$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa File: fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa (raw, json) Hash identifier: o3hBB3HOtD1x57IyVyX9vNNhOlJwgr64XQ5f5a8BMYs= Subject key identifier: 1E:0A:B4:47:59:F9:60:89:BA:41:AD:BD:42:3C:0B:FA:F7:47:44:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D9810D1A68E44B2D9C700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 30080 IP address blocks: 74.8.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:98:10:d1:a6:8e:44:b2:d9:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=99d5b78e-96ed-4c9a-839c-84d8f222e9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:43:f0:41:a2:6a:c0:1c:50:dc:51:0c:29:9c: 1c:b7:62:05:bc:04:20:1b:29:66:45:6b:60:5b:87: ab:0c:b5:f9:f2:5f:68:26:f1:4f:ed:6a:8f:9f:97: 73:fb:95:7a:a1:fa:88:69:ab:85:b9:0f:c3:75:00: f9:3a:c9:3a:2b:b0:b2:e9:29:84:77:2c:77:fa:16: 45:a2:0c:9b:25:17:11:f7:65:dd:01:0f:30:9f:23: 06:62:bd:60:5f:a5:a1:b2:de:76:0e:5f:28:c6:e7: 5a:c1:2e:52:74:af:2e:9e:b0:fc:a8:98:08:6c:f9: 4f:a2:30:dc:f1:cf:4c:f7:c7:8c:21:63:be:fe:25: 02:86:15:24:a6:7b:51:4c:11:85:7b:e7:3d:c2:c4: b8:d2:09:e5:27:aa:77:29:60:cb:ff:af:59:2e:d5: dc:00:8b:e0:38:90:ae:fd:b6:8c:c7:10:23:58:eb: ec:93:cb:75:03:be:dd:ea:00:45:c0:be:2c:3d:32: 98:34:95:c5:d8:29:9e:88:f9:65:28:3d:ad:0e:6e: ed:f0:73:b3:47:e3:e3:88:c7:8b:d7:9b:ff:99:b6: 03:a1:fd:ca:0f:a9:d9:b8:8c:04:70:b1:d9:43:fa: f9:6b:c1:6c:5d:b5:97:e4:d4:05:fc:01:99:41:70: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0A:B4:47:59:F9:60:89:BA:41:AD:BD:42:3C:0B:FA:F7:47:44:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4a:4e:9d:ff:5a:c5:60:cc:f2:ae:e2:6b:9b:fc:c3:8a:7a: 61:07:9e:13:70:bf:6d:7c:4f:b3:f7:39:8c:b1:f5:b5:04:d7: 56:db:21:db:d6:d7:6a:61:6e:cb:94:36:45:be:72:07:2a:df: ff:ee:b2:d1:a6:66:de:42:51:82:58:73:a0:36:32:fc:45:99: 36:33:e8:8b:c3:9f:6e:c8:45:ac:54:31:23:0c:d8:f0:e1:62: 92:7e:c6:d3:e8:57:63:69:06:ef:fe:41:95:0d:b6:58:ab:30: 03:e4:6a:f5:19:48:ed:41:79:1b:8e:3d:d7:0a:04:04:b9:6b: 3f:9a:fd:93:da:dd:9f:4b:11:56:4e:87:3f:51:1f:92:a4:b7: b3:22:6f:e7:df:52:15:ab:5b:42:d3:ff:fb:2c:ce:69:0c:df: b3:33:cd:ee:fa:1a:a2:82:43:be:14:63:4b:45:1b:95:25:05: 25:7f:1f:13:26:58:d6:ff:c0:a3:91:fc:82:3d:8a:0f:95:c4: 12:53:16:e8:f1:85:c6:b2:f0:1d:d8:5e:c9:a6:37:f4:f1:e2: b9:70:ae:d1:01:a8:3b:17:85:48:2c:39:fa:36:db:4d:5a:37: b1:97:dc:e1:ab:24:f6:96:4d:bd:1d:f3:5a:1f:15:07:d6:3f: f0:9a:11:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZgQ0aaORLLZxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OTlkNWI3OGUtOTZlZC00YzlhLTgzOWMtODRkOGYyMjJlOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UPwQaJqwBxQ3FEMKZwct2IFvAQgGylmRWtg W4erDLX58l9oJvFP7WqPn5dz+5V6ofqIaauFuQ/DdQD5Osk6K7Cy6SmEdyx3+hZF ogybJRcR92XdAQ8wnyMGYr1gX6Whst52Dl8oxudawS5SdK8unrD8qJgIbPlPojDc 8c9M98eMIWO+/iUChhUkpntRTBGFe+c9wsS40gnlJ6p3KWDL/69ZLtXcAIvgOJCu /baMxxAjWOvsk8t1A77d6gBFwL4sPTKYNJXF2CmeiPllKD2tDm7t8HOzR+PjiMeL 15v/mbYDof3KD6nZuIwEcLHZQ/r5a8FsXbWX5NQF/AGZQXDmkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4KtEdZ+WCJukGtvUI8C/r3R0RhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmRjY2QyYzctY2M5Yi0z YTExLWJjYjgtZWViNmU2MDU1ZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASggkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBKTp3/WsVgzPKu4mub/MOKemEHnhNwv218T7P3OYyx9bUE11bbIdvW 12phbsuUNkW+cgcq3//ustGmZt5CUYJYc6A2MvxFmTYz6IvDn27IRaxUMSMM2PDh YpJ+xtPoV2NpBu/+QZUNtlirMAPkavUZSO1BeRuOPdcKBAS5az+a/ZPa3Z9LEVZO hz9RH5Kkt7Mib+ffUhWrW0LT//sszmkM37Mzze76GqKCQ74UY0tFG5UlBSV/HxMm WNb/wKOR/II9ig+VxBJTFujxhcay8B3YXsmmN/Tx4rlwrtEBqDsXhUgsOfo2201a N7GX3OGrJPaWTb0d81ofFQfWP/CaEVU= -----END CERTIFICATE-----Generated at Tue Oct 13 04:14:18 2026 by rpki-client