$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12815a3d-ee05-3413-9336-25e381cc22c8.roa File: 12815a3d-ee05-3413-9336-25e381cc22c8.roa (raw, json) Hash identifier: 4cbA9+1x1iTFE0Vi+I7/pxraiALl3D985evGjwJqw04= Subject key identifier: 1D:A6:25:38:14:68:12:83:48:7A:16:A5:65:31:06:DE:C7:C0:D1:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4C3DEA34C643239B3A91F680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12815a3d-ee05-3413-9336-25e381cc22c8.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 7029 IP address blocks: 162.40.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ea:34:c6:43:23:9b:3a:91:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=17caeb64-b0b4-4b0d-8ea8-95fd633c7d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:12:9b:56:51:56:2a:71:4e:b6:91:2a:cb: fb:1c:67:35:af:49:f2:89:db:c8:84:91:64:75:b8: 30:2e:3d:9e:5d:1d:5a:90:fd:ea:9b:fa:71:6e:5e: 71:a7:e3:62:74:91:8b:8b:10:f1:2b:d8:ad:01:d7: f6:aa:53:84:a7:41:82:5c:3e:39:1e:d4:3c:cc:33: af:77:f7:c4:64:88:cc:a2:8e:97:1c:58:bb:63:71: ee:37:2f:ab:ae:c5:cc:6a:5d:24:cb:01:fa:96:03: e9:de:e5:61:43:34:86:b6:42:9b:f6:d4:72:5a:82: 5e:c3:d6:9c:66:26:a6:fc:08:6e:f1:95:9a:fd:6b: 12:87:cd:e4:ff:ce:d9:a2:df:99:77:f6:88:8c:d1: 0f:c3:bc:b7:4d:77:41:b8:14:32:bf:3c:35:d1:2d: 4f:c2:61:f0:01:ab:cd:72:82:e0:94:56:57:b5:21: 2f:60:f0:14:b1:40:a7:13:48:0b:b5:bf:49:f4:73: 1d:30:84:24:33:b8:ba:2d:79:3c:5a:8c:4c:2e:a2: 02:b1:db:a5:ca:24:63:74:e3:7f:1e:ed:57:c1:26: d9:54:a4:15:06:09:d2:ec:99:04:ed:02:25:96:2d: 62:f0:a3:7e:a7:bb:1f:74:86:a0:95:a1:6c:49:ce: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A6:25:38:14:68:12:83:48:7A:16:A5:65:31:06:DE:C7:C0:D1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12815a3d-ee05-3413-9336-25e381cc22c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ce:1f:4f:de:36:0d:cd:c7:a0:dc:05:07:96:a7:dd:9b:18: 9f:ce:2e:65:5a:bc:2c:48:08:c1:c7:73:39:ec:3d:e1:e1:23: 14:58:cd:7c:a0:f7:a6:43:1b:9d:61:fc:8e:2a:f5:98:05:76: 31:61:e0:71:35:1e:66:20:e1:dd:04:07:f2:bb:55:00:9d:74: bc:9f:a5:3e:fa:f1:6c:1d:ae:dc:ef:51:1f:6b:d2:a0:39:34: 9e:d3:8f:86:bb:59:3a:7b:f2:41:c5:e7:2c:65:c5:8a:c9:09: b2:a7:b9:7c:61:8b:34:53:8c:19:73:f4:c1:17:5c:40:d3:ac: 4a:fc:45:c5:e3:8f:d0:8c:27:06:ad:56:db:93:0c:c2:78:ce: 8e:85:09:ca:bb:17:77:14:71:6e:ed:2b:8f:1d:57:1c:af:09: d7:87:a5:79:92:56:60:52:17:89:44:63:9a:cf:e0:d5:74:29: 8c:91:81:17:ce:84:b1:66:66:81:e2:08:0a:10:40:fd:64:0d: 48:ae:b7:8e:37:8d:24:e2:b6:cf:75:bb:a6:90:b8:cc:96:53: db:35:35:57:ca:02:f4:e8:66:55:66:43:bd:84:cb:af:92:7a: be:5a:9d:50:f3:b0:c3:ac:bb:fc:be:29:2c:a0:78:a7:6e:3c: 48:e1:ee:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeo0xkMjmzqR9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTdjYWViNjQtYjBiNC00YjBkLThlYTgtOTVmZDYzM2M3ZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq4Sm1ZRVipxTraRKsv7HGc1r0nyidvIhJFk dbgwLj2eXR1akP3qm/pxbl5xp+NidJGLixDxK9itAdf2qlOEp0GCXD45HtQ8zDOv d/fEZIjMoo6XHFi7Y3HuNy+rrsXMal0kywH6lgPp3uVhQzSGtkKb9tRyWoJew9ac Ziam/Ahu8ZWa/WsSh83k/87Zot+Zd/aIjNEPw7y3TXdBuBQyvzw10S1PwmHwAavN coLglFZXtSEvYPAUsUCnE0gLtb9J9HMdMIQkM7i6LXk8WoxMLqICsdulyiRjdON/ Hu1XwSbZVKQVBgnS7JkE7QIlli1i8KN+p7sfdIaglaFsSc5RLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2mJTgUaBKDSHoWpWUxBt7HwNHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI4MTVhM2QtZWUwNS0z NDEzLTkzMzYtMjVlMzgxY2MyMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoijQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnOH0/eNg3Nx6DcBQeWp92bGJ/OLmVavCxICMHHcznsPeHhIxRYzXyg 96ZDG51h/I4q9ZgFdjFh4HE1HmYg4d0EB/K7VQCddLyfpT768WwdrtzvUR9r0qA5 NJ7Tj4a7WTp78kHF5yxlxYrJCbKnuXxhizRTjBlz9MEXXEDTrEr8RcXjj9CMJwat VtuTDMJ4zo6FCcq7F3cUcW7tK48dVxyvCdeHpXmSVmBSF4lEY5rP4NV0KYyRgRfO hLFmZoHiCAoQQP1kDUiut443jSTits91u6aQuMyWU9s1NVfKAvToZlVmQ72Ey6+S er5anVDzsMOsu/y+KSygeKduPEjh7jc= -----END CERTIFICATE-----Generated at Sat Sep 26 07:45:46 2026 by rpki-client