$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c20b068f-a2f0-3402-a1e5-e6c258456e85.roa File: c20b068f-a2f0-3402-a1e5-e6c258456e85.roa (raw, json) Hash identifier: z/Z8Wd0LJUeeDvwW9AsWo/G1IRQyIGf7oEakdZlTLfo= Subject key identifier: A8:29:AE:BE:F3:AB:FF:31:50:34:70:92:FD:6E:1E:7D:2A:D6:3E:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D675B5343FC42E4068D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c20b068f-a2f0-3402-a1e5-e6c258456e85.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 174.131.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:67:5b:53:43:fc:42:e4:06:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=652a691c-ebd4-450e-a8cb-e0b08af5eef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:b6:14:94:32:7c:25:83:3a:f9:85:fa:fa: e8:ea:f3:33:d6:ae:54:01:9b:c9:76:b3:53:6b:11: 20:50:fe:93:a6:db:cc:fe:37:7f:fd:ed:c5:6a:69: 92:96:9b:b9:9d:94:de:fa:ad:0c:1d:9b:ee:5e:9f: 28:6b:6c:c5:9c:83:c8:a5:9d:d0:be:60:64:1c:0c: 8b:b3:6e:42:1c:7d:5f:09:80:6a:12:4a:13:97:56: 61:a6:e7:e3:4d:90:89:84:fa:ab:09:ae:b8:a2:f5: 0c:3d:4a:bb:ed:ea:bc:8b:35:9b:58:60:00:55:7e: 55:0f:08:54:8e:76:87:c2:71:fa:62:cd:29:b4:74: 8c:aa:d1:a1:1d:8c:6b:70:57:a3:a7:fd:44:98:98: 63:25:5c:ba:ef:5f:68:cc:e5:3c:7f:0f:8f:40:11: 0f:52:ba:81:f9:b1:35:56:58:ab:b7:af:a0:15:9f: 62:40:65:0d:26:98:1f:a1:77:6c:db:9d:76:c0:d9: 8f:31:54:c9:ab:9f:5a:34:49:a7:2b:12:90:87:91: 00:31:8d:10:77:99:80:92:1e:90:33:24:a0:19:f2: b6:50:90:0a:9f:95:17:3a:13:f8:b7:5f:aa:8a:15: 9f:be:a2:8b:56:c0:73:1b:23:56:68:2c:e1:2f:f7: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:29:AE:BE:F3:AB:FF:31:50:34:70:92:FD:6E:1E:7D:2A:D6:3E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c20b068f-a2f0-3402-a1e5-e6c258456e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:65:08:06:04:23:fa:dc:71:03:71:3d:0d:88:c8:da:22:d3: e3:04:5f:fa:63:d0:97:8c:86:8c:cd:bc:9f:00:f5:69:35:39: 51:95:a0:a9:af:00:34:46:67:9f:6b:09:03:02:1d:ce:89:ca: 90:4f:41:b5:c0:3b:f6:a7:e6:be:26:38:7d:7b:4b:2f:78:0e: e5:f2:1c:d4:2b:bf:e3:1e:ad:a6:ff:a7:0b:20:f8:3a:93:ee: e3:17:7a:21:9e:ed:56:eb:cf:ac:96:9e:86:ef:f8:14:3a:2f: ef:80:e7:98:58:59:c1:0b:70:b6:fc:ca:a1:ec:60:80:47:46: 17:f7:2c:d2:e7:6a:5e:ab:f7:7e:8a:49:10:2d:fc:5d:f3:1f: 1a:e3:87:9f:49:17:0a:2f:53:3c:2b:8c:75:c3:33:4e:70:8f: 20:8b:ef:b0:d9:ad:16:4e:91:0f:dd:3e:77:2d:a8:17:61:a8: 85:e3:2e:53:db:00:28:09:90:34:5d:17:12:63:64:53:82:57: 39:c7:42:af:0d:cf:aa:77:34:08:47:86:8c:34:07:0a:76:0d: 3d:da:85:84:10:3c:e5:a4:81:b8:7a:c1:39:d3:2d:95:57:d6: 5f:58:6f:70:d0:8a:6f:36:8a:49:0a:5c:d4:4b:91:0e:bd:33: f8:0d:49:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWdbU0P8QuQGjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NjUyYTY5MWMtZWJkNC00NTBlLWE4Y2ItZTBiMDhhZjVlZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6i2FJQyfCWDOvmF+vro6vMz1q5UAZvJdrNT axEgUP6TptvM/jd//e3FammSlpu5nZTe+q0MHZvuXp8oa2zFnIPIpZ3QvmBkHAyL s25CHH1fCYBqEkoTl1ZhpufjTZCJhPqrCa64ovUMPUq77eq8izWbWGAAVX5VDwhU jnaHwnH6Ys0ptHSMqtGhHYxrcFejp/1EmJhjJVy6719ozOU8fw+PQBEPUrqB+bE1 Vlirt6+gFZ9iQGUNJpgfoXds2512wNmPMVTJq59aNEmnKxKQh5EAMY0Qd5mAkh6Q MySgGfK2UJAKn5UXOhP4t1+qihWfvqKLVsBzGyNWaCzhL/fWDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgprr7zq/8xUDRwkv1uHn0q1j5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzIwYjA2OGYtYTJmMC0z NDAyLWExZTUtZTZjMjU4NDU2ZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroO3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFlCAYEI/rccQNxPQ2IyNoi0+MEX/pj0JeMhozNvJ8A9Wk1OVGVoKmv ADRGZ59rCQMCHc6JypBPQbXAO/an5r4mOH17Sy94DuXyHNQrv+Merab/pwsg+DqT 7uMXeiGe7Vbrz6yWnobv+BQ6L++A55hYWcELcLb8yqHsYIBHRhf3LNLnal6r936K SRAt/F3zHxrjh59JFwovUzwrjHXDM05wjyCL77DZrRZOkQ/dPnctqBdhqIXjLlPb ACgJkDRdFxJjZFOCVznHQq8Nz6p3NAhHhow0Bwp2DT3ahYQQPOWkgbh6wTnTLZVX 1l9Yb3DQim82ikkKXNRLkQ69M/gNSVQ= -----END CERTIFICATE-----Generated at Tue Oct 13 08:14:21 2026 by rpki-client