$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa File: a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa (raw, json) Hash identifier: 909RNrTy7ASO30yjrKOlT0km7mLkxrlS3jsbJzOG8fA= Subject key identifier: A6:EE:B1:F2:8E:2E:66:53:2E:4E:85:07:98:42:54:DB:F3:13:9B:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B53652466A21A0853A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.187.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b5:36:52:46:6a:21:a0:85:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=21bfc4ef-dc27-42d7-a0eb-032821ca6590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:76:4b:ac:b2:2c:51:a3:de:da:62:5f:df:21: 17:a5:f9:92:93:6f:38:c2:22:ac:50:34:b1:7f:ba: 6d:71:d9:ad:01:e1:ed:12:de:6b:73:ab:c6:aa:55: da:8a:3a:b6:b6:d5:ac:a2:40:20:33:e6:d1:0b:d6: 8d:af:29:b0:7a:b8:b8:ad:2a:51:95:0e:b4:9a:6e: 4f:36:56:3d:77:6b:95:ad:23:df:e4:70:3a:31:68: 76:26:82:e6:91:6a:b6:df:c9:5b:9b:96:37:f2:b2: b8:b7:51:89:af:0b:25:d7:1d:c6:6a:5e:2d:44:74: 66:5e:d2:ed:4f:70:4c:38:82:99:e3:39:26:c5:61: 4e:70:fe:48:c6:eb:62:f8:f0:7d:d4:88:3c:45:84: 10:29:3c:4f:91:e5:ad:9d:87:ee:25:b1:8c:3a:df: 32:ac:24:48:74:2e:7b:c5:cb:6f:02:d4:49:d8:5a: b8:3c:24:91:cd:70:ef:92:d4:b6:cc:0e:fd:9c:1d: 6e:1d:a5:c1:87:1d:d5:43:e0:cf:1c:be:21:57:fa: 92:e1:85:7b:9f:d7:fd:c8:47:60:01:3b:ba:cf:5d: 31:0c:35:2f:39:62:10:90:92:cc:1e:be:29:7a:d9: 0d:c6:88:57:10:9f:fb:99:4d:97:dd:a4:66:4b:97: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EE:B1:F2:8E:2E:66:53:2E:4E:85:07:98:42:54:DB:F3:13:9B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b8:fc:62:85:b4:d9:e8:23:64:54:91:24:3d:27:5a:15:2f: 7b:be:a6:18:2c:27:21:30:53:23:0b:22:7e:af:6f:df:68:68: 85:37:3f:90:81:6b:d8:92:ac:5e:3b:f0:68:fe:58:48:28:3c: 68:75:97:18:b2:26:ec:95:3e:2e:35:7c:d0:b0:a9:f5:9c:f8: 39:9a:66:b6:5b:03:74:10:e6:f2:85:64:eb:31:03:26:69:60: c2:89:83:23:42:50:57:08:45:fb:2c:fd:1f:60:23:25:3d:64: c6:00:e2:50:e5:66:3c:3f:83:35:b4:4b:56:1f:59:fb:77:e3: a6:75:16:70:4d:5a:99:82:3f:07:f0:b6:bf:c1:fb:b2:47:f4: 78:86:89:06:f6:14:e9:71:52:bf:62:83:1f:34:6a:c9:ef:92: b8:b3:53:54:93:31:fa:6a:0f:3f:bd:6e:c7:6f:d6:29:f1:2c: 9a:8c:c0:af:7c:30:ef:c7:6b:e8:19:cd:f4:75:1d:1d:b8:2f: 9f:24:7d:80:e4:75:31:2c:e8:f2:03:b0:a0:fc:b9:e2:85:0c: fa:48:c2:5b:09:40:21:bc:cf:4b:fe:8c:0b:b5:62:73:13:23: e9:11:c6:e1:f1:01:bb:df:99:db:39:b8:e5:e5:1a:3c:d3:80: 99:99:da:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rU2UkZqIaCFOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MjFiZmM0ZWYtZGMyNy00MmQ3LWEwZWItMDMyODIxY2E2NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXZLrLIsUaPe2mJf3yEXpfmSk284wiKsUDSx f7ptcdmtAeHtEt5rc6vGqlXaijq2ttWsokAgM+bRC9aNrymweri4rSpRlQ60mm5P NlY9d2uVrSPf5HA6MWh2JoLmkWq238lbm5Y38rK4t1GJrwsl1x3Gal4tRHRmXtLt T3BMOIKZ4zkmxWFOcP5Ixuti+PB91Ig8RYQQKTxPkeWtnYfuJbGMOt8yrCRIdC57 xctvAtRJ2Fq4PCSRzXDvktS2zA79nB1uHaXBhx3VQ+DPHL4hV/qS4YV7n9f9yEdg ATu6z10xDDUvOWIQkJLMHr4petkNxohXEJ/7mU2X3aRmS5cDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbusfKOLmZTLk6FB5hCVNvzE5vyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlmYWI5YTEtYjdiOS0z YjdmLTlmZmYtYTI0MGVlNjU4YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbu/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG64/GKFtNnoI2RUkSQ9J1oVL3u+phgsJyEwUyMLIn6vb99oaIU3P5CB a9iSrF478Gj+WEgoPGh1lxiyJuyVPi41fNCwqfWc+DmaZrZbA3QQ5vKFZOsxAyZp YMKJgyNCUFcIRfss/R9gIyU9ZMYA4lDlZjw/gzW0S1YfWft346Z1FnBNWpmCPwfw tr/B+7JH9HiGiQb2FOlxUr9igx80asnvkrizU1STMfpqDz+9bsdv1inxLJqMwK98 MO/Ha+gZzfR1HR24L58kfYDkdTEs6PIDsKD8ueKFDPpIwlsJQCG8z0v+jAu1YnMT I+kRxuHxAbvfmds5uOXlGjzTgJmZ2qQ= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:23 2026 by rpki-client