$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2c8a353-0c0a-3856-b446-ec424e6486a9.roa File: b2c8a353-0c0a-3856-b446-ec424e6486a9.roa (raw, json) Hash identifier: jAstS2HfrPNqgjwfFHzeouSbLNfyo3Y0I3zMjb0trzo= Subject key identifier: CE:6E:B3:9C:B4:9F:44:D0:BF:B2:48:14:CC:16:9F:53:32:E0:55:7E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F56B5478099FA06DECC4CC380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2c8a353-0c0a-3856-b446-ec424e6486a9.roa Signing time: Tue 29 Sep 2026 19:00:13 +0000 ROA not before: Tue 29 Sep 2026 19:00:13 +0000 ROA not after: Mon 28 Dec 2026 20:00:13 +0000 asID: 7029 IP address blocks: 174.131.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:b5:47:80:99:fa:06:de:cc:4c:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 19:00:13 2026 GMT Not After : Dec 28 20:00:13 2026 GMT Subject: CN=8521581a-08c8-47b9-817d-db12299cb52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b9:74:0e:a4:27:66:5e:f6:a9:c2:a8:0e:65: 5b:70:01:d3:9f:bf:68:e6:05:14:5d:e1:f3:0a:86: 71:a4:61:a0:96:50:6d:1a:85:d0:c2:de:97:2f:6d: 2f:da:85:0a:1f:f6:0f:09:41:0a:2f:c3:16:90:72: 4c:e3:27:28:e1:4b:30:32:5e:ce:46:31:9c:45:98: 59:cc:e3:8b:98:4f:3b:4b:8a:cb:63:3d:03:f8:e6: 42:d5:26:e9:16:e8:bc:bd:5f:34:95:72:da:c9:01: c9:bd:cc:8e:47:7e:be:d3:a1:cd:99:18:f2:76:af: 7a:df:40:08:4c:10:73:ea:2e:42:1d:26:8b:e1:85: cd:e9:df:33:23:4c:dc:f0:c1:4d:ac:7c:3e:88:48: 58:44:de:15:1b:21:6e:53:ed:40:95:a9:96:52:59: 65:f4:e0:3c:3c:d0:ff:a5:87:2b:44:16:cc:2a:d6: 4a:6d:72:59:bc:42:5c:fc:67:bc:3d:bf:28:5e:0e: cb:94:8b:69:ac:65:b1:0f:44:11:25:06:fa:20:56: 1b:2a:e2:b1:f9:0b:3b:ae:bb:7e:54:29:d2:46:eb: 00:76:22:6b:e7:76:20:1f:d2:8f:65:c1:b1:57:1a: 74:f0:18:cf:37:ef:8a:45:e9:23:1a:5c:3a:4e:b5: d0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6E:B3:9C:B4:9F:44:D0:BF:B2:48:14:CC:16:9F:53:32:E0:55:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2c8a353-0c0a-3856-b446-ec424e6486a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c6:28:cc:82:8d:a5:07:76:9c:06:a5:63:e9:89:e5:19:fb: a8:00:95:ff:c5:37:bd:6c:7c:c7:52:c8:f0:c3:19:48:ff:d0: 63:1d:da:a5:2d:99:52:09:f3:7b:b8:5c:d5:4f:fd:12:a6:dd: f3:25:01:14:bf:83:8b:65:d7:1b:eb:7b:56:32:d2:ff:0a:30: 66:65:2b:50:1c:20:e3:53:6b:06:79:9c:83:54:97:e7:4d:8e: 15:37:01:8a:00:43:6b:ac:a7:e2:3b:48:8a:6f:31:ff:e0:7c: 57:13:5c:2c:11:7e:b4:60:8d:08:1f:3c:f4:4a:2a:72:28:cf: 25:8f:b7:c8:e4:6e:ae:14:60:ac:95:8c:cc:0c:2f:22:f9:a0: b8:ba:ca:81:9a:55:2b:45:5d:ab:93:39:31:ab:e5:c0:54:17: 5d:fc:01:59:31:f5:28:fb:8f:c2:b6:b4:97:21:62:fd:b6:3e: 3d:fd:8d:15:32:28:9d:ee:c9:c2:38:33:01:60:27:96:44:fd: 1a:36:2c:b1:cf:37:31:56:91:01:2a:cd:9e:9c:54:f9:22:21: 9d:52:f3:33:7a:80:98:16:36:b7:05:48:21:1a:14:10:c8:b0: c8:04:63:c6:97:5e:ca:75:f3:4b:2b:55:ee:fc:6a:28:65:91: 3a:08:66:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WtUeAmfoG3sxMw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTE5MDAxM1oXDTI2MTIyODIwMDAxM1owLzEtMCsGA1UEAxMk ODUyMTU4MWEtMDhjOC00N2I5LTgxN2QtZGIxMjI5OWNiNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLl0DqQnZl72qcKoDmVbcAHTn79o5gUUXeHz CoZxpGGgllBtGoXQwt6XL20v2oUKH/YPCUEKL8MWkHJM4yco4UswMl7ORjGcRZhZ zOOLmE87S4rLYz0D+OZC1SbpFui8vV80lXLayQHJvcyOR36+06HNmRjydq9630AI TBBz6i5CHSaL4YXN6d8zI0zc8MFNrHw+iEhYRN4VGyFuU+1AlamWUlll9OA8PND/ pYcrRBbMKtZKbXJZvEJc/Ge8Pb8oXg7LlItprGWxD0QRJQb6IFYbKuKx+Qs7rrt+ VCnSRusAdiJr53YgH9KPZcGxVxp08BjPN++KRekjGlw6TrXQywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5us5y0n0TQv7JIFMwWn1My4FV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjJjOGEzNTMtMGMwYS0z ODU2LWI0NDYtZWM0MjRlNjQ4NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPGKMyCjaUHdpwGpWPpieUZ+6gAlf/FN71sfMdSyPDDGUj/0GMd2qUt mVIJ83u4XNVP/RKm3fMlARS/g4tl1xvre1Yy0v8KMGZlK1AcIONTawZ5nINUl+dN jhU3AYoAQ2usp+I7SIpvMf/gfFcTXCwRfrRgjQgfPPRKKnIozyWPt8jkbq4UYKyV jMwMLyL5oLi6yoGaVStFXauTOTGr5cBUF138AVkx9Sj7j8K2tJchYv22Pj39jRUy KJ3uycI4MwFgJ5ZE/Ro2LLHPNzFWkQEqzZ6cVPkiIZ1S8zN6gJgWNrcFSCEaFBDI sMgEY8aXXsp180srVe78aihlkToIZrQ= -----END CERTIFICATE-----Generated at Wed Oct 14 06:48:53 2026 by rpki-client