$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d1e33bb-19bd-300f-bcce-f1102faa5f68.roa File: 2d1e33bb-19bd-300f-bcce-f1102faa5f68.roa (raw, json) Hash identifier: 6UINlug+fXVgha1z61KfETG+k/A8EzqjCdog5f80djU= Subject key identifier: 76:D8:60:16:B7:E6:07:F1:6C:E3:A0:18:BE:95:72:FA:A1:89:8D:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4974593AD829F40B2E2E8840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d1e33bb-19bd-300f-bcce-f1102faa5f68.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.188.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:59:3a:d8:29:f4:0b:2e:2e:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e4581b3a-8ef9-4b0f-ab92-3856ecbea0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:d4:d5:3f:9e:99:15:48:90:54:a2:e0:46: 33:16:20:48:05:6d:b7:01:4c:18:fb:0c:0a:b7:92: 07:b0:6c:42:0c:ec:bf:c9:6d:fe:c1:54:f2:a0:ac: f2:e1:90:2c:9c:39:09:86:dd:96:15:70:21:6b:c7: f4:53:80:4f:7c:c9:29:a1:f4:7c:20:be:8f:53:a7: 3b:aa:32:3e:42:3d:60:cb:68:cf:44:c5:ad:de:e8: 20:7d:cd:57:da:5c:e7:0a:d7:d2:98:90:78:48:6a: 97:36:1d:ca:ed:1d:d2:31:9f:bf:80:a7:6c:c9:36: 05:51:94:6e:9e:c1:ed:f6:3e:43:5c:44:17:5b:0f: 15:72:4f:b3:5f:31:60:89:73:80:0c:75:1a:b7:22: 44:fb:a6:3f:d3:92:c0:e9:89:cb:39:49:ef:fc:1d: 0c:9b:20:d0:89:88:6d:fc:84:71:5e:08:f8:39:d4: 15:ee:b7:ae:3f:4e:6d:50:48:fd:4e:fe:68:cb:12: de:6c:3f:40:f3:fd:99:df:e5:22:2f:a5:eb:4e:46: 32:b0:f9:10:5d:51:26:94:7c:ee:51:ff:7b:fe:e6: 01:e0:93:c4:16:88:b1:ce:8e:0a:f7:41:12:65:1a: 5e:6c:0b:7f:98:07:b5:4a:05:cf:89:f8:45:64:6e: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D8:60:16:B7:E6:07:F1:6C:E3:A0:18:BE:95:72:FA:A1:89:8D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d1e33bb-19bd-300f-bcce-f1102faa5f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:37:cc:76:2a:de:a9:6b:49:e1:d7:b7:32:8b:06:26:03:8a: 3d:19:cb:db:ac:1f:a5:d2:de:c9:d3:e0:48:11:d1:74:da:65: 57:4e:89:7a:d7:99:27:24:6a:2a:24:ed:7e:ec:79:31:2d:8b: 29:11:29:91:33:de:4d:eb:02:20:5a:5e:b9:83:f6:a6:39:b3: 6d:63:33:9c:2e:80:44:e9:5a:b4:2a:00:80:35:1d:ea:74:0b: 9b:31:58:c9:d0:40:ff:a0:97:34:12:4f:66:1f:61:e5:aa:ae: 3a:de:8d:4f:8d:96:53:d5:6d:2d:22:26:ad:a7:ac:c2:fa:c6: d2:74:79:8e:37:76:4b:56:e2:f6:2a:25:b3:26:2a:54:9c:00: 51:08:26:4f:22:17:89:7e:67:44:fd:f3:63:dc:c0:86:94:43: 29:b7:bd:1b:dd:7a:17:87:77:97:8d:a6:00:71:a2:85:28:61: 3b:c8:fb:8f:96:51:69:b8:ed:dd:39:ee:bb:62:9d:16:ee:c3: b2:cf:1b:9e:70:0d:34:0c:a7:1d:58:46:7e:2c:c7:5b:96:3c: be:1d:ed:7d:3d:84:aa:86:b0:ed:8c:b2:ae:74:83:06:11:06: 21:cc:16:24:41:59:b8:36:b1:76:80:3f:90:45:b3:2b:3f:94: 50:d1:79:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFk62Cn0Cy4uiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTQ1ODFiM2EtOGVmOS00YjBmLWFiOTItMzg1NmVjYmVhMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5rU1T+emRVIkFSi4EYzFiBIBW23AUwY+wwK t5IHsGxCDOy/yW3+wVTyoKzy4ZAsnDkJht2WFXAha8f0U4BPfMkpofR8IL6PU6c7 qjI+Qj1gy2jPRMWt3uggfc1X2lznCtfSmJB4SGqXNh3K7R3SMZ+/gKdsyTYFUZRu nsHt9j5DXEQXWw8Vck+zXzFgiXOADHUatyJE+6Y/05LA6YnLOUnv/B0MmyDQiYht /IRxXgj4OdQV7reuP05tUEj9Tv5oyxLebD9A8/2Z3+UiL6XrTkYysPkQXVEmlHzu Uf97/uYB4JPEFoixzo4K90ESZRpebAt/mAe1SgXPifhFZG5ijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbYYBa35gfxbOOgGL6VcvqhiY3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQxZTMzYmItMTliZC0z MDBmLWJjY2UtZjExMDJmYWE1ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbwBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg3zHYq3qlrSeHXtzKLBiYDij0Zy9usH6XS3snT4EgR0XTaZVdOiXrX mSckaiok7X7seTEtiykRKZEz3k3rAiBaXrmD9qY5s21jM5wugETpWrQqAIA1Hep0 C5sxWMnQQP+glzQST2YfYeWqrjrejU+NllPVbS0iJq2nrML6xtJ0eY43dktW4vYq JbMmKlScAFEIJk8iF4l+Z0T982PcwIaUQym3vRvdeheHd5eNpgBxooUoYTvI+4+W UWm47d057rtinRbuw7LPG55wDTQMpx1YRn4sx1uWPL4d7X09hKqGsO2Msq50gwYR BiHMFiRBWbg2sXaAP5BFsys/lFDReUk= -----END CERTIFICATE-----Generated at Sun Sep 27 08:17:32 2026 by rpki-client