:44:2e:e1:4c:ed:bb:ba: 16:77:e1:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuUX/v/Y3NCOyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OTk4YTEyN2ItODZmZS00OWVlLTgwOTgtYzcyNmZkNTE4YTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bJ1tImfUhoWqMBIe12J9MPu9ek98thMwDXi XdC6/aoZIILgFHYxVyvwDlmrzl9Kaq+qtCQDFWQnBXHIowt9nd8BUYs/HVRMXLoN KtvzHj3awgMCRcRhdIFsHzo5JBiiaBtBPR07XpG7Gp1Rgs6XDtMbV3Q0Iz0ia6fK BBsxm1H3E+WVQrfQ41IrzwtttMBIvvM9lP1onLhyw1KG6b7MtAgl0+Eg1t55cs/e TFsg8n/2Ti+4UT+Fk5+kxxRnVWeYQk1VEfhuvBMpzlYjBggwOFG4on/9uXeWnv3H 9BnwvPMOLp7RP2erYURFL717fXpBltIqv3mw7WhrkI1mn6p4XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpSkdSsjQkpFEI4uIldZKWiIfVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjNGUyZjItMTY2MC0z MmE5LTk5MDAtZTk2OTBlODQzYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9WLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdxWgg3VttCl+3QhuFRyi3sdCIZLsNXye4WWmphBgo/O99mNET0RE1V arqrsKdPoTk82pg4M736Lw6dawq7a9vYn/GznBWz+390HzL1MOVPz0zmR3CktGKX qdPWXjoRYQE0xh7m25rP9HCciz3GwdfAvrJv6k8zAnujnHbBz6HzF7x55E+tsXa+ aYXPZnjBwks1eSvaEOd7jIseApBkeV8UliH6YhZ5r6nVSgVkndetNpAzlFxVaHv2 D1Jg3fx00I44eAlTr6iix79iopiy1AxXkEXXya72XMGI1Es4wgXFNqtL9NdiGZO6 Il2w9r7MFNheEcteRC7hTO27uhZ34R4= -----END CERTIFICATE-----Generated at Tue Oct 13 08:14:23 2026 by rpki-client