$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa File: 25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa (raw, json) Hash identifier: GZCfSiTEbgb+37z5lcHKvoVR94qLGXx5UPxQjkhxxC0= Subject key identifier: D2:33:90:56:A9:F2:E5:A3:E4:E9:9E:9E:4C:E7:67:5B:B6:85:78:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F154A667068A043763440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.191.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:15:4a:66:70:68:a0:43:76:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a75804f6-677b-4f83-a74d-ae7fbb76396e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:08:0b:85:ea:6c:9d:cd:61:fc:d8:d7:88: 74:ad:f5:e4:91:6e:d3:ef:60:8f:df:06:f4:8a:43: a1:0c:9c:21:b4:35:da:5a:72:e5:28:d8:61:72:71: 8d:ab:e8:d1:08:17:cf:72:80:15:43:d6:90:74:1e: cf:a9:f4:72:bc:68:07:d0:9f:b0:63:5c:c8:d3:7d: da:e3:06:22:e6:07:0e:12:a9:90:37:44:c6:6a:fa: 3e:cb:57:72:7f:23:a4:2f:dc:7d:55:28:49:4b:1d: cc:77:13:87:1d:c1:ec:27:0e:03:96:b3:10:d5:30: 76:e3:82:b5:60:7a:c2:14:81:de:38:f6:99:b1:8d: 20:5e:65:f6:26:31:9e:2b:a1:7b:1a:c6:7f:6c:a7: 76:8c:d6:3a:2a:f9:5a:13:10:0f:2c:7e:01:8b:c2: da:46:75:7d:97:bb:9f:a6:76:a0:22:dc:40:41:0a: ff:5e:99:6e:ae:86:30:e3:86:07:61:aa:95:18:43: a2:63:9b:c6:d3:87:ad:b6:7b:bd:84:81:e8:df:f0: 54:b9:1b:d7:03:9f:84:ff:52:15:95:c3:de:16:9f: 33:87:12:b3:28:42:c6:4a:ce:e3:3b:7f:e5:cf:d1: 4b:86:0f:78:63:53:06:c2:2f:4f:66:a6:70:84:b1: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:33:90:56:A9:F2:E5:A3:E4:E9:9E:9E:4C:E7:67:5B:B6:85:78:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:73:ab:47:6c:8c:9d:f4:34:9e:13:fb:83:53:e2:39:14:46: 50:42:a2:9f:f5:8e:58:fd:71:f2:05:be:e3:63:27:1c:6a:1c: 29:7d:09:2e:2d:02:6a:b0:26:e8:15:f7:b5:ba:65:95:fa:dd: a3:97:bc:7a:13:78:89:82:84:8f:6f:f6:d8:30:f3:bb:74:57: 75:99:12:ab:84:ec:f5:84:ac:81:be:9c:c1:1d:8e:4c:1a:a2: 88:20:02:1a:55:ca:d5:e6:e7:0f:f0:25:44:bd:84:c8:b0:88: 80:06:ac:09:e8:a1:61:09:0d:6b:ce:c1:08:f3:65:ef:82:9a: 19:cd:be:e7:8e:b2:64:2d:92:bb:c9:57:3f:57:d5:23:7a:21: 69:01:03:73:9e:1b:9a:1e:43:3e:eb:e7:ab:d2:27:2d:5a:ab: 8b:57:62:74:51:80:e0:80:ec:7c:f1:2f:5c:dc:37:90:45:4b: 21:43:a6:cf:16:3a:8e:ff:e9:12:fd:65:d8:9f:df:42:6e:9f: b6:1b:48:38:c4:dd:53:9b:e7:6a:8d:a1:7a:f3:40:79:d3:f2: bc:16:a5:d9:8a:7a:36:3a:4e:79:4d:32:67:cb:60:be:c3:1b: e3:56:29:73:f7:9f:be:49:96:b9:2e:7c:f5:8e:75:db:6f:e3: 49:e7:07:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxVKZnBooEN2NEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTc1ODA0ZjYtNjc3Yi00ZjgzLWE3NGQtYWU3ZmJiNzYzOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4IC4XqbJ3NYfzY14h0rfXkkW7T72CP3wb0 ikOhDJwhtDXaWnLlKNhhcnGNq+jRCBfPcoAVQ9aQdB7PqfRyvGgH0J+wY1zI033a 4wYi5gcOEqmQN0TGavo+y1dyfyOkL9x9VShJSx3MdxOHHcHsJw4DlrMQ1TB244K1 YHrCFIHeOPaZsY0gXmX2JjGeK6F7GsZ/bKd2jNY6KvlaExAPLH4Bi8LaRnV9l7uf pnagItxAQQr/XpluroYw44YHYaqVGEOiY5vG04ettnu9hIHo3/BUuRvXA5+E/1IV lcPeFp8zhxKzKELGSs7jO3/lz9FLhg94Y1MGwi9PZqZwhLE6rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIzkFap8uWj5OmenkznZ1u2hXhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjVmMjVlMmQtMmI3Yi0z ZjdlLTlmNjgtNTA1M2QxYTdmZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFzq0dsjJ30NJ4T+4NT4jkURlBCop/1jlj9cfIFvuNjJxxqHCl9CS4t AmqwJugV97W6ZZX63aOXvHoTeImChI9v9tgw87t0V3WZEquE7PWErIG+nMEdjkwa ooggAhpVytXm5w/wJUS9hMiwiIAGrAnooWEJDWvOwQjzZe+CmhnNvueOsmQtkrvJ Vz9X1SN6IWkBA3OeG5oeQz7r56vSJy1aq4tXYnRRgOCA7HzxL1zcN5BFSyFDps8W Oo7/6RL9Zdif30Jun7YbSDjE3VOb52qNoXrzQHnT8rwWpdmKejY6TnlNMmfLYL7D G+NWKXP3n75JlrkufPWOddtv40nnBzw= -----END CERTIFICATE-----Generated at Fri Sep 25 10:42:57 2026 by rpki-client