$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa File: e38090fc-da46-3531-9381-e5b4953d080a.roa (raw, json) Hash identifier: FrP2yRYukwyza04XneszrSOIoChdrAmoD7IseXf+dDY= Subject key identifier: B8:C7:A4:33:26:02:01:5E:B1:A6:9D:6E:92:15:3E:64:B1:5C:55:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F498AAAC1DE4DBB070F836980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.188.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:aa:c1:de:4d:bb:07:0f:83:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ab07f2b3-c61d-41be-a7e6-f8604e23aa6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:8c:40:64:96:f6:cd:c5:2c:fc:40:b4:00: 65:c0:51:de:a2:7d:57:02:6f:19:5a:60:3b:db:1c: e8:79:0e:ea:ec:39:19:88:71:1e:95:a2:1d:1c:9f: 67:af:82:d5:95:55:db:61:e0:af:a8:be:3c:fd:87: c6:45:dc:b0:45:04:3f:e0:67:60:61:2c:fa:c9:70: 48:5b:a0:4b:79:69:82:15:89:b5:fb:4b:e7:0a:1d: e4:21:da:b5:d2:a6:61:93:e8:6a:83:cd:18:63:8c: c2:c1:f4:f4:b1:39:e1:a5:90:2e:72:22:4d:5c:32: 08:a8:b9:2e:e6:e8:2a:91:10:06:57:1d:99:63:a5: 76:02:bc:84:80:e1:3a:39:65:3a:f5:76:79:c6:ad: 5c:d9:61:b9:64:bb:61:5b:8e:37:1c:ed:99:94:ae: 72:6a:17:20:5b:6a:ca:2b:6d:a7:05:d5:c0:51:52: e4:82:5a:2b:72:dd:5e:5a:16:96:68:a7:13:f3:06: dd:35:af:46:80:a0:2e:ef:75:82:88:ce:f7:97:4f: f9:81:39:f2:8a:db:db:cd:c3:46:e9:0b:1c:e2:23: 75:8a:e2:d2:fa:e1:fd:01:1f:48:90:b0:6d:77:21: f1:08:91:e4:b6:19:a1:31:64:75:63:74:37:af:3b: 42:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C7:A4:33:26:02:01:5E:B1:A6:9D:6E:92:15:3E:64:B1:5C:55:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:31:3b:3b:20:c5:2f:e7:e4:52:5a:9e:b9:dd:8a:aa:3b:c4: 46:7e:b2:df:dd:99:ce:09:35:3a:73:24:29:83:1f:1c:d8:0f: 97:69:ef:9e:c6:8e:bb:1e:c3:19:a3:1d:f0:8c:0b:cb:69:e4: 7b:30:79:4a:d8:ac:38:ec:9e:8a:4d:b6:6e:d3:3d:43:62:a3: 77:21:f7:dc:4d:5e:af:90:a3:7e:65:af:ff:cb:14:0c:3b:4d: d0:be:8f:d1:e3:15:fe:59:4c:88:32:b0:cd:ce:cb:c1:05:88: 42:a2:cd:0f:51:99:db:ff:7d:3e:a6:a9:d0:de:85:a5:53:be: 92:a4:ae:d7:f7:6f:9e:4a:2b:92:24:22:fd:2f:fe:cb:5b:a2: dd:ec:71:c4:56:2e:e2:f7:53:68:4c:be:9b:e6:04:11:86:2a: ce:82:68:1d:db:26:c5:3b:e6:ce:9f:8b:83:17:2d:c5:c4:e1: 31:44:30:c2:8d:32:ee:0d:04:3b:c7:53:34:2d:c2:2f:23:c0: 68:c8:9e:70:c0:c5:06:6e:2e:4d:23:a1:7d:46:9b:a1:c7:be: 97:e2:75:a8:aa:99:3e:f3:35:a7:71:c3:9d:2c:9f:92:8e:3c: 8d:e2:1c:14:98:7a:ad:29:86:84:af:a0:16:cc:76:24:03:b0: 3b:af:cb:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiqrB3k27Bw+DaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWIwN2YyYjMtYzYxZC00MWJlLWE3ZTYtZjg2MDRlMjNhYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFyMQGSW9s3FLPxAtABlwFHeon1XAm8ZWmA7 2xzoeQ7q7DkZiHEelaIdHJ9nr4LVlVXbYeCvqL48/YfGRdywRQQ/4GdgYSz6yXBI W6BLeWmCFYm1+0vnCh3kIdq10qZhk+hqg80YY4zCwfT0sTnhpZAuciJNXDIIqLku 5ugqkRAGVx2ZY6V2AryEgOE6OWU69XZ5xq1c2WG5ZLthW443HO2ZlK5yahcgW2rK K22nBdXAUVLkglorct1eWhaWaKcT8wbdNa9GgKAu73WCiM73l0/5gTnyitvbzcNG 6Qsc4iN1iuLS+uH9AR9IkLBtdyHxCJHkthmhMWR1Y3Q3rztCOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjHpDMmAgFesaadbpIVPmSxXFX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTM4MDkwZmMtZGE0Ni0z NTMxLTkzODEtZTViNDk1M2QwODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUxOzsgxS/n5FJanrndiqo7xEZ+st/dmc4JNTpzJCmDHxzYD5dp757G jrsewxmjHfCMC8tp5HsweUrYrDjsnopNtm7TPUNio3ch99xNXq+Qo35lr//LFAw7 TdC+j9HjFf5ZTIgysM3Oy8EFiEKizQ9Rmdv/fT6mqdDehaVTvpKkrtf3b55KK5Ik Iv0v/stbot3sccRWLuL3U2hMvpvmBBGGKs6CaB3bJsU75s6fi4MXLcXE4TFEMMKN Mu4NBDvHUzQtwi8jwGjInnDAxQZuLk0joX1Gm6HHvpfidaiqmT7zNadxw50sn5KO PI3iHBSYeq0phoSvoBbMdiQDsDuvy2A= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:23 2026 by rpki-client