$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa File: d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa (raw, json) Hash identifier: WNwydqAP8IVPotrBOqmSoER5SAoP7eaJHCh5j2iyaLc= Subject key identifier: 4C:8A:A2:3E:A0:CF:E9:39:0B:0D:7A:81:E9:A2:8E:78:DD:03:C1:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2BA293C738856EDDD9400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 174.131.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ba:29:3c:73:88:56:ed:dd:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=51bc7211-5c9d-4c5e-9af7-a24788d21721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:28:c2:d1:16:27:41:f1:02:6b:73:a0:20: a1:d8:06:d8:a4:a0:2d:68:15:23:65:02:9e:8f:89: 90:6d:b9:56:0c:c1:94:9d:92:38:77:d0:98:43:f1: 1b:61:b1:2f:ab:7e:26:a2:e6:72:c6:54:b3:20:b4: 3f:34:7a:d6:1b:45:b8:b8:75:4a:5d:53:c9:0d:a5: 84:67:f2:08:24:e4:67:8b:3a:a8:8d:ca:c2:d0:6f: d7:a9:8e:68:3b:4f:b8:98:a1:78:7a:07:fb:66:32: 68:19:98:7c:d6:3c:f9:65:b5:50:6f:b9:2f:3f:4b: ea:63:3e:0a:41:c4:b7:60:e4:cb:a9:1d:70:70:9b: c6:ac:df:ef:b6:25:79:38:8f:b0:e3:7a:2e:89:e0: fc:29:e3:b0:f0:46:bb:4a:e5:81:2c:8b:16:f2:6f: e0:5b:99:79:86:38:f6:55:2e:50:bb:60:1f:f7:af: 59:0d:b2:67:1d:a9:0d:4e:ed:94:16:53:78:b5:b6: 8e:3f:8f:b4:f9:7f:15:31:37:a3:a1:57:55:bd:3d: 4f:34:c9:c3:c5:39:70:68:8f:f8:58:8b:8d:ec:63: c1:a9:6f:89:2b:2c:a4:c6:61:21:60:0b:f5:4a:ec: 83:23:aa:d5:10:22:28:3b:ed:37:3e:98:3e:d4:24: f5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8A:A2:3E:A0:CF:E9:39:0B:0D:7A:81:E9:A2:8E:78:DD:03:C1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:09:64:35:0b:79:b2:af:c7:6b:b6:b3:6e:22:7d:c4:0e:7d: 8c:84:a2:8e:e3:67:9e:c4:36:2f:05:46:c4:5e:9e:12:5e:b2: cd:56:c7:0f:e9:9a:8f:16:00:b4:a6:6d:f9:5e:b6:56:20:dd: 11:5f:55:97:34:ca:04:9b:bf:98:7c:2e:7a:45:c3:5b:6b:a2: 66:0c:2f:d6:04:80:3d:1b:1f:25:7e:0e:fb:80:64:97:f0:34: 1e:d9:d7:14:b7:ad:36:4f:7c:90:f1:79:7d:4a:eb:ed:0e:72: c9:73:7f:e0:8a:87:a8:b5:86:88:f6:37:95:fc:ec:18:85:96: 77:35:f9:ca:c3:9f:0e:f2:11:cf:fc:86:9d:4d:8c:53:64:2a: f7:33:65:32:44:ea:0b:4b:60:c4:0c:06:ab:f6:aa:b0:7b:c6: e3:63:91:e3:0f:0a:a9:19:ca:3b:d5:02:0b:67:8e:e5:20:3a: 2e:34:3a:bf:aa:67:33:0a:74:4d:2f:d1:ae:5f:5f:d2:c9:e4: 79:4d:48:a1:df:b2:ae:87:13:9a:6a:08:e8:68:f4:db:3b:ee: b9:8f:cc:dd:4f:d1:09:b1:ad:11:a0:24:08:c5:32:17:8e:a5: a8:cc:dd:0e:ad:e5:d1:ce:2a:2e:c9:29:88:0f:a2:ea:0a:83: 92:6b:46:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0ropPHOIVu3dlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NTFiYzcyMTEtNWM5ZC00YzVlLTlhZjctYTI0Nzg4ZDIxNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwigowtEWJ0HxAmtzoCCh2AbYpKAtaBUjZQKe j4mQbblWDMGUnZI4d9CYQ/EbYbEvq34mouZyxlSzILQ/NHrWG0W4uHVKXVPJDaWE Z/IIJORnizqojcrC0G/XqY5oO0+4mKF4egf7ZjJoGZh81jz5ZbVQb7kvP0vqYz4K QcS3YOTLqR1wcJvGrN/vtiV5OI+w43ouieD8KeOw8Ea7SuWBLIsW8m/gW5l5hjj2 VS5Qu2Af969ZDbJnHakNTu2UFlN4tbaOP4+0+X8VMTejoVdVvT1PNMnDxTlwaI/4 WIuN7GPBqW+JKyykxmEhYAv1SuyDI6rVECIoO+03Ppg+1CT13wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyKoj6gz+k5Cw16gemijnjdA8F4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVmN2EzNjYtZWNmOS0z ZTBhLWFhNmQtNDU0MWJhODllMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAJZDULebKvx2u2s24ifcQOfYyEoo7jZ57ENi8FRsRenhJess1Wxw/p mo8WALSmbfletlYg3RFfVZc0ygSbv5h8LnpFw1tromYML9YEgD0bHyV+DvuAZJfw NB7Z1xS3rTZPfJDxeX1K6+0Ocslzf+CKh6i1hoj2N5X87BiFlnc1+crDnw7yEc/8 hp1NjFNkKvczZTJE6gtLYMQMBqv2qrB7xuNjkeMPCqkZyjvVAgtnjuUgOi40Or+q ZzMKdE0v0a5fX9LJ5HlNSKHfsq6HE5pqCOho9Ns77rmPzN1P0QmxrRGgJAjFMheO pajM3Q6t5dHOKi7JKYgPouoKg5JrRmY= -----END CERTIFICATE-----Generated at Tue Oct 13 19:27:08 2026 by rpki-client