$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fdd72e4-064d-3699-ab27-63c665d1ac0e.roa File: 9fdd72e4-064d-3699-ab27-63c665d1ac0e.roa (raw, json) Hash identifier: Ps7VHRy1KZi0yqTutmk0m5MM9GwVji9Lu4Y0Eh/pSzI= Subject key identifier: 36:87:AE:62:5B:60:44:78:7D:6F:8D:F0:10:65:0F:DF:EC:E1:71:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5873F3F360F4D93288AF0380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fdd72e4-064d-3699-ab27-63c665d1ac0e.roa Signing time: Wed 30 Sep 2026 10:00:13 +0000 ROA not before: Wed 30 Sep 2026 10:00:13 +0000 ROA not after: Tue 29 Dec 2026 11:00:13 +0000 asID: 7029 IP address blocks: 174.131.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:73:f3:f3:60:f4:d9:32:88:af:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 30 10:00:13 2026 GMT Not After : Dec 29 11:00:13 2026 GMT Subject: CN=3353229e-5559-41bf-8307-ed10f3231fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:33:d5:23:10:16:b6:a6:11:6f:e9:bb:80: e5:f3:b0:ed:d3:2a:7b:27:da:c7:b1:f3:b6:20:81: d0:b0:77:95:7f:89:bd:68:da:7a:bd:ce:b2:3d:f3: bf:62:be:78:22:eb:48:e1:7d:e4:cd:34:01:7f:6a: c3:fa:85:78:42:b1:e2:61:5f:c5:65:ba:37:43:07: 1e:78:ce:89:1f:10:bc:62:08:0e:a3:57:54:ca:d3: d9:f4:f0:20:0c:8a:8d:01:03:6e:25:80:02:1d:27: 2f:c6:18:b0:78:4b:37:ad:96:e8:0a:c2:d1:9f:b6: 8f:b1:f0:26:08:5f:80:7c:e6:c0:c6:7e:e6:3e:9a: 34:d6:95:4e:df:13:e2:6b:25:ca:49:5d:61:74:c9: 89:fe:9f:1c:8f:57:38:1e:af:da:f6:e9:2d:b3:de: 7c:16:fd:46:d6:d8:79:5b:8c:92:a7:51:d3:39:ce: 96:1f:38:0d:58:18:45:49:c6:32:5a:3b:1b:8b:68: 29:c2:73:9e:ee:79:30:fe:d0:a5:6c:69:fb:71:6b: c9:17:18:1c:6f:e8:68:a8:24:03:56:bd:a0:8c:f6: 3e:f0:9e:52:6c:fe:46:b9:a2:f3:41:6e:5d:25:1c: ea:de:54:88:62:61:49:18:d9:3d:2f:c8:e6:38:0c: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:87:AE:62:5B:60:44:78:7D:6F:8D:F0:10:65:0F:DF:EC:E1:71:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fdd72e4-064d-3699-ab27-63c665d1ac0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e6:41:dc:b1:63:90:80:81:4a:7b:40:34:fc:95:02:db:d8: d5:3c:1d:f5:fd:bc:1a:39:7e:3e:c2:d4:3f:59:6e:d5:2f:46: 29:cc:ef:c5:04:41:4d:01:73:e5:19:29:78:4c:50:1a:d5:3f: 72:93:95:68:54:79:36:bb:d8:66:26:10:a0:40:e5:1d:6e:ad: 4b:4e:65:0d:1c:b8:cf:0f:f9:a0:50:68:59:4a:8b:be:19:95: d3:0c:fe:15:9d:f0:aa:44:c1:c2:1b:30:1b:cf:8e:ca:ac:6f: 28:86:47:4c:01:4e:ad:a8:06:08:1d:20:c4:e0:7f:a3:46:36: 31:dd:89:00:85:8e:5a:bd:db:bc:2e:29:2c:db:ca:b7:65:85: 80:5f:86:b8:82:ed:65:11:d4:0e:a5:78:c2:d0:3b:c7:f8:1c: 6a:31:29:76:c4:e8:28:ad:0b:c2:68:0f:a3:f7:5f:1a:48:c9: 43:fa:ef:2f:3b:cd:9f:63:53:90:ec:46:07:62:8d:30:ec:94: 5f:23:10:2c:81:a6:3d:18:f6:db:29:62:f5:12:67:0c:10:45: cb:64:b0:e1:03:a9:89:cb:0e:4c:c6:18:1b:1d:54:ee:21:ce: 99:2b:4a:3d:99:d1:d1:f5:00:e6:b0:f5:19:a6:77:2f:39:59: 74:b2:88:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Yc/PzYPTZMoivA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkzMDEwMDAxM1oXDTI2MTIyOTExMDAxM1owLzEtMCsGA1UEAxMk MzM1MzIyOWUtNTU1OS00MWJmLTgzMDctZWQxMGYzMjMxZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNIz1SMQFramEW/pu4Dl87Dt0yp7J9rHsfO2 IIHQsHeVf4m9aNp6vc6yPfO/Yr54IutI4X3kzTQBf2rD+oV4QrHiYV/FZbo3Qwce eM6JHxC8YggOo1dUytPZ9PAgDIqNAQNuJYACHScvxhiweEs3rZboCsLRn7aPsfAm CF+AfObAxn7mPpo01pVO3xPiayXKSV1hdMmJ/p8cj1c4Hq/a9ukts958Fv1G1th5 W4ySp1HTOc6WHzgNWBhFScYyWjsbi2gpwnOe7nkw/tClbGn7cWvJFxgcb+hoqCQD Vr2gjPY+8J5SbP5GuaLzQW5dJRzq3lSIYmFJGNk9L8jmOAz2EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaHrmJbYER4fW+N8BBlD9/s4XGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZkZDcyZTQtMDY0ZC0z Njk5LWFiMjctNjNjNjY1ZDFhYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroM3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjmQdyxY5CAgUp7QDT8lQLb2NU8HfX9vBo5fj7C1D9ZbtUvRinM78UE QU0Bc+UZKXhMUBrVP3KTlWhUeTa72GYmEKBA5R1urUtOZQ0cuM8P+aBQaFlKi74Z ldMM/hWd8KpEwcIbMBvPjsqsbyiGR0wBTq2oBggdIMTgf6NGNjHdiQCFjlq927wu KSzbyrdlhYBfhriC7WUR1A6leMLQO8f4HGoxKXbE6CitC8JoD6P3XxpIyUP67y87 zZ9jU5DsRgdijTDslF8jECyBpj0Y9tspYvUSZwwQRctksOEDqYnLDkzGGBsdVO4h zpkrSj2Z0dH1AOaw9Rmmdy85WXSyiDQ= -----END CERTIFICATE-----Generated at Tue Oct 13 12:49:01 2026 by rpki-client