$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0af3ef7-4170-3e47-a466-7b0bbcbd6fb1.roa File: a0af3ef7-4170-3e47-a466-7b0bbcbd6fb1.roa (raw, json) Hash identifier: 6WcJcUcxLnrdmFAdjeG4IYrpj/h+VOjVFSlqSvMptFY= Subject key identifier: DF:06:CD:AF:CB:8E:98:42:E4:AC:0A:21:33:5B:CC:A5:A2:5A:68:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D90B1C0AA48A04A0A3D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0af3ef7-4170-3e47-a466-7b0bbcbd6fb1.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 72.172.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:90:b1:c0:aa:48:a0:4a:0a:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=c1e77c07-1a9f-4a0f-9326-919db331f257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f8:fe:6c:00:bc:bf:44:c8:8f:e3:ce:2e:ed: 90:2e:2d:8c:1a:ff:30:45:72:e5:8d:0d:42:d6:e2: c8:be:d3:f8:38:e9:4c:60:17:2e:ca:f9:e7:d2:13: f3:94:c0:60:c3:20:34:5d:3a:d4:4d:da:e0:1f:9d: 20:7c:a1:85:b0:c3:4c:98:b0:a9:63:c6:ba:eb:10: 99:5d:90:21:ac:31:ee:94:07:09:7d:01:eb:2a:fe: 90:b5:9b:a8:fd:19:2c:eb:1e:68:78:61:59:a8:1c: fc:2b:90:cd:8e:52:c9:0c:1e:05:c5:1d:f9:d9:af: f3:78:60:f2:76:fa:49:42:b1:0e:51:95:03:7e:de: 3f:19:f5:25:3d:ca:b7:ec:e0:06:f1:62:c2:f0:1f: 74:78:19:6b:82:f2:7d:97:2f:33:02:14:a0:b9:03: c1:fb:f7:34:92:36:d3:aa:c3:1c:a1:7b:5f:9f:91: 8d:c7:fc:4e:0f:7b:3f:18:4c:2b:8d:3a:a2:c8:1d: 62:02:68:bd:e3:f5:bf:72:ad:78:aa:c8:54:1c:88: 79:38:55:99:e4:f6:cf:00:d3:55:99:88:31:e9:8a: 96:8b:42:52:e0:38:af:1b:ee:2c:82:4b:4d:b1:f6: 09:5a:fe:54:20:83:4f:e9:4f:d0:c0:d2:45:64:71: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:06:CD:AF:CB:8E:98:42:E4:AC:0A:21:33:5B:CC:A5:A2:5A:68:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0af3ef7-4170-3e47-a466-7b0bbcbd6fb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:01:4b:06:33:59:a8:40:8e:85:5c:59:8f:e2:ee:25:c7:c0: b7:45:7e:2b:f0:4e:eb:02:dc:be:ec:53:1c:4d:64:47:cb:ac: 07:74:12:96:d8:9c:9f:28:83:81:e7:ba:c1:3c:c7:18:be:b1: 0b:4c:ac:4e:10:f8:b1:40:38:9d:bf:42:f5:91:d9:73:de:df: c1:b5:a6:46:ec:6b:fd:c8:f1:d2:c1:17:4a:63:21:3b:9b:fb: 96:fb:09:01:82:f1:23:ff:c4:25:98:52:69:65:d7:0c:5c:4f: e0:4a:a6:6e:b5:d4:80:e6:6e:85:e2:33:88:7b:c0:21:86:5e: 57:d1:23:df:e9:98:71:45:6a:6c:b4:32:aa:10:99:77:0c:25: e2:c2:9b:9c:53:df:c5:71:3f:76:5c:e9:4a:d3:4f:b7:5b:a7: 61:68:79:c4:b3:e8:e5:3c:fc:95:70:50:6f:cd:7d:97:b6:6b: 34:f6:aa:ed:33:75:7e:d0:ea:6d:a0:7d:ae:1a:0b:07:47:76: 4e:48:23:d5:63:3a:73:f8:a2:9f:ad:44:3f:f6:0a:3c:cf:c5: a9:82:fd:8f:24:52:7e:98:97:11:45:c3:98:23:20:22:8e:7b: 30:7a:c2:9a:ee:65:5f:a7:ef:bb:48:74:dc:36:8b:07:ea:59: 44:f2:62:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZCxwKpIoEoKPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YzFlNzdjMDctMWE5Zi00YTBmLTkzMjYtOTE5ZGIzMzFmMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvj+bAC8v0TIj+POLu2QLi2MGv8wRXLljQ1C 1uLIvtP4OOlMYBcuyvnn0hPzlMBgwyA0XTrUTdrgH50gfKGFsMNMmLCpY8a66xCZ XZAhrDHulAcJfQHrKv6QtZuo/Rks6x5oeGFZqBz8K5DNjlLJDB4FxR352a/zeGDy dvpJQrEOUZUDft4/GfUlPcq37OAG8WLC8B90eBlrgvJ9ly8zAhSguQPB+/c0kjbT qsMcoXtfn5GNx/xOD3s/GEwrjTqiyB1iAmi94/W/cq14qshUHIh5OFWZ5PbPANNV mYgx6YqWi0JS4DivG+4sgktNsfYJWv5UIINP6U/QwNJFZHENfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8Gza/LjphC5KwKITNbzKWiWmiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTBhZjNlZjctNDE3MC0z ZTQ3LWE0NjYtN2IwYmJjYmQ2ZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSKwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIBSwYzWahAjoVcWY/i7iXHwLdFfivwTusC3L7sUxxNZEfLrAd0EpbY nJ8og4HnusE8xxi+sQtMrE4Q+LFAOJ2/QvWR2XPe38G1pkbsa/3I8dLBF0pjITub +5b7CQGC8SP/xCWYUmll1wxcT+BKpm611IDmboXiM4h7wCGGXlfRI9/pmHFFamy0 MqoQmXcMJeLCm5xT38VxP3Zc6UrTT7dbp2FoecSz6OU8/JVwUG/NfZe2azT2qu0z dX7Q6m2gfa4aCwdHdk5II9VjOnP4op+tRD/2CjzPxamC/Y8kUn6YlxFFw5gjICKO ezB6wpruZV+n77tIdNw2iwfqWUTyYkI= -----END CERTIFICATE-----Generated at Tue Oct 13 21:35:33 2026 by rpki-client