$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa File: dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa (raw, json) Hash identifier: ymsxqgL9+fBmlpG+nbXDp2TtHU6D+iIbSBILJLDYBOg= Subject key identifier: 2D:BA:AC:C0:66:4B:59:53:E9:BB:FE:EB:3B:C5:DA:E3:27:88:47:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D93AC7E0EDFA7E8F02900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 174.131.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:93:ac:7e:0e:df:a7:e8:f0:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d691ae6e-3a39-484f-a2e9-16aa34518659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:44:63:21:ce:7c:31:d6:0b:e7:ca:18:c6: ef:6b:b2:67:19:fc:7a:1c:e7:dd:3b:c5:21:fe:7a: 58:63:18:76:53:95:4c:5d:4c:7f:61:8d:46:9d:6a: ee:fd:da:cb:07:7e:0b:e4:f3:9d:01:67:0a:dd:c4: a7:19:d7:cb:1f:be:9a:cc:47:28:b0:79:e6:83:cc: b6:d1:d9:d8:8e:41:5a:2d:75:d2:86:04:9b:59:03: 4d:55:c3:32:d3:94:f8:ef:63:f9:8b:b3:d2:78:ca: 0e:61:ca:c0:de:92:9b:bc:ec:d7:7e:04:66:2d:95: f6:c4:f5:22:6f:0c:1f:f2:44:a3:62:4d:b5:28:46: 17:d7:71:98:f9:ad:4b:2a:33:26:2f:c2:b9:b2:75: a9:05:5d:a6:7e:78:28:a5:75:24:74:aa:27:22:5f: 8e:0e:9b:23:5b:e7:e8:5a:7b:ff:87:5f:57:d0:c9: 50:3c:5a:8a:6b:63:fc:b3:fa:fc:bb:4f:f7:f9:89: 3f:a8:84:a6:f4:40:9b:09:64:7f:9d:f6:2e:f9:f1: 77:c3:4a:64:33:91:a4:05:d3:8b:1a:db:67:1e:41: cb:46:32:ac:44:7c:72:f7:bf:4b:31:49:7d:d1:68: 23:12:f2:32:a2:32:0e:bd:2e:7b:22:65:f9:e8:fe: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BA:AC:C0:66:4B:59:53:E9:BB:FE:EB:3B:C5:DA:E3:27:88:47:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:43:6b:8f:b9:ff:6a:0e:f5:7c:cf:4b:80:b2:61:fe:88:72: e0:dd:54:b3:56:61:fd:3e:34:27:52:f6:cc:74:c7:e0:44:6d: 91:7b:3e:dc:47:e3:15:54:c3:4f:f3:3e:4f:85:52:2c:9b:7f: 2e:9e:64:05:01:7d:82:e3:7b:76:a8:a8:d4:f2:8b:07:79:14: 2c:5d:d3:a1:21:0c:5b:1b:90:4e:c7:ec:1d:ed:84:af:1c:eb: 2c:91:c8:20:da:51:21:31:78:5f:ec:4f:17:fa:2e:4b:97:7d: ff:47:19:f8:59:93:9c:05:54:c9:57:65:bf:24:03:77:28:e7: e7:b7:06:5b:f0:2d:af:e7:a3:83:e8:92:05:6d:1f:13:69:cd: b5:b6:0d:f7:37:68:14:97:03:b5:28:74:50:e8:43:1e:4c:bf: 9b:21:36:d3:c7:c0:96:9f:40:3e:17:c2:c6:4b:09:e5:8b:d3: 2d:79:c8:e9:44:bd:75:75:48:ef:9a:2e:83:27:f7:d7:ec:c6: 64:f2:2c:20:03:a8:bb:75:ed:d4:1c:b3:8e:14:6d:b5:cd:08: a3:f7:40:e6:2c:74:d3:e1:aa:c0:6d:ba:c6:2a:fb:73:f7:6f: 10:04:82:12:f3:6a:1b:f0:9e:f3:b4:9c:70:9f:e6:06:8c:09: 5f:1d:45:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZOsfg7fp+jwKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDY5MWFlNmUtM2EzOS00ODRmLWEyZTktMTZhYTM0NTE4NjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1apEYyHOfDHWC+fKGMbva7JnGfx6HOfdO8Uh /npYYxh2U5VMXUx/YY1GnWru/drLB34L5POdAWcK3cSnGdfLH76azEcosHnmg8y2 0dnYjkFaLXXShgSbWQNNVcMy05T472P5i7PSeMoOYcrA3pKbvOzXfgRmLZX2xPUi bwwf8kSjYk21KEYX13GY+a1LKjMmL8K5snWpBV2mfngopXUkdKonIl+ODpsjW+fo Wnv/h19X0MlQPFqKa2P8s/r8u0/3+Yk/qISm9ECbCWR/nfYu+fF3w0pkM5GkBdOL GttnHkHLRjKsRHxy979LMUl90WgjEvIyojIOvS57ImX56P4MxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC26rMBmS1lT6bv+6zvF2uMniEfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGM2OWEwZTgtZDg3ZS0z ZmQzLWI4NTEtMjVkMzcwYzdkM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJDa4+5/2oO9XzPS4CyYf6IcuDdVLNWYf0+NCdS9sx0x+BEbZF7PtxH 4xVUw0/zPk+FUiybfy6eZAUBfYLje3aoqNTyiwd5FCxd06EhDFsbkE7H7B3thK8c 6yyRyCDaUSExeF/sTxf6LkuXff9HGfhZk5wFVMlXZb8kA3co5+e3BlvwLa/no4Po kgVtHxNpzbW2Dfc3aBSXA7UodFDoQx5Mv5shNtPHwJafQD4XwsZLCeWL0y15yOlE vXV1SO+aLoMn99fsxmTyLCADqLt17dQcs44UbbXNCKP3QOYsdNPhqsBtusYq+3P3 bxAEghLzahvwnvO0nHCf5gaMCV8dRUo= -----END CERTIFICATE-----Generated at Tue Oct 13 04:16:18 2026 by rpki-client