$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa File: 2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa (raw, json) Hash identifier: J6CwuOLaV/6jre8S7UhVJNKuCEdyC40KetXNAm+X1So= Subject key identifier: FE:7F:12:E0:68:3A:14:A1:97:FB:6B:D0:3E:55:32:99:90:A5:02:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F66C2C7E1E2645D4699FA9980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 174.131.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c7:e1:e2:64:5d:46:99:fa:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=5f5dba2a-4877-4515-af33-a60a23ac5753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f0:96:38:28:69:33:18:f3:50:09:f7:3c:44: 2e:30:2c:86:06:b7:89:c2:a8:23:19:82:67:2b:17: 9d:5b:7e:1f:b7:70:85:11:65:62:2f:d3:9c:81:d5: e2:06:fb:5b:4e:c4:64:d6:63:e7:6c:eb:a2:b5:d6: a3:5a:90:91:51:7e:96:62:24:90:e5:d9:42:39:46: 8b:00:cf:cf:18:3a:62:b1:be:1c:d7:ad:93:43:cc: a9:42:ab:12:33:de:36:9e:c4:fe:e1:ea:c5:a4:62: e3:f5:d8:2c:dc:d4:ba:11:e6:a6:ea:03:c9:1d:af: 8e:95:2d:17:8f:90:2a:a2:8f:c7:6f:70:51:fd:1c: 6d:06:bf:c0:23:a9:62:53:2d:58:05:38:11:78:26: 19:98:ca:90:4e:9b:1e:97:dc:96:cf:c7:29:19:b7: a1:ff:9e:e7:3c:ba:13:c3:7d:2c:f9:33:2d:14:e7: 7f:b7:ba:37:c0:31:44:c9:65:65:b0:8a:b6:90:d2: d9:6b:34:7f:a2:5e:d0:d8:6b:6a:bd:64:16:c9:60: c3:dd:33:d6:1d:c0:e3:60:29:bf:b4:86:9b:7b:95: aa:2b:42:40:62:d2:0d:81:eb:51:de:53:fb:7d:5c: 16:a9:1f:f1:05:9b:69:da:dc:86:2d:1f:bf:6b:bf: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7F:12:E0:68:3A:14:A1:97:FB:6B:D0:3E:55:32:99:90:A5:02:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f7:18:b6:2b:6c:ab:40:88:95:c1:44:87:76:42:3c:7c:49: 0e:df:79:ad:0c:8d:55:a9:f7:31:7d:53:67:0d:91:ce:10:ce: 68:92:b0:76:0a:4b:1b:0e:14:54:08:bc:52:3f:c0:7c:5d:7f: b4:18:a5:c4:74:0e:86:a1:ef:86:c1:c0:d4:ce:e2:54:e7:63: 4a:79:71:6f:1d:c5:2d:f3:53:a4:34:d9:bc:35:b2:7a:22:84: 0c:75:89:79:bf:f4:0b:12:c9:b6:4d:17:7b:03:50:bf:a7:42: d6:c6:26:86:ff:aa:78:14:19:78:f6:fb:1c:4b:73:d2:04:91: b8:fa:41:7f:0b:2d:2a:8f:4d:8b:8a:c2:8e:6e:b3:53:f4:5e: 18:e1:40:18:ba:0c:8b:ab:45:1d:40:6c:41:a1:c9:02:c1:8f: b9:d0:09:25:9d:0b:99:57:aa:b3:8e:01:24:0f:77:7d:06:90: 60:cd:57:e1:6f:bf:31:97:b7:bf:d4:b4:7c:10:2c:c0:d8:00: dd:a9:1d:ec:60:fe:e4:d6:d4:c8:af:26:7b:26:34:4b:75:51: f8:84:d4:21:02:50:3e:bf:03:19:6c:30:ab:50:75:fa:a3:6a: 23:b4:78:3d:b7:dc:78:4e:42:31:b6:12:3b:a3:1f:31:68:88: 76:50:02:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsfh4mRdRpn6mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk NWY1ZGJhMmEtNDg3Ny00NTE1LWFmMzMtYTYwYTIzYWM1NzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvCWOChpMxjzUAn3PEQuMCyGBreJwqgjGYJn KxedW34ft3CFEWViL9OcgdXiBvtbTsRk1mPnbOuitdajWpCRUX6WYiSQ5dlCOUaL AM/PGDpisb4c162TQ8ypQqsSM942nsT+4erFpGLj9dgs3NS6Eeam6gPJHa+OlS0X j5Aqoo/Hb3BR/RxtBr/AI6liUy1YBTgReCYZmMqQTpsel9yWz8cpGbeh/57nPLoT w30s+TMtFOd/t7o3wDFEyWVlsIq2kNLZazR/ol7Q2GtqvWQWyWDD3TPWHcDjYCm/ tIabe5WqK0JAYtINgetR3lP7fVwWqR/xBZtp2tyGLR+/a7+MjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5/EuBoOhShl/tr0D5VMpmQpQLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmIxYTM3ZGEtYTZjNS0z NThmLWEwM2ItNGE5ZGE4MTRiZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG33GLYrbKtAiJXBRId2Qjx8SQ7fea0MjVWp9zF9U2cNkc4QzmiSsHYK SxsOFFQIvFI/wHxdf7QYpcR0Doah74bBwNTO4lTnY0p5cW8dxS3zU6Q02bw1snoi hAx1iXm/9AsSybZNF3sDUL+nQtbGJob/qngUGXj2+xxLc9IEkbj6QX8LLSqPTYuK wo5us1P0XhjhQBi6DIurRR1AbEGhyQLBj7nQCSWdC5lXqrOOASQPd30GkGDNV+Fv vzGXt7/UtHwQLMDYAN2pHexg/uTW1MivJnsmNEt1UfiE1CECUD6/AxlsMKtQdfqj aiO0eD233HhOQjG2EjujHzFoiHZQAik= -----END CERTIFICATE-----Generated at Tue Oct 13 16:02:22 2026 by rpki-client