$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3519a5a8-4016-3eed-94c2-653b4471adef.roa File: 3519a5a8-4016-3eed-94c2-653b4471adef.roa (raw, json) Hash identifier: PFtI1u98aat1Eq8LlTzZ+WoYILLoP1EZFnES3KmIslg= Subject key identifier: 7D:37:AE:91:D8:84:CE:0A:88:E4:6A:D2:71:3A:AF:B6:11:9E:F9:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D781B6871E407CCFB5A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3519a5a8-4016-3eed-94c2-653b4471adef.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 205.185.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:78:1b:68:71:e4:07:cc:fb:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=b33362a2-8064-4567-b803-ed4d8bb312ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:12:fc:8b:ac:e7:3d:76:39:be:a0:d7:ef:33: 7b:49:11:42:ad:99:31:f4:9a:69:72:e4:e1:d9:3d: da:e1:06:be:24:f0:0b:02:15:ac:e3:51:9d:36:6f: dd:ac:63:9b:e1:53:e2:32:09:02:d5:06:41:40:c1: 34:da:41:b8:42:07:f9:c3:0a:68:8a:68:c7:fb:ca: 9f:d2:85:2b:08:b5:ee:ea:3a:bc:4b:5c:ed:4d:2c: 30:56:e6:76:32:38:d4:41:3c:12:d2:b0:14:94:5b: d0:8f:c7:ab:0c:f1:e4:db:01:6f:4b:e1:01:4b:bf: d5:85:1a:5c:08:6e:c6:7c:d0:28:c9:7e:29:84:9c: 34:22:a8:e0:fc:a2:13:8a:ef:1d:57:f4:ee:d8:d8: 9a:f0:5a:e1:a3:d0:ab:98:de:f7:9d:19:22:1f:82: 66:e0:e1:b0:92:7f:05:f9:0e:84:b5:2d:55:a2:73: 97:0d:15:f4:ed:f0:95:ed:e6:fc:5c:15:88:04:83: 69:40:30:3f:5a:a5:9c:fe:0b:3f:ab:2f:41:c9:9f: b8:59:c2:b6:37:a4:c8:3f:64:2b:15:0a:e4:b8:2a: fe:6d:dd:77:ff:0b:13:32:19:e9:01:bc:bb:6e:41: 79:06:0d:4b:f4:21:cb:01:25:a4:f5:63:36:49:fa: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:37:AE:91:D8:84:CE:0A:88:E4:6A:D2:71:3A:AF:B6:11:9E:F9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3519a5a8-4016-3eed-94c2-653b4471adef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.185.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:df:ed:7b:6f:a9:0c:25:60:37:6c:37:38:39:21:13:1e:5e: ba:aa:b7:06:0d:72:97:22:a5:12:cf:e8:90:df:d0:64:b2:7a: 39:f4:8e:ca:02:da:88:c4:25:23:b0:14:4d:a6:dc:2f:fd:48: 66:0b:a6:1d:52:b0:2d:ae:4e:85:30:b7:1c:56:ea:ad:51:bc: 2b:4f:e5:51:1b:70:f6:e3:33:17:5a:d2:ec:b6:67:73:7d:b9: 59:4d:e7:3e:b3:e7:0c:e2:96:c1:d1:a3:ae:10:8f:74:93:0b: 1e:33:18:6e:a0:87:73:ff:a4:69:5b:1c:5c:59:ce:99:1d:2a: 98:86:5d:f4:dd:6d:41:fb:24:83:5a:b4:75:a9:0d:31:07:86: af:c0:0b:be:7d:55:24:16:55:d8:f3:35:2b:0b:e6:3c:d0:82: 8a:fe:cf:da:72:c3:1d:c2:46:bb:af:45:25:83:8e:20:8a:af: 60:be:c4:e4:bb:25:bd:38:98:8a:66:9b:96:8e:41:a0:94:8d: cd:45:16:4d:2d:10:69:39:57:aa:5c:40:dc:cb:82:b8:46:ed: 18:27:1e:e2:1a:fa:30:88:e6:f6:bc:96:14:51:ea:c1:94:5a: 46:3d:bb:c2:64:e3:2d:c6:5f:d7:06:af:5d:4c:9d:e1:d4:83: d2:a5:27:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXgbaHHkB8z7WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YjMzMzYyYTItODA2NC00NTY3LWI4MDMtZWQ0ZDhiYjMxMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BL8i6znPXY5vqDX7zN7SRFCrZkx9JppcuTh 2T3a4Qa+JPALAhWs41GdNm/drGOb4VPiMgkC1QZBQME02kG4Qgf5wwpoimjH+8qf 0oUrCLXu6jq8S1ztTSwwVuZ2MjjUQTwS0rAUlFvQj8erDPHk2wFvS+EBS7/VhRpc CG7GfNAoyX4phJw0Iqjg/KITiu8dV/Tu2Nia8Frho9CrmN73nRkiH4Jm4OGwkn8F +Q6EtS1VonOXDRX07fCV7eb8XBWIBINpQDA/WqWc/gs/qy9ByZ+4WcK2N6TIP2Qr FQrkuCr+bd13/wsTMhnpAby7bkF5Bg1L9CHLASWk9WM2SfrZlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH03rpHYhM4KiORq0nE6r7YRnvl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzUxOWE1YTgtNDAxNi0z ZWVkLTk0YzItNjUzYjQ0NzFhZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzbkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXf7XtvqQwlYDdsNzg5IRMeXrqqtwYNcpcipRLP6JDf0GSyejn0jsoC 2ojEJSOwFE2m3C/9SGYLph1SsC2uToUwtxxW6q1RvCtP5VEbcPbjMxda0uy2Z3N9 uVlN5z6z5wzilsHRo64Qj3STCx4zGG6gh3P/pGlbHFxZzpkdKpiGXfTdbUH7JINa tHWpDTEHhq/AC759VSQWVdjzNSsL5jzQgor+z9pywx3CRruvRSWDjiCKr2C+xOS7 Jb04mIpmm5aOQaCUjc1FFk0tEGk5V6pcQNzLgrhG7RgnHuIa+jCI5va8lhRR6sGU WkY9u8Jk4y3GX9cGr11MneHUg9KlJ3Y= -----END CERTIFICATE-----Generated at Fri Oct 2 11:48:47 2026 by rpki-client