$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810b053f-56a8-3ccd-9af8-a5c6e9731b3d.roa File: 810b053f-56a8-3ccd-9af8-a5c6e9731b3d.roa (raw, json) Hash identifier: uLhTJyRAV3Bpq90tQ6fBPV/kwoOn3kIOGb3T1QPaO6k= Subject key identifier: AB:E0:B6:39:4B:FC:2F:41:0E:61:C6:A4:67:06:8E:33:E3:F0:BB:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B78F894C335530400A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810b053f-56a8-3ccd-9af8-a5c6e9731b3d.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 75.91.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b7:8f:89:4c:33:55:30:40:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=214e7f2e-4cb3-49c4-84f1-30848fd485c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:22:07:de:1f:50:20:f1:59:10:80:ae:0f: 0e:1c:f9:75:28:5c:03:c3:3c:ab:7b:45:96:fb:36: 5f:25:8d:0f:11:44:f1:9f:ec:c8:e6:1e:17:4d:df: 6c:01:3a:a2:a4:aa:98:cc:9a:4b:0b:35:b8:d2:5d: 0d:e2:8d:d4:63:01:b5:cb:e6:b5:e8:8c:26:4b:2e: 02:b5:b4:b3:e3:ea:5d:f3:2b:54:af:69:49:cf:92: c6:d6:43:48:69:c8:db:41:2e:bd:a4:6f:33:83:80: 75:91:26:52:95:3f:15:b1:4e:86:d1:f7:2a:45:82: 7f:87:ca:56:59:ea:1a:dd:e1:9d:70:4c:81:51:98: 4a:0b:0a:99:27:19:c7:d3:f1:de:ad:56:e1:83:cb: ff:b2:77:50:ea:0e:3a:3b:76:be:81:1b:5b:59:6e: 7c:60:b5:f6:df:a1:6a:74:7e:51:84:73:89:c1:81: 5d:8c:97:06:bb:df:11:15:12:3d:0d:47:64:76:05: 65:4f:ad:a9:97:9f:09:50:02:45:2d:1f:3c:53:b5: c6:aa:78:f0:f5:5e:0e:b9:3f:69:58:40:b4:9c:a0: 41:ed:89:ef:d0:9d:6f:82:a7:d3:e6:19:01:c3:32: 28:16:43:e9:3d:1b:1b:7e:50:de:1b:59:39:de:2f: 82:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:B6:39:4B:FC:2F:41:0E:61:C6:A4:67:06:8E:33:E3:F0:BB:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810b053f-56a8-3ccd-9af8-a5c6e9731b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a8:83:79:88:f5:0b:44:10:c0:94:35:5e:b2:b9:8c:21:dc: 22:d9:9b:62:be:08:91:1b:35:ad:c3:13:9a:46:e1:b9:2c:a9: e4:66:dd:45:2d:55:16:95:40:07:51:4d:47:e4:3d:bc:18:e0: 59:81:a1:d5:3e:48:39:e6:6b:37:56:df:1c:3d:6c:a9:73:8d: 74:ae:8d:eb:16:b1:dc:f7:c3:92:6d:61:e6:82:58:8e:50:89: f1:f3:5c:8b:28:f0:c2:98:03:60:0a:39:cc:1c:ba:62:d8:1e: ef:6f:35:21:e3:78:40:bb:b4:f1:32:1e:15:1a:c1:05:e7:45: 24:70:a0:41:3a:ee:f5:f4:b8:0a:dd:73:09:f7:fd:82:fc:53: 6c:66:7f:bf:f4:80:c1:94:42:ae:dc:c5:c4:7e:4b:08:95:b6: 6c:61:4c:da:81:ea:cd:97:bb:7e:b3:d3:80:a2:be:89:cc:7c: 89:50:cc:46:24:c4:6a:39:9f:96:3d:75:24:5c:24:48:bb:ae: 2c:5e:e6:62:22:99:c9:d6:5a:03:6b:4d:f2:1d:c6:7b:03:ff: 37:53:a8:eb:b5:ae:f9:02:56:ae:96:ae:c0:ed:58:c1:f9:25: c0:67:db:33:ac:c9:64:74:0b:2a:dc:db:a9:ed:79:c3:de:cc: f0:62:73:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rePiUwzVTBACgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MjE0ZTdmMmUtNGNiMy00OWM0LTg0ZjEtMzA4NDhmZDQ4NWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwowiB94fUCDxWRCArg8OHPl1KFwDwzyre0WW +zZfJY0PEUTxn+zI5h4XTd9sATqipKqYzJpLCzW40l0N4o3UYwG1y+a16IwmSy4C tbSz4+pd8ytUr2lJz5LG1kNIacjbQS69pG8zg4B1kSZSlT8VsU6G0fcqRYJ/h8pW Weoa3eGdcEyBUZhKCwqZJxnH0/HerVbhg8v/sndQ6g46O3a+gRtbWW58YLX236Fq dH5RhHOJwYFdjJcGu98RFRI9DUdkdgVlT62pl58JUAJFLR88U7XGqnjw9V4OuT9p WEC0nKBB7Ynv0J1vgqfT5hkBwzIoFkPpPRsbflDeG1k53i+ChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvgtjlL/C9BDmHGpGcGjjPj8LtKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODEwYjA1M2YtNTZhOC0z Y2NkLTlhZjgtYTVjNmU5NzMxYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1uOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWog3mI9QtEEMCUNV6yuYwh3CLZm2K+CJEbNa3DE5pG4bksqeRm3UUt VRaVQAdRTUfkPbwY4FmBodU+SDnmazdW3xw9bKlzjXSujesWsdz3w5JtYeaCWI5Q ifHzXIso8MKYA2AKOcwcumLYHu9vNSHjeEC7tPEyHhUawQXnRSRwoEE67vX0uArd cwn3/YL8U2xmf7/0gMGUQq7cxcR+SwiVtmxhTNqB6s2Xu36z04CivonMfIlQzEYk xGo5n5Y9dSRcJEi7rixe5mIimcnWWgNrTfIdxnsD/zdTqOu1rvkCVq6WrsDtWMH5 JcBn2zOsyWR0Cyrc26ntecPezPBic80= -----END CERTIFICATE-----Generated at Tue Oct 13 04:24:10 2026 by rpki-client