$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de9db5a2-fb30-39a2-9cd8-0a55a2e52a47.roa File: de9db5a2-fb30-39a2-9cd8-0a55a2e52a47.roa (raw, json) Hash identifier: VJhLnwZjSBskwGs3scaUIrXOST7RFZOX8vcCtngvE/8= Subject key identifier: 9E:09:F6:B2:8C:D3:F6:B4:41:3D:0E:2E:0E:33:9D:56:78:12:A7:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7352CE83EE56BE75E3B98A30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de9db5a2-fb30-39a2-9cd8-0a55a2e52a47.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 174.131.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:ce:83:ee:56:be:75:e3:b9:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=10841a41-7952-495e-9a0d-789a06c77d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:f2:40:f9:ef:57:b1:1c:e4:02:d5:b8:ef: 3c:bc:95:23:62:9b:e4:61:8e:d6:8a:3d:bf:7d:0c: 45:4a:70:64:a6:68:f4:81:0d:94:ac:8f:86:37:45: a6:fc:9d:5a:76:da:c9:27:e3:b0:32:1c:14:25:8b: a3:63:97:f0:c5:c8:d8:63:cf:96:06:c4:70:37:22: 78:02:c9:6c:c8:d2:ea:d1:30:19:37:f5:ec:08:71: 6c:fe:dd:02:74:94:e1:8e:0f:74:55:f5:c4:3c:a8: 00:7d:e3:2f:6d:a6:29:9c:cc:ee:49:31:cd:81:7a: d7:69:d4:51:71:10:34:52:74:55:d2:d4:e6:56:ad: f7:8b:6d:29:59:af:31:d8:60:4d:c4:e0:dc:fb:f1: 5a:77:ed:ce:76:00:89:1b:56:19:65:4c:53:5f:e0: 4b:7f:c5:49:a1:07:dd:9a:c7:92:b0:ea:4f:86:86: 4b:1f:1c:87:86:5f:05:ae:2b:93:72:5f:e0:21:13: 86:7e:dd:13:d0:2e:50:6f:86:cc:61:ef:c2:9d:8a: 70:bf:9c:28:5d:e6:36:bb:9c:31:ec:cf:de:56:7d: 61:72:2e:e7:58:1b:1d:3d:95:a4:c0:2e:db:4d:4a: 3c:ef:f0:89:14:68:a9:03:a5:eb:e2:08:9c:52:c1: 73:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:09:F6:B2:8C:D3:F6:B4:41:3D:0E:2E:0E:33:9D:56:78:12:A7:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de9db5a2-fb30-39a2-9cd8-0a55a2e52a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:33:22:8b:ca:47:22:ef:c3:fe:bd:c0:d4:66:7f:ff:0a:03: ec:de:2a:72:7f:85:7a:ef:33:2f:93:0d:a4:8d:a7:d9:40:f7: 9d:da:2b:e8:fd:fd:34:fe:e6:cc:71:4c:52:94:65:7f:8b:2f: c5:f4:ef:05:c8:da:f7:71:a8:c3:f5:df:15:b8:a4:a3:2d:f2: 6b:3c:53:70:0e:94:ab:0d:cb:1b:60:43:6c:93:44:ee:0f:a2: 72:0d:7a:fb:64:e9:8b:7a:5f:cd:6c:55:ea:ba:25:aa:d4:5a: a5:08:e1:65:06:3e:6c:f0:2a:d0:90:a1:a2:be:da:24:f0:86: 64:27:49:61:16:3d:76:ad:dd:1e:da:d4:d2:c5:43:42:d6:3d: f0:25:db:8d:3c:23:ba:b0:52:d4:b1:22:be:6c:50:5e:de:7b: c7:ea:7a:18:92:43:93:8e:e3:18:e8:76:15:48:8c:fe:e7:68: 4f:39:87:0d:92:03:bd:12:ed:83:0b:ea:21:e5:75:bf:4d:d0: 88:bb:47:61:36:f8:f9:ae:37:3e:81:38:6a:68:16:aa:c3:d6: 8d:0c:c7:4b:4e:f4:74:09:e8:70:76:ad:e3:48:e4:7e:34:7e: dc:6b:e1:9c:4c:56:d1:98:87:ed:45:5a:8b:ef:b1:f8:bf:ee: 4f:61:31:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUs6D7la+deO5ijAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk MTA4NDFhNDEtNzk1Mi00OTVlLTlhMGQtNzg5YTA2Yzc3ZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/TyQPnvV7Ec5ALVuO88vJUjYpvkYY7Wij2/ fQxFSnBkpmj0gQ2UrI+GN0Wm/J1adtrJJ+OwMhwUJYujY5fwxcjYY8+WBsRwNyJ4 AslsyNLq0TAZN/XsCHFs/t0CdJThjg90VfXEPKgAfeMvbaYpnMzuSTHNgXrXadRR cRA0UnRV0tTmVq33i20pWa8x2GBNxODc+/Fad+3OdgCJG1YZZUxTX+BLf8VJoQfd mseSsOpPhoZLHxyHhl8FriuTcl/gIROGft0T0C5Qb4bMYe/CnYpwv5woXeY2u5wx 7M/eVn1hci7nWBsdPZWkwC7bTUo87/CJFGipA6Xr4gicUsFzwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4J9rKM0/a0QT0OLg4znVZ4Eqd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGU5ZGI1YTItZmIzMC0z OWEyLTljZDgtMGE1NWEyZTUyYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHczIovKRyLvw/69wNRmf/8KA+zeKnJ/hXrvMy+TDaSNp9lA953aK+j9 /TT+5sxxTFKUZX+LL8X07wXI2vdxqMP13xW4pKMt8ms8U3AOlKsNyxtgQ2yTRO4P onINevtk6Yt6X81sVeq6JarUWqUI4WUGPmzwKtCQoaK+2iTwhmQnSWEWPXat3R7a 1NLFQ0LWPfAl2408I7qwUtSxIr5sUF7ee8fqehiSQ5OO4xjodhVIjP7naE85hw2S A70S7YML6iHldb9N0Ii7R2E2+PmuNz6BOGpoFqrD1o0Mx0tO9HQJ6HB2reNI5H40 ftxr4ZxMVtGYh+1FWovvsfi/7k9hMfY= -----END CERTIFICATE-----Generated at Tue Oct 13 04:13:41 2026 by rpki-client