$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa File: 5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa (raw, json) Hash identifier: 4IhgJOzvjMHuOqXLE+YBLdz868okV9QRztJfVYEBuIM= Subject key identifier: 24:F0:0F:8E:6E:84:03:3D:B7:0B:F4:4A:4A:42:BE:10:21:CA:AC:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F498B958780FD00A61B910180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 174.131.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:95:87:80:fd:00:a6:1b:91:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=173c9488-5940-4f99-b2f7-69442dff4a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:31:e4:dc:b6:8f:e9:cd:19:3f:71:87:94:a8: b7:3f:88:3c:cb:5c:5c:1d:f4:77:59:1e:73:9e:18: f4:96:c8:c3:56:79:2c:e2:01:e0:11:36:db:a7:16: f8:25:1d:f9:2c:2b:a1:59:3f:8c:0e:11:a1:8e:d8: a2:9a:15:08:61:00:5a:23:da:28:ce:72:63:2e:22: 29:70:2d:10:12:8e:11:ba:d8:39:6a:67:6c:26:a8: 43:1c:5b:05:c8:c2:e9:9c:aa:ff:d6:a5:71:f4:54: a5:89:46:ce:49:2a:6f:8f:95:de:ec:6d:c5:81:09: b1:93:2e:64:ca:11:9a:9e:a1:d3:6e:91:af:bf:2e: bb:ac:d6:e0:f7:ab:42:40:2d:23:82:eb:a1:c1:ba: c6:5f:2d:bb:70:46:0e:58:01:44:8a:bf:3f:29:06: 5d:dc:22:22:67:1a:a9:0f:cd:86:3a:23:eb:9e:73: 14:00:94:13:1b:fc:9d:12:21:21:cf:e6:d1:74:e0: 17:64:66:b9:80:15:61:a5:67:47:fa:d5:e5:c7:cd: 96:2d:1f:fc:94:d6:e1:93:e0:2b:31:f4:85:f9:15: 76:a6:e1:89:67:fc:52:b3:95:92:30:33:3c:5b:cd: 25:d5:70:f6:b4:f1:c6:51:39:56:89:cd:66:8f:95: a2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F0:0F:8E:6E:84:03:3D:B7:0B:F4:4A:4A:42:BE:10:21:CA:AC:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:04:09:b2:d8:8c:86:7d:09:96:44:eb:b4:a6:da:ee:6e:fd: 32:b2:51:0f:d6:4e:b4:7b:0c:d0:23:b8:e0:4c:71:31:dc:35: b2:d1:8e:a1:06:6b:aa:c8:25:71:3f:39:03:96:7c:c7:8f:50: 73:80:89:aa:10:96:1c:eb:73:40:25:78:8d:36:0a:a5:97:64: 38:32:8e:d7:b3:81:0e:2b:5a:40:71:b0:3a:72:68:ef:0b:f8: de:63:94:0e:3e:20:c6:0c:7d:da:e0:41:e4:62:6c:75:65:23: ce:c1:ce:21:09:49:bf:be:1a:55:b6:9e:3e:9c:10:8a:ab:c8: cb:2e:8d:6d:f8:cf:ac:9e:07:f8:8e:d0:9a:a2:4b:f9:44:5d: bc:b5:a9:86:32:87:c8:67:d6:85:13:62:fc:49:13:17:ab:8a: c3:84:35:b9:88:ce:71:76:ce:b5:6c:d7:d5:f3:1c:e7:03:db: 00:0c:d1:7c:df:21:8a:fc:f2:f0:47:9a:13:50:fb:a6:05:72: 93:2a:97:88:0c:90:35:ed:35:1c:f4:01:1f:09:3d:d9:6f:65: ae:4f:36:fa:99:c7:49:e9:08:9f:d4:4b:e1:1e:ae:37:ed:c5: 78:3e:21:23:0c:22:1f:7f:d3:c8:cc:d9:d0:b0:3e:d6:87:2b: fc:ef:86:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji5WHgP0AphuRAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTczYzk0ODgtNTk0MC00Zjk5LWIyZjctNjk0NDJkZmY0YTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTHk3LaP6c0ZP3GHlKi3P4g8y1xcHfR3WR5z nhj0lsjDVnks4gHgETbbpxb4JR35LCuhWT+MDhGhjtiimhUIYQBaI9ooznJjLiIp cC0QEo4Rutg5amdsJqhDHFsFyMLpnKr/1qVx9FSliUbOSSpvj5Xe7G3FgQmxky5k yhGanqHTbpGvvy67rNbg96tCQC0jguuhwbrGXy27cEYOWAFEir8/KQZd3CIiZxqp D82GOiPrnnMUAJQTG/ydEiEhz+bRdOAXZGa5gBVhpWdH+tXlx82WLR/8lNbhk+Ar MfSF+RV2puGJZ/xSs5WSMDM8W80l1XD2tPHGUTlWic1mj5Wi5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTwD45uhAM9twv0SkpCvhAhyqzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQyYjIyYTYtYmQ0OS0z YzcxLWE2MzAtNGNkM2VjYWZhM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgECbLYjIZ9CZZE67Sm2u5u/TKyUQ/WTrR7DNAjuOBMcTHcNbLRjqEG a6rIJXE/OQOWfMePUHOAiaoQlhzrc0AleI02CqWXZDgyjtezgQ4rWkBxsDpyaO8L +N5jlA4+IMYMfdrgQeRibHVlI87BziEJSb++GlW2nj6cEIqryMsujW34z6yeB/iO 0JqiS/lEXby1qYYyh8hn1oUTYvxJExerisOENbmIznF2zrVs19XzHOcD2wAM0Xzf IYr88vBHmhNQ+6YFcpMql4gMkDXtNRz0AR8JPdlvZa5PNvqZx0npCJ/US+Eerjft xXg+ISMMIh9/08jM2dCwPtaHK/zvhvw= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:32 2026 by rpki-client