$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa File: 23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa (raw, json) Hash identifier: IF5MbOfRLdf+aav0AuqwTvEPQKsPhKK/8tTl2QOChFU= Subject key identifier: B3:4A:75:FF:C8:E5:6E:E6:15:37:86:89:29:26:D4:07:71:51:F2:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B427D92ECB5DF2221D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.185.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b4:27:d9:2e:cb:5d:f2:22:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=b719e5ce-c4d4-440e-8fac-1560648ba9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1a:bf:ed:47:a8:51:09:49:66:82:7a:88:ac: 22:e1:a4:73:36:64:5a:4d:99:e9:96:e8:fe:f9:b2: 99:46:78:bb:79:f0:98:dd:5c:98:4b:3f:4b:15:92: d9:c3:76:2a:36:f7:b6:8c:4e:9f:08:e7:31:7c:81: 0b:69:0f:02:6f:20:af:5c:16:fc:53:32:8d:10:df: a2:d9:bc:3c:c6:43:84:7d:93:6a:63:ab:07:d2:85: 0c:05:d4:39:09:a6:50:6e:dd:39:94:66:9e:94:7b: d9:b7:17:89:1b:ca:a3:af:5d:b2:74:ab:b0:60:c4: 60:5b:3d:5b:46:c6:7e:a7:af:11:99:3f:2a:50:02: 18:63:86:a5:e9:a6:0a:4f:d7:d6:57:df:53:55:f3: 12:82:a0:f3:73:70:e5:ca:b7:e3:ee:c5:39:8e:26: d7:80:97:5b:c6:8d:ba:70:1e:1e:6b:c1:aa:13:dc: 99:8a:37:7e:19:d9:f1:d4:06:ed:c3:0e:1d:04:38: 0c:85:83:f7:52:d8:16:3d:1e:f1:16:fc:80:b0:49: 2e:89:76:95:34:ef:48:71:3f:5d:80:a7:e3:ff:3e: 66:a4:b7:f2:3f:ea:04:b9:11:4e:7d:e4:0a:fa:30: e9:18:22:52:65:7e:0d:15:6d:05:9a:7b:36:36:93: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4A:75:FF:C8:E5:6E:E6:15:37:86:89:29:26:D4:07:71:51:F2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a1:a8:1c:72:ff:fc:47:ce:54:64:55:3d:9d:14:92:d2:c8: 4e:b1:8a:53:ad:bc:e6:8e:ca:be:fc:96:bb:ee:25:ac:8b:53: ae:04:17:84:7a:2c:d9:e5:b9:f9:20:97:07:c8:2d:58:94:88: 9a:7f:78:0f:cd:e2:03:f7:fe:e5:f5:27:63:33:39:fb:86:a5: ed:52:27:89:65:29:52:92:d1:3a:e7:95:e7:59:83:97:91:60: b1:08:41:45:2c:3f:dd:62:be:a0:dd:28:35:48:a2:d8:af:9a: 44:3d:3e:dd:49:1a:9d:99:3b:ad:4e:93:ce:d2:25:6b:66:44: d6:db:ee:a8:36:f8:2d:d3:94:b4:10:01:ca:28:6f:41:56:8f: 8d:2a:f0:f3:2b:17:78:a9:c0:04:53:73:41:89:8e:18:da:b6: d9:bd:d2:94:05:71:6f:a4:6a:a6:65:b5:a9:81:1a:80:ce:4e: 9b:c6:bb:7c:3d:df:82:83:a8:92:46:3e:d7:59:41:a6:a8:ab: 9d:26:93:e5:7f:11:4c:db:f7:78:b3:c6:c5:51:cb:6d:74:b2: c0:f5:de:c6:35:ea:02:99:cf:34:45:24:d9:da:dc:53:33:a2: 73:89:75:d4:ed:20:ec:4d:f2:4d:51:4a:84:cd:cb:82:02:c1: 87:5d:bf:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rQn2S7LXfIiHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YjcxOWU1Y2UtYzRkNC00NDBlLThmYWMtMTU2MDY0OGJhOWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRq/7UeoUQlJZoJ6iKwi4aRzNmRaTZnpluj+ +bKZRni7efCY3VyYSz9LFZLZw3YqNve2jE6fCOcxfIELaQ8CbyCvXBb8UzKNEN+i 2bw8xkOEfZNqY6sH0oUMBdQ5CaZQbt05lGaelHvZtxeJG8qjr12ydKuwYMRgWz1b RsZ+p68RmT8qUAIYY4al6aYKT9fWV99TVfMSgqDzc3Dlyrfj7sU5jibXgJdbxo26 cB4ea8GqE9yZijd+Gdnx1Abtww4dBDgMhYP3UtgWPR7xFvyAsEkuiXaVNO9IcT9d gKfj/z5mpLfyP+oEuRFOfeQK+jDpGCJSZX4NFW0Fmns2NpNEpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNKdf/I5W7mFTeGiSkm1AdxUfJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNhN2Y2N2UtMjBlYy0z MTZiLWE3ZjItYjE0YzhhNmIwMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOhqBxy//xHzlRkVT2dFJLSyE6xilOtvOaOyr78lrvuJayLU64EF4R6 LNnlufkglwfILViUiJp/eA/N4gP3/uX1J2MzOfuGpe1SJ4llKVKS0TrnledZg5eR YLEIQUUsP91ivqDdKDVIotivmkQ9Pt1JGp2ZO61Ok87SJWtmRNbb7qg2+C3TlLQQ Acoob0FWj40q8PMrF3ipwARTc0GJjhjattm90pQFcW+kaqZltamBGoDOTpvGu3w9 34KDqJJGPtdZQaaoq50mk+V/EUzb93izxsVRy210ssD13sY16gKZzzRFJNna3FMz onOJddTtIOxN8k1RSoTNy4ICwYddvxw= -----END CERTIFICATE-----Generated at Wed Oct 14 20:30:16 2026 by rpki-client