$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa File: 41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa (raw, json) Hash identifier: sna9ULhHHvmk8Z3sPJ6BmCj2+a6AEs0uABpcEUuDXbA= Subject key identifier: F5:DB:7D:4E:F9:6E:50:27:83:95:F8:00:D8:33:BA:4D:FA:68:8E:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7C793BBFF21D7C4BB880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 32019 IP address blocks: 205.232.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7c:79:3b:bf:f2:1d:7c:4b:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0ba47395-6661-4a69-b518-7fbed71ba180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:88:f8:05:56:b3:aa:de:bf:df:d7:4d:94: 4a:b6:3b:fe:a1:86:fe:34:32:00:51:0c:bc:46:20: 89:9f:5a:91:e4:09:ee:6f:b5:61:7f:43:fd:ee:7c: 47:52:ac:88:33:40:55:ae:5d:15:49:c2:55:b7:1b: 00:64:75:1d:0b:ea:40:c1:eb:d5:a1:15:c7:a3:0a: b1:26:89:5e:a5:1b:0f:e2:16:90:07:b2:5b:f7:7a: 37:d3:77:25:84:37:7d:46:05:76:ff:15:56:92:3a: 06:71:e1:72:fd:97:35:94:e4:85:a4:06:dc:ff:38: 1b:25:d5:16:f0:e2:32:d4:74:17:1b:d5:c2:1e:95: 29:b8:12:78:6c:4f:94:14:6c:c2:1b:c8:3d:81:11: a4:ee:59:e4:49:1b:ee:ca:84:98:33:38:15:95:a2: bc:f1:c5:53:6b:a7:84:36:83:93:4f:10:f9:86:91: bd:5f:3e:20:f7:b5:24:08:26:25:09:4c:56:9e:1a: 61:db:97:72:60:80:f3:59:23:3f:a9:c9:6d:f0:97: 7f:6e:c9:5c:20:77:22:d0:14:44:ba:96:cf:65:c5: 15:7c:5c:df:42:54:d6:4a:9d:10:f9:0b:0e:8f:47: e9:86:a9:14:1a:4c:f0:ef:6e:5d:53:9c:48:81:9f: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DB:7D:4E:F9:6E:50:27:83:95:F8:00:D8:33:BA:4D:FA:68:8E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.232.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:23:ce:ff:aa:1a:de:2c:6c:9a:dc:8b:40:bd:86:ad:75:3e: d0:92:92:3a:0f:87:9a:9f:80:98:df:2e:a7:78:b6:d6:b8:ee: 48:47:d9:b7:13:5d:51:24:83:49:37:73:55:ae:a1:bf:90:0b: 64:17:bf:a6:5b:be:28:3d:e0:ae:65:4b:ee:e9:0a:ac:8e:10: f1:09:37:38:b9:5c:a3:49:f1:49:73:55:f1:4a:d1:0d:58:fd: 2c:31:fe:04:7e:81:2c:5f:f2:58:b0:5f:84:6d:2b:c1:69:14: 9b:19:c9:81:92:7c:f1:b8:d7:89:d3:aa:0d:15:66:27:9a:f7: c4:42:5e:b6:26:28:b7:93:ec:69:da:1e:06:de:36:92:1c:cf: 09:49:d1:c6:e1:19:f4:55:5a:2c:3d:ee:ee:bd:d3:e3:f1:e0: 13:02:c9:94:49:88:3d:d0:d0:8c:61:ad:e3:7d:6a:17:94:7a: ce:69:10:63:65:34:19:41:48:3a:0c:7f:bd:a6:af:b2:af:2d: 65:1c:d1:be:00:a6:29:14:c7:a4:13:0d:7c:23:e7:65:15:96: 5c:44:fe:c5:2b:67:6c:d8:0b:aa:1f:3e:6d:02:08:96:99:05: 2c:e5:81:17:71:b6:af:af:4f:61:f8:4c:06:1f:66:d7:62:1e: 2e:27:15:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXx5O7/yHXxLuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MGJhNDczOTUtNjY2MS00YTY5LWI1MTgtN2ZiZWQ3MWJhMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd6I+AVWs6rev9/XTZRKtjv+oYb+NDIAUQy8 RiCJn1qR5Anub7Vhf0P97nxHUqyIM0BVrl0VScJVtxsAZHUdC+pAwevVoRXHowqx JolepRsP4haQB7Jb93o303clhDd9RgV2/xVWkjoGceFy/Zc1lOSFpAbc/zgbJdUW 8OIy1HQXG9XCHpUpuBJ4bE+UFGzCG8g9gRGk7lnkSRvuyoSYMzgVlaK88cVTa6eE NoOTTxD5hpG9Xz4g97UkCCYlCUxWnhph25dyYIDzWSM/qclt8Jd/bslcIHci0BRE upbPZcUVfFzfQlTWSp0Q+QsOj0fphqkUGkzw725dU5xIgZ+siwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXbfU75blAng5X4ANgzuk36aI4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDFlOTg4MGEtMmFlOS0z YTRiLWE3YjUtZTU2YWZjOTljMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzegmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8jzv+qGt4sbJrci0C9hq11PtCSkjoPh5qfgJjfLqd4tta47khH2bcT XVEkg0k3c1Wuob+QC2QXv6Zbvig94K5lS+7pCqyOEPEJNzi5XKNJ8UlzVfFK0Q1Y /Swx/gR+gSxf8liwX4RtK8FpFJsZyYGSfPG414nTqg0VZiea98RCXrYmKLeT7Gna HgbeNpIczwlJ0cbhGfRVWiw97u690+Px4BMCyZRJiD3Q0IxhreN9aheUes5pEGNl NBlBSDoMf72mr7KvLWUc0b4ApikUx6QTDXwj52UVllxE/sUrZ2zYC6ofPm0CCJaZ BSzlgRdxtq+vT2H4TAYfZtdiHi4nFYY= -----END CERTIFICATE-----Generated at Tue Oct 13 04:14:29 2026 by rpki-client