$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/242507f5-93c5-3711-a3f1-aa4ee0b63bb7.roa File: 242507f5-93c5-3711-a3f1-aa4ee0b63bb7.roa (raw, json) Hash identifier: ztmz03iHnmPrVyA3z6mApX3YvQTgS5V+5BTQ7HvEO+8= Subject key identifier: 01:9E:A9:D2:28:09:8F:0C:02:DB:3A:06:1D:17:E4:28:64:29:E1:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F60932E7C208AD5DCF500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/242507f5-93c5-3711-a3f1-aa4ee0b63bb7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.188.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:60:93:2e:7c:20:8a:d5:dc:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a74517c-71d9-4787-9934-fb63834ec14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:16:98:88:e6:43:42:26:9d:af:85:e9:e7: 0e:b3:67:73:c4:ad:33:6e:7e:0f:57:dd:b6:87:00: 18:db:c8:94:90:71:49:f9:ae:f7:41:e4:d9:17:06: 65:71:ef:a6:39:b1:c2:3e:36:a4:80:5b:0e:e8:74: 2e:8a:88:ad:cd:74:c0:91:bd:f6:a1:e5:e0:6b:61: c5:23:29:1a:f8:c6:c2:34:0c:eb:cb:f9:00:73:b8: e8:d0:13:a8:b0:01:16:83:af:79:08:92:de:67:a4: da:9e:48:c2:48:d8:de:6d:09:9b:36:47:58:4b:35: 62:87:c8:df:ab:ee:76:cc:fe:50:d7:82:c1:84:70: 63:4c:7c:a8:ac:1b:29:09:22:a7:0f:17:b0:1c:65: 51:65:bc:59:e7:3b:53:d1:cc:b8:7c:85:b9:29:6d: 40:0f:7f:60:cb:b8:18:0f:56:7b:78:cd:75:a7:87: 40:52:11:1a:b9:fe:f2:d2:86:58:3f:69:6b:99:6b: 06:2c:81:ce:65:f9:c0:12:ce:b3:5d:34:9e:8a:c3: c6:66:c0:f1:5d:59:01:76:07:cc:bc:64:3a:e7:a3: 1b:8c:df:14:2c:8a:9d:d3:f0:8b:5b:91:f4:17:79: 4f:40:4e:c2:f5:1a:10:13:59:30:04:c3:e5:96:d7: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9E:A9:D2:28:09:8F:0C:02:DB:3A:06:1D:17:E4:28:64:29:E1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/242507f5-93c5-3711-a3f1-aa4ee0b63bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cb:d0:f6:5f:12:a1:b1:e8:09:80:72:fc:a0:6c:36:63:1d: 1b:27:8c:cc:2a:5a:ba:35:3f:2d:ed:bc:42:f7:22:f5:9f:8a: 77:71:50:84:75:7e:7a:34:bb:8f:9c:34:23:22:33:3d:0a:95: 75:db:7b:82:23:5d:1f:dd:ac:7a:bd:1e:94:9c:25:d1:ea:ba: b0:0f:b7:c1:15:a9:1d:b8:d0:c4:a1:ec:28:4c:08:a2:4e:54: d9:a3:5b:5f:32:52:eb:ea:d1:db:a3:7b:f4:7a:6e:f7:e3:fa: a3:a6:54:a2:95:f7:99:f1:96:62:30:ff:61:5f:4b:20:8a:88: 3f:9f:80:8f:48:79:19:7e:f9:c7:3a:27:d4:11:34:12:2d:e6: 2d:b9:41:ee:1f:9c:30:26:04:c8:5f:00:d1:83:81:21:19:9c: d1:1e:97:8b:ea:8b:65:98:a5:45:6b:46:09:56:03:80:28:a5: b0:74:f3:55:77:65:68:06:da:b2:3b:69:bd:ac:da:92:f1:c6: ea:c8:40:c2:c3:d8:df:a4:36:0c:08:27:ab:9c:1f:48:9f:01: 82:9e:39:00:fa:65:56:f5:78:0b:0b:1f:bf:13:2c:74:0b:87: 6a:a7:1b:8d:90:0a:ab:36:03:ce:fe:61:63:8f:a1:92:10:03: 7f:c8:0e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf2CTLnwgitXc9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGE3NDUxN2MtNzFkOS00Nzg3LTk5MzQtZmI2MzgzNGVjMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ8WmIjmQ0Imna+F6ecOs2dzxK0zbn4PV922 hwAY28iUkHFJ+a73QeTZFwZlce+mObHCPjakgFsO6HQuioitzXTAkb32oeXga2HF Iyka+MbCNAzry/kAc7jo0BOosAEWg695CJLeZ6TankjCSNjebQmbNkdYSzVih8jf q+52zP5Q14LBhHBjTHyorBspCSKnDxewHGVRZbxZ5ztT0cy4fIW5KW1AD39gy7gY D1Z7eM11p4dAUhEauf7y0oZYP2lrmWsGLIHOZfnAEs6zXTSeisPGZsDxXVkBdgfM vGQ656MbjN8ULIqd0/CLW5H0F3lPQE7C9RoQE1kwBMPlltccDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGeqdIoCY8MAts6Bh0X5ChkKeH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQyNTA3ZjUtOTNjNS0z NzExLWEzZjEtYWE0ZWUwYjYzYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTL0PZfEqGx6AmAcvygbDZjHRsnjMwqWro1Py3tvEL3IvWfindxUIR1 fno0u4+cNCMiMz0KlXXbe4IjXR/drHq9HpScJdHqurAPt8EVqR240MSh7ChMCKJO VNmjW18yUuvq0duje/R6bvfj+qOmVKKV95nxlmIw/2FfSyCKiD+fgI9IeRl++cc6 J9QRNBIt5i25Qe4fnDAmBMhfANGDgSEZnNEel4vqi2WYpUVrRglWA4AopbB081V3 ZWgG2rI7ab2s2pLxxurIQMLD2N+kNgwIJ6ucH0ifAYKeOQD6ZVb1eAsLH78TLHQL h2qnG42QCqs2A87+YWOPoZIQA3/IDlI= -----END CERTIFICATE-----Generated at Sun Sep 27 19:09:19 2026 by rpki-client