$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa File: 670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa (raw, json) Hash identifier: Ea7g1z9IJZn/hrE4+WGfhQQb91LP0XkvS1ZHuiyOScw= Subject key identifier: 64:EB:9C:33:11:B2:43:87:25:29:23:22:94:3A:CB:4E:98:84:41:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F62930C9A0DB11341BF350040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 151.213.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0c:9a:0d:b1:13:41:bf:35:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=53b39f0f-0c1c-4c57-b630-1c3a793a7ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c4:0e:d4:4b:a1:da:50:b4:39:56:51:e6:d7: 1c:9c:a5:d8:56:f2:73:ec:ec:82:6a:d0:4b:59:aa: 6e:c0:e3:e4:cb:5f:b5:10:44:c2:df:51:1c:60:c9: 60:b8:af:c4:76:dc:52:b4:eb:8a:55:98:e4:c7:47: a4:89:64:29:d3:ed:fc:43:ef:3e:75:7c:6b:23:d7: c1:4f:96:21:1b:c9:e8:b0:87:79:34:a2:b0:60:49: e6:8a:d6:4c:a7:a5:ff:55:56:ab:af:84:3f:63:01: a6:57:5c:de:3a:a7:f5:71:06:e6:ad:50:a6:f1:9c: 58:84:e1:6a:08:75:b0:c3:bb:5a:a8:90:46:05:31: 2f:e5:6b:53:e6:c4:e0:19:1b:71:0b:7f:80:22:6f: ea:cc:45:57:84:43:e4:f4:f5:70:e8:a1:e4:fd:eb: a9:e7:41:fb:82:63:2f:8d:3a:99:c7:1e:51:b4:b9: 86:16:85:1e:04:0a:f5:68:6e:ed:ce:a7:05:74:09: 04:75:23:66:c3:24:b7:18:cd:d0:36:a6:de:a6:d8: 3e:f5:59:a4:38:53:c2:c9:33:38:3c:61:d0:76:be: 13:44:75:09:03:6e:20:f2:40:62:e6:6b:8b:36:24: 97:04:80:1f:63:e5:25:52:65:58:c7:89:80:a7:f5: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EB:9C:33:11:B2:43:87:25:29:23:22:94:3A:CB:4E:98:84:41:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e9:63:be:6b:7a:5e:59:be:e7:d0:da:08:0c:c0:c7:74:5c: 6f:01:5c:52:15:db:cb:c5:38:a1:96:23:36:81:56:ef:de:5e: 18:ba:9f:cb:cf:90:7f:bc:ca:14:f5:f7:e4:f8:76:3c:2f:d8: 75:24:a9:7d:76:57:7a:75:bb:ca:f4:e2:84:47:3f:6a:e0:80: 6a:c3:40:8b:9b:2b:74:11:20:ca:1a:d0:05:52:7d:4e:32:ad: 00:d3:77:bb:0a:6b:74:29:bc:d6:62:6e:d0:56:3d:6e:13:d7: 3c:45:9e:c7:b7:3b:5a:29:71:5a:4a:d8:65:f4:67:8e:a5:15: 05:ba:8d:3e:c2:0d:71:a5:5c:5a:06:74:63:c1:c0:63:64:3f: 10:60:aa:b1:3e:dc:d9:65:5f:00:bc:2f:0a:c0:76:2c:7c:3f: 3b:6d:ff:10:d3:19:74:bf:4d:de:c5:aa:9a:27:2f:b8:2f:47: ed:98:c4:6e:f1:52:65:3b:78:ff:87:bd:6c:34:f5:ec:52:78: 89:17:74:fd:e8:26:bb:dc:d0:6a:3c:84:06:05:aa:30:46:e0: 11:3f:77:3f:c2:67:32:b9:fe:b1:57:52:04:73:45:8a:38:24: bb:33:f1:95:c9:58:d3:1f:6f:ee:5c:24:c6:38:ce:89:a5:7b: 6f:81:81:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwyaDbETQb81AEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NTNiMzlmMGYtMGMxYy00YzU3LWI2MzAtMWMzYTc5M2E3ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksQO1Euh2lC0OVZR5tccnKXYVvJz7OyCatBL WapuwOPky1+1EETC31EcYMlguK/EdtxStOuKVZjkx0ekiWQp0+38Q+8+dXxrI9fB T5YhG8nosId5NKKwYEnmitZMp6X/VVarr4Q/YwGmV1zeOqf1cQbmrVCm8ZxYhOFq CHWww7taqJBGBTEv5WtT5sTgGRtxC3+AIm/qzEVXhEPk9PVw6KHk/eup50H7gmMv jTqZxx5RtLmGFoUeBAr1aG7tzqcFdAkEdSNmwyS3GM3QNqbeptg+9VmkOFPCyTM4 PGHQdr4TRHUJA24g8kBi5muLNiSXBIAfY+UlUmVYx4mAp/WMMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTrnDMRskOHJSkjIpQ6y06YhEG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjcwZGRmNmUtMjNjYi0z OTYyLWJkYmYtMWMyMGE4YTMyMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl9WwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXpY75rel5ZvufQ2ggMwMd0XG8BXFIV28vFOKGWIzaBVu/eXhi6n8vP kH+8yhT19+T4djwv2HUkqX12V3p1u8r04oRHP2rggGrDQIubK3QRIMoa0AVSfU4y rQDTd7sKa3QpvNZibtBWPW4T1zxFnse3O1opcVpK2GX0Z46lFQW6jT7CDXGlXFoG dGPBwGNkPxBgqrE+3NllXwC8LwrAdix8Pztt/xDTGXS/Td7FqponL7gvR+2YxG7x UmU7eP+HvWw09exSeIkXdP3oJrvc0Go8hAYFqjBG4BE/dz/CZzK5/rFXUgRzRYo4 JLsz8ZXJWNMfb+5cJMY4zomle2+BgfE= -----END CERTIFICATE-----Generated at Tue Oct 13 16:04:30 2026 by rpki-client