$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/893eaa10-9d09-3ca7-820d-6d8ae447ef0a.roa File: 893eaa10-9d09-3ca7-820d-6d8ae447ef0a.roa (raw, json) Hash identifier: ZoWPf7SMx7E0iCIR4r3rQnJEm5wKpmgJHyFxjRhRSiA= Subject key identifier: A6:B3:33:76:C6:73:FC:A2:43:54:40:7F:48:1C:B1:F7:D2:83:10:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F57680B66969F9FCB7A8CD800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/893eaa10-9d09-3ca7-820d-6d8ae447ef0a.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 174.131.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:0b:66:96:9f:9f:cb:7a:8c:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=23ebc650-b49c-4b1b-98d7-38a9f88ef218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:23:50:b8:7b:09:42:96:5f:8a:67:e1:b1: 87:80:03:86:a5:8e:96:2b:51:af:af:ba:cf:dc:7f: 3b:ac:8f:42:3d:27:89:42:96:38:98:6c:6e:db:6f: 04:04:e6:92:5a:43:c6:cb:52:45:6b:1c:3e:10:00: b7:23:8e:2b:a2:35:5c:0f:a5:d4:86:a5:d6:54:d2: f6:64:02:08:6f:90:d0:62:30:ec:45:2f:ee:ce:61: 13:d9:05:47:c9:2d:51:4b:e9:b4:54:09:27:56:b8: 21:59:0d:5f:54:60:20:cf:7f:e4:1c:87:84:f2:4c: 4c:38:5d:37:55:ed:e9:26:7b:b2:11:4b:6a:61:1a: 1c:36:cd:ba:1f:5d:c8:99:95:e3:a0:9b:63:81:d0: bc:0c:7a:b7:80:6a:8d:14:d3:b1:0f:c5:ce:98:ea: d9:c2:7d:01:7e:87:4a:a8:72:4d:4c:23:f9:98:c2: 35:86:be:23:5d:50:92:3d:65:30:f4:ee:55:23:95: cc:b1:e7:5a:29:e0:c2:68:3d:64:71:33:e6:e4:d8: ad:db:ba:6e:e0:07:50:69:f9:3f:04:12:28:fd:ad: 69:85:4c:b1:7e:9d:89:5a:e9:d1:b4:ac:c0:9f:c5: e9:25:21:06:8f:80:e2:7a:ff:6e:f7:2e:ad:e7:87: 6f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B3:33:76:C6:73:FC:A2:43:54:40:7F:48:1C:B1:F7:D2:83:10:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/893eaa10-9d09-3ca7-820d-6d8ae447ef0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0a:a4:ef:7e:64:05:fb:e7:8c:97:d3:13:fb:5d:15:b2:ba: f3:87:19:24:d5:e9:14:66:a4:63:18:47:82:25:31:73:d9:b6: 3d:c5:88:f4:0a:d3:a7:f4:c5:01:9f:e3:67:67:f3:7b:b9:97: eb:bb:d5:90:6e:9b:be:15:8c:ea:e1:c1:34:cd:0e:54:6a:09: 76:14:fb:59:10:1b:66:20:09:09:1b:ef:09:0d:92:7c:8d:a5: 5e:3a:d1:8d:67:93:0c:c4:0a:99:b0:21:61:8f:31:ea:69:17: 50:55:ca:40:14:09:8e:60:d7:ec:57:02:a1:a1:a5:bf:5f:4a: d2:ae:5f:08:38:21:9f:ea:f2:77:e5:96:df:c6:b8:8d:bb:78: fb:49:88:db:55:93:30:38:8e:9b:fa:6e:88:73:82:c2:19:1e: bd:74:2c:fc:f4:a9:cc:7b:79:ff:ff:82:d3:c3:d9:f6:14:90: e1:f3:3c:82:ad:4c:1f:0f:d1:d0:90:cf:0e:7d:59:53:eb:78: 4e:fe:12:eb:35:ed:46:e4:c8:2d:be:12:96:9e:8b:6a:01:57: a1:e7:64:79:e6:1d:57:d2:5f:ab:13:69:19:ed:dc:68:6c:72: 97:db:88:8d:a5:e4:bb:d7:98:f1:e1:d7:24:6e:92:aa:df:e3: 55:07:30:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAtmlp+fy3qM2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MjNlYmM2NTAtYjQ5Yy00YjFiLTk4ZDctMzhhOWY4OGVmMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgYjULh7CUKWX4pn4bGHgAOGpY6WK1Gvr7rP 3H87rI9CPSeJQpY4mGxu228EBOaSWkPGy1JFaxw+EAC3I44rojVcD6XUhqXWVNL2 ZAIIb5DQYjDsRS/uzmET2QVHyS1RS+m0VAknVrghWQ1fVGAgz3/kHIeE8kxMOF03 Ve3pJnuyEUtqYRocNs26H13ImZXjoJtjgdC8DHq3gGqNFNOxD8XOmOrZwn0BfodK qHJNTCP5mMI1hr4jXVCSPWUw9O5VI5XMsedaKeDCaD1kcTPm5Nit27pu4AdQafk/ BBIo/a1phUyxfp2JWunRtKzAn8XpJSEGj4Diev9u9y6t54dvbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKazM3bGc/yiQ1RAf0gcsffSgxBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODkzZWFhMTAtOWQwOS0z Y2E3LTgyMGQtNmQ4YWU0NDdlZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsKpO9+ZAX754yX0xP7XRWyuvOHGSTV6RRmpGMYR4IlMXPZtj3FiPQK 06f0xQGf42dn83u5l+u71ZBum74VjOrhwTTNDlRqCXYU+1kQG2YgCQkb7wkNknyN pV460Y1nkwzECpmwIWGPMeppF1BVykAUCY5g1+xXAqGhpb9fStKuXwg4IZ/q8nfl lt/GuI27ePtJiNtVkzA4jpv6bohzgsIZHr10LPz0qcx7ef//gtPD2fYUkOHzPIKt TB8P0dCQzw59WVPreE7+Eus17UbkyC2+Epaei2oBV6HnZHnmHVfSX6sTaRnt3Ghs cpfbiI2l5LvXmPHh1yRukqrf41UHMJI= -----END CERTIFICATE-----Generated at Tue Oct 13 17:38:03 2026 by rpki-client