$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa File: ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa (raw, json) Hash identifier: Itudpd51Rxv1Tnpf/4PZC7di/Lnj14QME8OfbtsWVLs= Subject key identifier: 58:C9:1D:6F:4A:B5:44:FF:F6:BD:9B:FD:54:9A:4E:13:19:E2:FE:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D961BE8F251B3CE071A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 216.236.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:96:1b:e8:f2:51:b3:ce:07:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=25f78ac0-bebc-45e0-8fa3-08fe153ec09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:2f:31:26:fc:23:ca:8a:29:8b:17:52:81: f6:27:f4:2e:ee:f1:c6:0d:e8:4e:93:33:9d:79:7f: 87:66:4e:80:a8:6b:50:30:d2:40:50:92:64:08:45: 1d:af:ef:e6:ba:67:39:75:1a:b1:6a:06:7c:45:65: 19:27:92:95:eb:09:da:de:20:cc:18:32:58:0e:75: 2b:6d:aa:b2:98:11:bc:d7:bd:72:ac:53:84:d5:61: 80:73:e2:1f:ed:0b:c6:5b:8e:c0:71:79:d5:aa:b5: 03:4f:06:4d:20:c3:95:0d:7a:fe:68:76:93:98:00: a9:12:37:1c:4c:5a:a3:a8:d6:1f:35:57:01:f8:e1: bd:3c:47:c1:e1:83:ea:3b:df:01:af:c3:63:23:cc: 7e:7e:f6:e8:3a:2a:eb:b9:05:45:9b:2c:d8:c0:6c: 5a:9d:15:ed:21:20:95:14:e2:49:30:a2:28:3e:40: 72:2c:50:1b:68:92:ca:43:03:76:82:a6:4e:ad:7e: 7a:c6:77:ff:1f:0e:a7:42:94:54:98:c8:9f:bc:26: 0c:0d:0a:73:e0:20:ce:31:78:7e:46:cc:d9:c0:c5: 61:bb:c3:a5:ce:ae:a3:87:44:1c:a4:87:30:68:8e: bc:a2:2e:b7:57:7d:cd:ea:90:9f:01:aa:99:25:68: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C9:1D:6F:4A:B5:44:FF:F6:BD:9B:FD:54:9A:4E:13:19:E2:FE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.236.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a6:fe:b1:cc:d7:7b:57:c4:c5:3a:12:9e:b1:67:4d:d2:cf: 38:f6:18:b9:18:28:d3:b0:46:84:97:c1:3f:a8:44:93:cc:d6: 31:0e:13:77:69:ee:88:b4:2e:85:f7:5d:52:30:bb:31:98:e4: 79:f1:05:9f:69:25:2e:a3:0a:cd:cd:49:2f:51:b6:9e:2c:42: e6:82:ae:59:44:bd:8b:d3:83:7c:29:a0:51:d9:8c:12:10:c6: 9e:f6:12:80:80:86:d5:af:61:d3:d4:a9:9c:fd:b9:5b:61:b6: fe:8d:a4:69:f8:d1:5d:b7:a7:9d:01:f4:8d:26:f9:93:a8:95: fc:d5:c8:70:34:7f:28:7b:f7:4d:30:d1:04:41:da:65:f4:b7: 14:3c:7a:b3:ce:84:0e:6e:a1:e5:56:38:05:39:49:32:4d:38: 9b:82:0e:4d:a4:bc:65:ac:ac:8f:b9:25:a9:95:95:b1:74:b7: 12:c0:b3:f5:7d:96:73:3e:02:3a:d5:d7:f5:08:31:11:94:d8: 9a:6b:9a:b9:9b:e4:e5:09:92:8f:34:21:f8:41:87:b6:17:4f: 6b:01:ef:20:fa:36:20:4e:27:04:19:e5:2f:41:bc:79:c9:c3: 60:08:9d:e3:d5:21:c2:9c:94:1d:8f:08:0a:74:f6:09:0d:ee: a1:7f:39:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZYb6PJRs84HGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MjVmNzhhYzAtYmViYy00NWUwLThmYTMtMDhmZTE1M2VjMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcMvMSb8I8qKKYsXUoH2J/Qu7vHGDehOkzOd eX+HZk6AqGtQMNJAUJJkCEUdr+/mumc5dRqxagZ8RWUZJ5KV6wna3iDMGDJYDnUr baqymBG8171yrFOE1WGAc+If7QvGW47AcXnVqrUDTwZNIMOVDXr+aHaTmACpEjcc TFqjqNYfNVcB+OG9PEfB4YPqO98Br8NjI8x+fvboOirruQVFmyzYwGxanRXtISCV FOJJMKIoPkByLFAbaJLKQwN2gqZOrX56xnf/Hw6nQpRUmMifvCYMDQpz4CDOMXh+ RszZwMVhu8Olzq6jh0QcpIcwaI68oi63V33N6pCfAaqZJWicfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjJHW9KtUT/9r2b/VSaThMZ4v4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E1YmY1YjEtNjE3Yy0z ZGM2LWIzYTgtZDQ5M2M0YTA3MzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OxVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6m/rHM13tXxMU6Ep6xZ03Szzj2GLkYKNOwRoSXwT+oRJPM1jEOE3dp 7oi0LoX3XVIwuzGY5HnxBZ9pJS6jCs3NSS9Rtp4sQuaCrllEvYvTg3wpoFHZjBIQ xp72EoCAhtWvYdPUqZz9uVthtv6NpGn40V23p50B9I0m+ZOolfzVyHA0fyh7900w 0QRB2mX0txQ8erPOhA5uoeVWOAU5STJNOJuCDk2kvGWsrI+5JamVlbF0txLAs/V9 lnM+AjrV1/UIMRGU2Jprmrmb5OUJko80IfhBh7YXT2sB7yD6NiBOJwQZ5S9BvHnJ w2AInePVIcKclB2PCAp09gkN7qF/OXw= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:28 2026 by rpki-client