$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa File: 3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa (raw, json) Hash identifier: WKJ9jr66ndKvLR6bxhbcCe0g7GgnP1YOigDcSUqdb5Y= Subject key identifier: 1A:00:36:41:74:70:98:B1:01:72:C3:1B:DA:56:C1:BC:4B:00:C0:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D76785BCFE65F60E66B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 139.55.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:76:78:5b:cf:e6:5f:60:e6:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d62b7ee2-f09c-4375-8ec1-a3d03dd45799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ce:88:b9:b0:ee:bf:31:c4:a4:ad:56:4c:0e: 54:a2:bf:94:80:31:1d:a0:a7:ca:b0:21:a5:04:cf: d2:e9:cf:c8:96:e1:07:57:94:17:2e:cd:ba:f9:82: 31:ea:0c:a0:f8:7d:7b:cf:72:31:d1:1b:a7:9a:91: 6c:91:e7:6a:b1:92:fc:21:ed:14:7a:75:8e:e7:34: 68:57:54:68:9c:db:21:f9:ce:26:2f:72:08:25:49: 2b:a7:55:de:5d:fa:99:b3:e0:0a:11:15:d3:46:e0: 3d:66:e4:4b:c9:f7:95:47:29:9a:5c:fa:7b:8c:cb: 2d:26:5e:44:1b:b2:3a:36:42:3d:59:c0:11:3e:02: 23:32:f4:25:06:18:46:ff:fe:13:b5:6d:29:65:70: e4:84:95:e7:c6:8f:83:4e:85:2e:4f:a6:cd:c4:c2: 46:a4:d2:fe:96:0c:4d:67:6a:16:6f:0c:e5:7e:2a: 54:9c:3c:32:b0:63:ff:7d:59:d0:0d:ef:0b:b6:cc: 3a:10:8f:de:47:7f:5a:4c:12:41:1a:ce:08:65:71: 09:28:2d:3b:1f:4d:54:3f:b0:db:0c:0b:d5:6e:87: 7d:43:07:4e:97:7a:36:21:4f:62:85:50:d7:61:07: a6:32:a9:6c:72:f6:0c:20:87:0c:d1:47:cf:ea:64: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:00:36:41:74:70:98:B1:01:72:C3:1B:DA:56:C1:BC:4B:00:C0:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3d:85:25:d4:2c:36:58:6d:d4:5c:b1:2b:2b:5f:75:a1:94: f1:bd:14:07:a2:b1:6d:73:72:4d:57:2d:54:a7:0b:7e:b9:45: db:94:23:2a:f4:d4:7d:7f:d6:4d:5c:4a:f8:60:51:41:04:e8: 57:3e:13:cf:8a:5d:7f:8a:64:3c:45:40:fa:ef:17:b5:fb:5d: 69:96:0e:2c:03:cf:0b:1a:b3:98:00:41:1f:6b:41:4c:83:ac: 9d:8a:93:14:ca:0d:42:c7:8e:ef:4d:92:7e:ed:f3:2f:6b:47: 8e:98:ce:c7:8b:f5:7b:93:df:0b:20:67:d5:17:e2:ba:13:cd: 7d:94:95:90:8e:83:94:36:93:ea:f8:20:1b:6b:df:c8:d7:f0: cc:42:21:1c:95:83:00:fa:fb:a7:01:e1:4e:f0:a9:e2:2d:a2: b3:be:68:ca:24:18:7a:c6:c6:90:19:ad:a4:4c:58:66:d0:5e: 7d:30:eb:6b:89:c0:bc:fd:0e:d8:01:d3:01:e4:2b:e4:5b:aa: c9:71:19:35:99:52:8d:c3:b2:d0:1a:f1:f1:33:1d:cc:aa:f9: 69:da:09:9e:2e:eb:5e:53:95:2c:92:a5:2e:80:63:26:38:2e: 66:ba:ca:19:6d:69:ea:4b:41:25:5e:ff:e5:af:69:22:cf:ea: 9f:e4:ac:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXZ4W8/mX2Dma4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDYyYjdlZTItZjA5Yy00Mzc1LThlYzEtYTNkMDNkZDQ1Nzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh86IubDuvzHEpK1WTA5Uor+UgDEdoKfKsCGl BM/S6c/IluEHV5QXLs26+YIx6gyg+H17z3Ix0RunmpFskedqsZL8Ie0UenWO5zRo V1RonNsh+c4mL3IIJUkrp1XeXfqZs+AKERXTRuA9ZuRLyfeVRymaXPp7jMstJl5E G7I6NkI9WcARPgIjMvQlBhhG//4TtW0pZXDkhJXnxo+DToUuT6bNxMJGpNL+lgxN Z2oWbwzlfipUnDwysGP/fVnQDe8Ltsw6EI/eR39aTBJBGs4IZXEJKC07H01UP7Db DAvVbod9QwdOl3o2IU9ihVDXYQemMqlscvYMIIcM0UfP6mT2cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoANkF0cJixAXLDG9pWwbxLAMDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JmZTgzZjItYzg4NS0z NWYxLWI3ZTItZjkwY2Y3N2ZhZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI9hSXULDZYbdRcsSsrX3WhlPG9FAeisW1zck1XLVSnC365RduUIyr0 1H1/1k1cSvhgUUEE6Fc+E8+KXX+KZDxFQPrvF7X7XWmWDiwDzwsas5gAQR9rQUyD rJ2KkxTKDULHju9Nkn7t8y9rR46YzseL9XuT3wsgZ9UX4roTzX2UlZCOg5Q2k+r4 IBtr38jX8MxCIRyVgwD6+6cB4U7wqeItorO+aMokGHrGxpAZraRMWGbQXn0w62uJ wLz9DtgB0wHkK+RbqslxGTWZUo3DstAa8fEzHcyq+WnaCZ4u615TlSySpS6AYyY4 Lma6yhltaepLQSVe/+WvaSLP6p/krPY= -----END CERTIFICATE-----Generated at Tue Oct 13 06:24:22 2026 by rpki-client