$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa File: 871d8d50-3938-3054-a9bb-27338048e4d9.roa (raw, json) Hash identifier: YsKsGZ50iN8fi1MugvJuA8TJTjt99eucdSDPsmF0G5Q= Subject key identifier: 64:B3:0D:A0:6F:EF:8B:37:C5:BD:54:55:46:44:81:11:3A:90:D5:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D9ABBDD44A7E7A05E2500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.213.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:9a:bb:dd:44:a7:e7:a0:5e:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=1019d2ca-1446-4c8e-bbf8-1861e7d107d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:90:58:61:01:6a:aa:21:08:77:df:bf:61: dd:f1:a6:2a:7a:bd:5f:5f:2f:a3:38:89:b2:81:2c: 75:32:b0:d7:90:44:35:a8:ce:e0:64:e4:0b:17:56: 80:23:7b:60:f6:47:1d:54:b7:90:d9:22:33:d5:ed: cb:d8:ad:56:8a:e5:9c:b4:6a:54:36:8b:d5:5f:08: 7b:8a:10:ae:79:c4:56:aa:ae:7c:48:62:4b:3f:51: 92:0a:0f:de:61:34:11:f2:6d:a4:07:a5:97:53:f1: 54:a0:15:e0:d4:9a:5d:9c:a3:ec:6d:af:90:e6:bb: 89:fe:d7:8b:12:e0:58:7a:48:0c:94:c9:40:a8:80: 0a:d0:72:40:96:94:4b:db:e4:23:15:9e:11:fa:f8: e7:65:3a:81:cd:66:61:dc:b8:25:36:37:39:85:19: 74:4a:47:e7:b5:32:61:16:9f:ee:b8:30:f1:c5:5c: 3f:2f:be:4c:a2:60:2d:f2:28:e5:d6:91:cc:3c:2b: b8:45:91:85:a8:5f:dc:df:40:e3:c8:d6:62:0b:03: b1:35:8d:11:4f:4d:25:37:44:46:b2:e4:e2:10:da: 1a:fe:60:9c:9a:04:d0:d6:4f:2e:5a:11:f1:f8:bf: 1e:6c:90:8d:76:50:2f:a4:3a:f1:51:84:53:21:c4: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B3:0D:A0:6F:EF:8B:37:C5:BD:54:55:46:44:81:11:3A:90:D5:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6f:b0:63:a9:2e:fc:f1:43:cd:09:a2:8a:f3:b9:6b:23:8d: df:de:f1:4c:03:04:2c:fc:87:16:ae:fb:cd:97:07:51:35:19: 7e:d3:c8:0c:41:39:9d:e2:b8:f3:74:a6:5c:95:1a:1e:87:51: ca:fa:eb:06:75:8b:97:ee:9f:7d:df:12:80:02:e7:80:b7:0f: f1:5b:62:42:dc:40:99:77:a7:8f:13:f4:25:7a:82:ab:91:a2: f3:ac:cc:ed:dd:5d:b4:54:c3:c9:2d:89:44:c5:7b:68:f0:45: f0:bd:1d:cf:32:44:b7:be:42:ee:c2:30:4e:16:31:49:82:f8: aa:76:a0:31:3d:ae:69:80:cd:2c:ae:d6:42:6e:97:80:2a:8e: e0:77:68:db:71:48:9b:ba:8b:43:0d:e8:03:d8:dd:fd:00:02: 6f:0d:de:81:a3:d9:d7:a7:bd:09:28:b3:46:b4:5e:b6:21:4a: 26:9a:05:1e:63:8e:f0:12:39:6f:aa:53:6b:73:b1:2a:eb:1c: 4b:52:ea:97:02:5b:ed:e5:dc:a7:6b:38:c4:a4:43:ae:50:9b: 22:22:04:b7:32:e2:b3:8f:4b:0e:b0:73:e2:48:8b:23:72:14: 11:aa:6f:f9:91:61:94:a9:7f:94:7b:a9:0e:f0:30:94:61:cb: c0:6f:82:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZq73USn56BeJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MTAxOWQyY2EtMTQ0Ni00YzhlLWJiZjgtMTg2MWU3ZDEwN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/mQWGEBaqohCHffv2Hd8aYqer1fXy+jOImy gSx1MrDXkEQ1qM7gZOQLF1aAI3tg9kcdVLeQ2SIz1e3L2K1WiuWctGpUNovVXwh7 ihCuecRWqq58SGJLP1GSCg/eYTQR8m2kB6WXU/FUoBXg1JpdnKPsba+Q5ruJ/teL EuBYekgMlMlAqIAK0HJAlpRL2+QjFZ4R+vjnZTqBzWZh3LglNjc5hRl0SkfntTJh Fp/uuDDxxVw/L75MomAt8ijl1pHMPCu4RZGFqF/c30DjyNZiCwOxNY0RT00lN0RG suTiENoa/mCcmgTQ1k8uWhHx+L8ebJCNdlAvpDrxUYRTIcTxZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSzDaBv74s3xb1UVUZEgRE6kNUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODcxZDhkNTAtMzkzOC0z MDU0LWE5YmItMjczMzgwNDhlNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErdWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhvsGOpLvzxQ80JoorzuWsjjd/e8UwDBCz8hxau+82XB1E1GX7TyAxB OZ3iuPN0plyVGh6HUcr66wZ1i5fun33fEoAC54C3D/FbYkLcQJl3p48T9CV6gquR ovOszO3dXbRUw8ktiUTFe2jwRfC9Hc8yRLe+Qu7CME4WMUmC+Kp2oDE9rmmAzSyu 1kJul4AqjuB3aNtxSJu6i0MN6APY3f0AAm8N3oGj2denvQkos0a0XrYhSiaaBR5j jvASOW+qU2tzsSrrHEtS6pcCW+3l3KdrOMSkQ65QmyIiBLcy4rOPSw6wc+JIiyNy FBGqb/mRYZSpf5R7qQ7wMJRhy8Bvgjs= -----END CERTIFICATE-----Generated at Tue Oct 13 16:48:18 2026 by rpki-client