$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa File: 2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa (raw, json) Hash identifier: UdKLUlAErZVX0iWJioy4EnvoG07iuUn+UTQ800mdCeQ= Subject key identifier: 02:58:9F:98:D1:D6:F7:D7:54:08:13:EC:FA:02:BC:0E:01:89:BA:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D935C4573054D62182180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.221.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:93:5c:45:73:05:4d:62:18:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=25e57b64-3efc-489c-85d4-2439c0b8731a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:23:41:4a:f3:c3:5a:02:53:a2:5f:ce:4c:da: e4:8a:dc:fb:76:ee:de:2f:4f:6d:3c:6c:4c:fc:3f: 3b:83:65:c5:98:a9:4c:54:39:88:e1:b0:43:84:24: 8d:76:6c:00:be:a8:7f:bc:22:8d:18:74:12:cd:57: 2d:9d:03:e4:e1:ba:b3:25:c3:67:1a:dd:56:71:bb: 39:06:4e:99:f8:ca:78:b8:1d:69:74:23:70:9e:f1: 4f:25:fc:20:ba:32:30:46:c1:25:c4:61:d9:c4:19: c3:d7:a6:05:35:e1:3a:ec:81:f7:9d:cd:60:1e:fc: 28:bb:e7:16:e5:02:3e:8e:59:18:e7:fc:83:1a:c4: 38:bb:88:22:6d:e8:e7:74:b6:e0:de:fd:13:03:7d: d4:0c:eb:9e:0c:70:18:e4:83:bd:7d:1f:bf:15:f8: 66:0b:bb:7e:ac:e4:e6:e1:dc:9a:6a:44:f8:12:91: 1a:05:5e:2c:00:96:f0:b8:b4:04:e2:4e:5b:c8:18: b5:21:f0:3c:0f:5c:fd:11:fd:59:18:27:46:53:48: 69:de:ba:9c:94:73:01:f6:a1:2d:ed:6f:6b:fa:7b: 8e:31:02:f9:0d:23:21:dc:c6:7a:a9:27:53:42:e8: b9:dd:de:82:5f:42:64:94:ad:5e:1b:88:7a:41:fc: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:58:9F:98:D1:D6:F7:D7:54:08:13:EC:FA:02:BC:0E:01:89:BA:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.221.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d1:a3:78:68:54:d0:f8:76:7a:a1:a6:b2:72:3b:ce:13:cd: e4:9f:35:f6:de:05:80:6d:ad:10:cd:c9:61:ae:42:a9:91:ad: 8f:2e:c0:f3:b3:ee:9a:8c:5a:d1:e4:0d:8b:0f:b8:11:c1:83: b6:02:8f:75:f2:41:d4:1d:35:f4:95:81:ba:ed:f8:50:6a:7a: b9:c5:2f:7a:74:fc:db:2d:a1:f3:70:3a:05:d2:5a:e9:1e:4a: a6:1c:e6:d7:e2:ef:97:f1:b3:26:16:f3:d2:08:9d:f8:f6:fb: 26:3b:bb:b5:7f:56:5c:e4:f3:76:f0:60:f2:f4:40:b0:18:71: 08:b6:02:87:26:81:38:30:61:66:06:ba:17:32:f0:0b:44:8c: a7:f0:22:e3:00:cb:83:4d:f9:a2:46:37:6c:e1:b0:84:96:34: 58:a4:ac:a2:0a:7e:e6:48:32:d6:36:89:3e:d0:ea:f3:4d:16: 52:a8:3d:f8:32:60:8d:2e:21:05:c1:de:b0:6d:dc:dd:4a:5e: 7a:85:b0:b3:7a:bd:b9:c8:b2:ae:b8:0f:84:06:aa:06:f3:e0: 86:6f:d3:cc:f7:cb:d8:7d:51:0f:0d:2d:29:9b:bd:c6:d5:77: e7:8c:67:fa:36:d9:e6:59:21:5d:17:6b:cd:61:32:2b:c5:63: e0:96:e4:be -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnZNcRXMFTWIYIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MjVlNTdiNjQtM2VmYy00ODljLTg1ZDQtMjQzOWMwYjg3MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCNBSvPDWgJTol/OTNrkitz7du7eL09tPGxM /D87g2XFmKlMVDmI4bBDhCSNdmwAvqh/vCKNGHQSzVctnQPk4bqzJcNnGt1Wcbs5 Bk6Z+Mp4uB1pdCNwnvFPJfwgujIwRsElxGHZxBnD16YFNeE67IH3nc1gHvwou+cW 5QI+jlkY5/yDGsQ4u4gibejndLbg3v0TA33UDOueDHAY5IO9fR+/FfhmC7t+rOTm 4dyaakT4EpEaBV4sAJbwuLQE4k5byBi1IfA8D1z9Ef1ZGCdGU0hp3rqclHMB9qEt 7W9r+nuOMQL5DSMh3MZ6qSdTQui53d6CX0JklK1eG4h6QfwO8QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAJYn5jR1vfXVAgT7PoCvA4BibqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU4MmIwN2ItN2ZhMC0z Y2FkLTg1NzItYzBlNjQ0NzQwM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArd0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAONGjeGhU0Ph2eqGmsnI7zhPN5J819t4FgG2tEM3JYa5CqZGtjy7A87Pu moxa0eQNiw+4EcGDtgKPdfJB1B019JWBuu34UGp6ucUvenT82y2h83A6BdJa6R5K phzm1+Lvl/GzJhbz0gid+Pb7Jju7tX9WXOTzdvBg8vRAsBhxCLYChyaBODBhZga6 FzLwC0SMp/Ai4wDLg035okY3bOGwhJY0WKSsogp+5kgy1jaJPtDq800WUqg9+DJg jS4hBcHesG3c3UpeeoWws3q9uciyrrgPhAaqBvPghm/TzPfL2H1RDw0tKZu9xtV3 54xn+jbZ5lkhXRdrzWEyK8Vj4Jbkvg== -----END CERTIFICATE-----Generated at Tue Oct 13 13:09:20 2026 by rpki-client