$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f52425ad-3ada-3774-9efd-ff6b214b4984.roa File: f52425ad-3ada-3774-9efd-ff6b214b4984.roa (raw, json) Hash identifier: 0nwpsYnmg0zel7M3qeRrlXdWhanwjuMFIXUCfwjj5nM= Subject key identifier: 58:03:49:9F:70:12:25:30:A2:28:7D:3B:F3:5E:9A:6B:AB:6B:68:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F74B82B09071B3597971F8F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f52425ad-3ada-3774-9efd-ff6b214b4984.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 174.131.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:2b:09:07:1b:35:97:97:1f:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=fb6fd30b-88ce-4a9d-80ef-5c3be3e2a92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:0e:ef:bb:73:f7:0b:be:c8:a5:23:1e:9d: 76:45:92:18:16:14:41:5d:1a:aa:7f:ff:ec:2e:18: d3:d7:c7:e9:28:10:85:95:b5:a4:12:e7:9a:01:ab: 62:72:bb:77:18:95:2f:50:02:4d:1f:2f:45:5a:3d: 09:3e:6a:8d:a6:e8:15:13:a8:ef:ff:2a:20:ac:ea: f1:1f:7f:c3:64:7e:54:94:be:e2:c7:62:1c:dc:2a: 1d:12:d8:8f:de:d8:e6:0c:3a:e0:8a:1a:21:9c:7f: fd:cd:8f:38:5b:15:cf:d5:4a:f2:e3:ce:2a:78:15: 10:91:d2:22:8b:49:11:b2:b2:1c:15:55:39:26:f7: 23:40:84:b7:06:f0:70:ba:25:12:af:79:1e:94:69: 63:9e:ae:2d:7a:30:a3:f7:67:b5:c1:c9:68:f8:8e: 25:f3:51:9c:5b:19:c2:ee:e2:06:7c:b9:12:77:57: ed:05:7c:0f:41:fb:4b:c8:19:df:32:be:07:19:6a: 07:0f:c8:78:de:74:3c:15:80:d4:57:c2:16:93:a9: 9e:b8:52:89:13:22:b2:71:6e:ef:b8:f8:e1:16:83: 27:59:24:5f:b7:d8:03:49:a2:1c:8c:63:fc:ff:02: c6:b3:c3:05:40:fa:61:a8:14:0b:33:92:d9:bb:e4: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:03:49:9F:70:12:25:30:A2:28:7D:3B:F3:5E:9A:6B:AB:6B:68:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f52425ad-3ada-3774-9efd-ff6b214b4984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:37:72:f9:f0:d7:de:31:86:83:bf:a5:67:d6:a2:3c:cd:1d: 28:85:d7:3e:c8:25:56:0e:16:f0:e8:ea:df:a1:11:12:68:33: 27:ba:9a:22:d0:68:ed:8d:09:58:61:aa:70:4c:e2:c3:a8:9b: da:b2:b3:17:ee:6e:30:35:54:b7:ef:c2:d2:42:8d:b1:d0:5a: 0c:3f:2c:bd:d8:d5:9b:25:63:c1:15:e8:df:ad:31:bc:8c:e3: c7:11:5a:a8:ca:b1:82:fc:05:d0:db:2f:f2:15:96:6a:00:d6: 75:55:60:86:86:d9:9e:46:59:da:64:55:46:0d:78:82:19:66: 2f:48:98:15:38:9b:40:95:8b:3b:f2:95:5c:b5:d2:81:4c:c1: 05:b7:24:8d:df:cd:18:b8:6b:99:66:45:e3:97:49:1d:b0:f5: ec:90:b1:a6:4f:ac:f8:21:ba:86:1c:f5:b1:c2:50:6b:27:c9: 00:a1:a6:e1:fe:5e:d2:ea:16:b4:ea:0a:17:e2:d8:be:c1:d9: 7b:06:d9:ad:36:41:02:dc:1d:2b:5b:30:59:f6:c2:ad:29:2f: fe:de:53:b4:69:2a:8a:ac:f7:32:57:06:1e:30:06:30:96:b1: 31:58:12:4a:73:bf:0c:84:e0:d8:e3:a5:17:42:3d:81:2e:4c: 8f:33:73:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uCsJBxs1l5cfjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk ZmI2ZmQzMGItODhjZS00YTlkLTgwZWYtNWMzYmUzZTJhOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2IO77tz9wu+yKUjHp12RZIYFhRBXRqqf//s LhjT18fpKBCFlbWkEueaAaticrt3GJUvUAJNHy9FWj0JPmqNpugVE6jv/yogrOrx H3/DZH5UlL7ix2Ic3CodEtiP3tjmDDrgihohnH/9zY84WxXP1Ury484qeBUQkdIi i0kRsrIcFVU5JvcjQIS3BvBwuiUSr3kelGljnq4tejCj92e1wclo+I4l81GcWxnC 7uIGfLkSd1ftBXwPQftLyBnfMr4HGWoHD8h43nQ8FYDUV8IWk6meuFKJEyKycW7v uPjhFoMnWSRft9gDSaIcjGP8/wLGs8MFQPphqBQLM5LZu+QXUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgDSZ9wEiUwoih9O/Nemmura2g7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjUyNDI1YWQtM2FkYS0z Nzc0LTllZmQtZmY2YjIxNGI0OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ3cvnw194xhoO/pWfWojzNHSiF1z7IJVYOFvDo6t+hERJoMye6miLQ aO2NCVhhqnBM4sOom9qysxfubjA1VLfvwtJCjbHQWgw/LL3Y1ZslY8EV6N+tMbyM 48cRWqjKsYL8BdDbL/IVlmoA1nVVYIaG2Z5GWdpkVUYNeIIZZi9ImBU4m0CVizvy lVy10oFMwQW3JI3fzRi4a5lmReOXSR2w9eyQsaZPrPghuoYc9bHCUGsnyQChpuH+ XtLqFrTqChfi2L7B2XsG2a02QQLcHStbMFn2wq0pL/7eU7RpKoqs9zJXBh4wBjCW sTFYEkpzvwyE4NjjpRdCPYEuTI8zc/I= -----END CERTIFICATE-----Generated at Tue Oct 13 10:25:06 2026 by rpki-client