$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a8d978fd-0cdb-317a-8cdc-8e714048be80.roa File: a8d978fd-0cdb-317a-8cdc-8e714048be80.roa (raw, json) Hash identifier: e0uoWK0h5tqvr3E0ALR2vY4pd77+8wA/xEPNq2F0Xsk= Subject key identifier: 10:3C:2F:B4:DA:22:ED:D5:59:1A:06:52:CA:64:86:9B:47:F6:3E:F0 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584F4542824D7814D98275944000 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a8d978fd-0cdb-317a-8cdc-8e714048be80.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 137409 IP address blocks: 173.244.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:82:4d:78:14:d9:82:75:94:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=42c571c1-8779-436b-aac3-fe436f3602b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:08:39:eb:4e:50:5f:fc:62:4b:38:e1:66: 52:65:b9:7a:54:a2:af:67:d0:28:a6:cb:32:2a:1d: 7d:59:1d:f6:86:7c:b1:38:33:cc:db:03:29:47:05: d7:2c:aa:b1:54:89:0e:d8:64:44:f2:8f:40:7e:4b: 13:aa:23:3a:dd:2e:fa:66:71:6e:74:08:74:80:a3: 16:f8:fa:89:a2:47:b7:7c:86:c6:22:b2:7f:d0:c7: e5:b1:f3:fa:f9:9a:a7:7a:15:c7:ae:38:8a:27:53: e8:c0:76:ed:40:9d:56:3b:a4:31:49:de:23:ba:c2: b7:ad:2c:ca:c1:04:38:e1:cb:d0:ab:85:b5:dc:99: 3f:4a:db:ab:8a:f9:8e:33:f1:5c:39:5e:de:e9:7c: 06:ff:07:9d:52:45:26:71:11:66:5e:e9:be:42:6e: ad:86:32:36:c3:b5:d6:3a:22:fa:54:ed:35:cd:fb: 33:b0:b1:44:a6:23:25:f5:3e:59:d9:52:d1:31:4b: e5:1d:9a:39:62:69:6c:b2:28:92:11:2a:86:78:f9: 18:db:d5:97:4d:49:5e:a9:10:94:ec:3b:3f:1e:3c: 0e:8a:09:57:58:5d:e7:72:ff:d4:77:d7:06:b4:ba: 09:76:4a:4d:34:5b:fc:ae:98:d1:23:e0:51:e9:41: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:2F:B4:DA:22:ED:D5:59:1A:06:52:CA:64:86:9B:47:F6:3E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a8d978fd-0cdb-317a-8cdc-8e714048be80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.244.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:38:27:d1:10:70:b0:ca:bf:b5:ba:fb:c7:c9:46:8f:51:ea: b4:e3:43:3b:63:cc:4f:fc:96:d2:cc:7b:85:de:7a:e7:af:ed: a8:a9:d3:6f:21:b0:3b:cc:9b:53:19:80:43:74:09:3a:86:40: 95:44:89:90:8d:95:e9:25:1f:89:60:84:f8:59:5a:3d:47:e7: d1:51:27:02:74:1d:18:8e:84:24:54:8e:dc:41:42:c1:a6:dd: 95:1e:b7:bd:4b:10:dd:6a:c1:b9:e6:ce:bd:13:04:86:23:a2: df:6d:f1:d8:32:1d:0f:a1:03:76:c3:28:46:e3:08:a5:61:6d: c1:52:51:ca:89:46:d7:f1:41:fe:11:60:59:81:b0:6a:00:8d: 3c:22:4b:c6:47:d0:ce:6f:72:bd:19:2f:50:f9:00:18:e9:6a: ee:23:fb:62:0b:0b:99:18:6b:62:a0:de:72:7b:5d:79:08:37: e8:ae:91:32:1c:c2:3b:42:5d:fe:01:b3:aa:c3:60:d7:c2:d5: 24:9f:08:3c:f4:24:73:db:7a:20:b0:a1:a3:47:d5:90:04:98: 7d:75:c4:96:89:37:3f:e3:f1:5b:5c:1f:31:7b:7c:ea:61:94: c5:bc:49:78:fc:65:21:5c:c1:9e:ed:8d:90:8d:bb:0b:2c:6b: f1:63:fd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoJNeBTZgnWUQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NDJjNTcxYzEtODc3OS00MzZiLWFhYzMtZmU0MzZmMzYwMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUoIOetOUF/8Yks44WZSZbl6VKKvZ9Aopssy Kh19WR32hnyxODPM2wMpRwXXLKqxVIkO2GRE8o9AfksTqiM63S76ZnFudAh0gKMW +PqJoke3fIbGIrJ/0MflsfP6+ZqnehXHrjiKJ1PowHbtQJ1WO6QxSd4jusK3rSzK wQQ44cvQq4W13Jk/SturivmOM/FcOV7e6XwG/wedUkUmcRFmXum+Qm6thjI2w7XW OiL6VO01zfszsLFEpiMl9T5Z2VLRMUvlHZo5YmlssiiSESqGePkY29WXTUleqRCU 7Ds/HjwOiglXWF3ncv/Ud9cGtLoJdkpNNFv8rpjRI+BR6UFiDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA8L7TaIu3VWRoGUspkhptH9j7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYThkOTc4ZmQtMGNkYi0z MTdhLThjZGMtOGU3MTQwNDhiZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY4J9EQcLDKv7W6+8fJRo9R6rTjQztjzE/8ltLMe4Xeeuev7aip028h sDvMm1MZgEN0CTqGQJVEiZCNleklH4lghPhZWj1H59FRJwJ0HRiOhCRUjtxBQsGm 3ZUet71LEN1qwbnmzr0TBIYjot9t8dgyHQ+hA3bDKEbjCKVhbcFSUcqJRtfxQf4R YFmBsGoAjTwiS8ZH0M5vcr0ZL1D5ABjpau4j+2ILC5kYa2Kg3nJ7XXkIN+iukTIc wjtCXf4Bs6rDYNfC1SSfCDz0JHPbeiCwoaNH1ZAEmH11xJaJNz/j8VtcHzF7fOph lMW8SXj8ZSFcwZ7tjZCNuwssa/Fj/Qo= -----END CERTIFICATE-----Generated at Thu Sep 24 13:14:04 2026 by rpki-client