$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7ee34aa-7cd2-399f-8648-a39dcc7c9c0f.roa File: d7ee34aa-7cd2-399f-8648-a39dcc7c9c0f.roa (raw, json) Hash identifier: JSqArygrRj6J4hjlYZtnwSWJCiU8J0Zp5T61WOaXwQU= Subject key identifier: 1F:8E:8F:EE:C4:EA:CD:48:DD:03:00:E2:07:B0:4D:3B:4F:A0:DA:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7352CE729C78B0A8A0773280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7ee34aa-7cd2-399f-8648-a39dcc7c9c0f.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 174.131.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:ce:72:9c:78:b0:a8:a0:77:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=29f524cd-abc9-44c7-9003-623af7252d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:95:c7:ae:28:db:9e:1f:d6:18:33:89:24: 4b:f8:e5:da:65:9c:ba:db:35:8a:6f:f5:e8:83:a7: 89:59:a5:ef:23:65:5b:f8:eb:49:33:bf:ba:7f:07: d5:48:a0:9e:67:78:44:60:50:b0:73:31:9b:59:e0: 7f:a6:fb:a4:1a:27:67:82:0d:61:82:77:67:1b:c4: 92:ea:77:ff:5c:c5:23:40:fe:28:e5:eb:48:30:f9: b2:64:8b:6e:29:2e:22:99:8a:69:fb:ae:7c:1d:e1: 15:bb:ce:56:84:94:fe:0d:45:91:76:05:a8:c6:e8: 72:27:39:1e:48:ea:51:22:6e:86:f8:98:d4:82:d9: 9e:00:d8:d5:e3:84:d6:e1:cc:7e:9c:cb:43:c7:85: f4:44:1c:fd:d1:b6:ef:a3:fd:12:4e:d6:16:f5:36: 80:c4:41:04:21:d3:07:cf:84:12:0c:08:ac:47:f2: 35:bc:b5:85:76:af:14:7b:2e:ab:41:ff:71:4e:18: d6:70:87:06:22:82:bc:5a:7f:5c:f8:4e:5c:e2:f6: 1e:ce:26:a8:ce:87:34:67:3f:d4:4b:05:6f:ec:60: 39:9c:b9:d4:3e:fd:c0:e8:33:ee:5a:02:6c:9c:d0: 46:c3:f4:e5:98:50:2c:66:03:ee:20:5c:96:6f:7d: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8E:8F:EE:C4:EA:CD:48:DD:03:00:E2:07:B0:4D:3B:4F:A0:DA:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7ee34aa-7cd2-399f-8648-a39dcc7c9c0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:65:58:03:22:4c:45:b0:a5:d8:e1:2e:26:45:c7:16:c7:d0: 14:c3:f1:26:12:67:44:bf:6f:73:a3:bb:f9:52:64:f7:d4:03: f8:50:50:bd:b5:c3:bc:07:0c:6d:34:fc:d0:cc:30:a5:a9:87: d7:65:06:1c:a8:98:58:e3:6d:e1:c8:3e:59:3c:3e:62:00:0a: 10:b7:a5:9a:1b:3d:cd:9b:e9:55:bb:de:91:f5:1b:bf:3c:a7: 91:4a:29:89:39:ae:97:30:6e:e1:34:04:90:a4:3c:4b:bc:21: bf:f2:2e:6a:04:f5:8a:82:01:e7:24:08:eb:5a:78:a2:ad:68: b5:37:e3:d8:46:9f:57:b8:7b:2f:58:a0:b8:c0:c4:4b:a8:b3: 67:c9:e3:c3:79:80:ce:62:45:6d:15:b5:d7:2c:f9:c7:18:3f: ae:94:42:cb:e5:24:cf:ea:26:3f:86:39:fb:30:ca:5a:70:a2: 02:c4:36:2d:e3:ff:b0:30:af:8e:79:d4:a4:84:6f:db:86:72: 85:10:5f:b5:9e:fd:cc:d2:d6:8f:ff:0f:31:5d:11:76:8e:5a: 47:74:17:54:b3:42:79:5e:6a:14:c8:67:b2:bf:70:91:5a:6b: c9:23:dc:e1:ce:53:de:bc:ed:25:05:05:ae:94:36:61:ae:8f: 48:55:5c:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUs5ynHiwqKB3MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk MjlmNTI0Y2QtYWJjOS00NGM3LTkwMDMtNjIzYWY3MjUyZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1WVx64o254f1hgziSRL+OXaZZy62zWKb/Xo g6eJWaXvI2Vb+OtJM7+6fwfVSKCeZ3hEYFCwczGbWeB/pvukGidngg1hgndnG8SS 6nf/XMUjQP4o5etIMPmyZItuKS4imYpp+658HeEVu85WhJT+DUWRdgWoxuhyJzke SOpRIm6G+JjUgtmeANjV44TW4cx+nMtDx4X0RBz90bbvo/0STtYW9TaAxEEEIdMH z4QSDAisR/I1vLWFdq8Uey6rQf9xThjWcIcGIoK8Wn9c+E5c4vYeziaozoc0Zz/U SwVv7GA5nLnUPv3A6DPuWgJsnNBGw/TlmFAsZgPuIFyWb32zdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+Oj+7E6s1I3QMA4gewTTtPoNqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdlZTM0YWEtN2NkMi0z OTlmLTg2NDgtYTM5ZGNjN2M5YzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFlWAMiTEWwpdjhLiZFxxbH0BTD8SYSZ0S/b3Oju/lSZPfUA/hQUL21 w7wHDG00/NDMMKWph9dlBhyomFjjbeHIPlk8PmIAChC3pZobPc2b6VW73pH1G788 p5FKKYk5rpcwbuE0BJCkPEu8Ib/yLmoE9YqCAeckCOtaeKKtaLU349hGn1e4ey9Y oLjAxEuos2fJ48N5gM5iRW0Vtdcs+ccYP66UQsvlJM/qJj+GOfswylpwogLENi3j /7Awr4551KSEb9uGcoUQX7We/czS1o//DzFdEXaOWkd0F1SzQnleahTIZ7K/cJFa a8kj3OHOU9687SUFBa6UNmGuj0hVXGk= -----END CERTIFICATE-----Generated at Tue Oct 13 14:11:17 2026 by rpki-client