$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e0e6091-336a-3f4a-b6b3-84af03eaad07.roa File: 1e0e6091-336a-3f4a-b6b3-84af03eaad07.roa (raw, json) Hash identifier: TYAPnz8K2Mk1jZ64ed5HdP3KoyP7PZlcYA/V+UF4WUo= Subject key identifier: 40:9D:F4:25:B4:7D:6F:E0:04:C3:B4:F8:E9:94:62:01:C1:99:DD:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4974BFA0ACA51B3488E7C2A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e0e6091-336a-3f4a-b6b3-84af03eaad07.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 208.101.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:bf:a0:ac:a5:1b:34:88:e7:c2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ca91c7aa-a22c-43bf-bda9-ec2c0104dc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:ba:fe:b3:6a:76:1a:01:a4:e5:ff:d6:38: ca:83:9d:e0:c7:ba:3e:86:30:6e:e4:11:fc:37:bc: c0:15:e5:d1:ab:a7:a8:8a:2d:0e:5e:52:9b:64:a2: cc:2d:f5:09:7d:9f:94:11:b1:c2:66:97:c1:7c:53: ec:60:2f:79:98:d0:3f:d4:30:98:ca:d5:49:f0:73: dd:03:b7:3d:5a:43:de:79:9f:1e:1f:a5:7e:c3:ea: 3d:2e:5c:e8:67:08:3b:61:5e:72:12:a6:76:45:f4: c2:46:bf:16:9d:6b:81:11:02:1d:1e:30:0b:19:b2: a3:ef:82:30:e7:f1:20:ac:8c:a2:dc:98:a9:e4:24: 06:bf:d5:a6:ea:d4:ed:9c:e9:f7:a9:ad:6b:a3:c3: ad:8e:9c:60:86:ed:8c:df:a9:2f:67:f3:cf:37:dd: e7:13:6a:3e:d6:2a:89:f0:d3:f6:52:dd:9f:6b:8f: b2:54:ca:f9:53:b4:da:a9:0a:47:33:1f:90:a8:53: b6:ce:df:6b:fe:e9:6f:89:49:12:ca:9b:e6:12:00: ef:6b:0a:61:14:37:bc:10:1a:a7:0d:cf:4c:7a:57: e8:9b:67:e6:d7:55:94:5b:09:82:f5:23:10:af:af: e6:2a:94:37:1a:41:d0:60:cb:76:f4:6c:74:f6:9e: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9D:F4:25:B4:7D:6F:E0:04:C3:B4:F8:E9:94:62:01:C1:99:DD:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e0e6091-336a-3f4a-b6b3-84af03eaad07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:16:7a:73:17:62:51:f9:b8:89:57:1c:ab:c2:41:51:ce:15: 25:6e:83:72:9a:d9:70:29:99:79:4e:e5:1c:a3:e1:af:0a:a1: 53:de:43:9f:ed:35:2f:ca:4b:e1:52:5c:09:5b:a3:c9:a8:3e: 3f:e3:87:a4:15:f8:92:aa:93:bd:49:81:fe:e0:36:78:ac:c9: 5d:9b:85:15:ae:1c:cc:61:cf:65:b2:71:0a:6d:d0:84:ae:e9: 08:0f:bf:51:45:68:49:40:96:27:ef:8a:ee:f0:d5:fa:0d:8b: 0b:a1:ae:03:7d:f0:c3:a8:9d:99:b9:d4:74:bb:31:34:43:9a: 7b:b3:70:34:9a:0b:58:a4:96:d5:2f:77:97:39:19:26:81:1b: a2:cd:40:73:c6:f0:60:56:e9:19:b5:8f:48:45:54:64:34:8e: 9d:76:ee:11:4a:e6:04:3b:a7:a7:c2:cc:3d:83:0c:a8:7b:76: 65:36:31:7f:7c:53:b2:25:5d:d2:9a:95:ca:c3:df:db:72:ad: 6a:43:a0:11:44:15:74:21:3f:2c:c9:38:8f:d4:66:73:53:33: 9a:f6:55:ee:38:2b:8c:0e:48:12:c6:40:5c:3f:56:42:e6:0c: 5b:5f:28:1b:5f:aa:cb:fb:6a:05:ee:cd:4b:ba:7b:6e:be:65: 7e:a0:27:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdL+grKUbNIjnwqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2E5MWM3YWEtYTIyYy00M2JmLWJkYTktZWMyYzAxMDRkYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/W6/rNqdhoBpOX/1jjKg53gx7o+hjBu5BH8 N7zAFeXRq6eoii0OXlKbZKLMLfUJfZ+UEbHCZpfBfFPsYC95mNA/1DCYytVJ8HPd A7c9WkPeeZ8eH6V+w+o9LlzoZwg7YV5yEqZ2RfTCRr8WnWuBEQIdHjALGbKj74Iw 5/EgrIyi3Jip5CQGv9Wm6tTtnOn3qa1ro8Otjpxghu2M36kvZ/PPN93nE2o+1iqJ 8NP2Ut2fa4+yVMr5U7TaqQpHMx+QqFO2zt9r/ulviUkSypvmEgDvawphFDe8EBqn Dc9Melfom2fm11WUWwmC9SMQr6/mKpQ3GkHQYMt29Gx09p4EwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECd9CW0fW/gBMO0+OmUYgHBmd3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUwZTYwOTEtMzM2YS0z ZjRhLWI2YjMtODRhZjAzZWFhZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAWenMXYlH5uIlXHKvCQVHOFSVug3Ka2XApmXlO5Ryj4a8KoVPeQ5/t NS/KS+FSXAlbo8moPj/jh6QV+JKqk71Jgf7gNnisyV2bhRWuHMxhz2WycQpt0ISu 6QgPv1FFaElAlifviu7w1foNiwuhrgN98MOonZm51HS7MTRDmnuzcDSaC1ikltUv d5c5GSaBG6LNQHPG8GBW6Rm1j0hFVGQ0jp127hFK5gQ7p6fCzD2DDKh7dmU2MX98 U7IlXdKalcrD39tyrWpDoBFEFXQhPyzJOI/UZnNTM5r2Ve44K4wOSBLGQFw/VkLm DFtfKBtfqsv7agXuzUu6e26+ZX6gJ+s= -----END CERTIFICATE-----Generated at Tue Oct 13 06:22:00 2026 by rpki-client