$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa File: 39a5344c-552c-36c7-a942-272e3d77ba5d.roa (raw, json) Hash identifier: jz+Fp+a2PB9zNuYEXMNbRLIyxqoNTPk9fuP3DD0nQLg= Subject key identifier: 9C:F3:84:0B:86:49:4E:C9:4C:A5:9D:6F:77:53:B0:6C:69:D1:AF:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B6BC9E0E262B8FF88EC5 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.189.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b6:bc:9e:0e:26:2b:8f:f8:8e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=07990a3b-34bb-4129-8a5e-5fde92f92766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:92:84:ca:29:df:cc:99:ee:20:2f:80:71: 36:95:75:b2:b0:32:c7:03:e9:ae:94:3d:79:df:b2: 92:10:eb:2b:d6:a6:f6:12:83:be:a9:80:6b:01:64: d1:d8:19:c6:24:93:7e:92:ff:48:b5:fd:76:03:cb: 91:9d:cb:e7:81:d7:72:be:54:14:38:62:a0:8e:98: 76:0b:a7:cc:17:0a:4c:3c:43:57:85:75:9c:3e:0b: 97:65:e7:d7:df:ab:ff:be:d2:ef:ee:ed:3d:f4:77: 36:4c:f1:93:57:1a:13:41:ba:61:98:d7:2b:cb:86: 3e:b1:62:2d:ff:71:a5:09:f2:1b:fc:6e:2a:b5:5a: e0:e0:65:51:d4:70:90:88:ed:dd:e8:b2:b3:9e:f7: 9a:d3:dd:f1:5d:30:75:6b:6b:9e:8f:33:7f:9a:f8: 00:82:6c:5f:81:32:5c:fe:55:c1:93:4e:a1:76:2f: a0:2d:bd:a3:92:87:a2:6f:a6:ff:6a:63:6b:6e:86: f2:bf:d6:8a:89:29:9d:93:86:da:c6:e0:4e:36:be: c0:0b:27:3c:15:98:c9:a5:c9:6d:be:ca:0e:e2:b7: a7:92:c9:9f:b2:9f:92:91:e8:8d:88:70:96:eb:c2: b4:6c:29:f7:f4:9e:16:9e:5f:5d:5f:5d:6c:f0:22: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F3:84:0B:86:49:4E:C9:4C:A5:9D:6F:77:53:B0:6C:69:D1:AF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:87:47:d4:27:9f:49:6c:43:44:18:fa:a7:fe:ea:1d:99:62: 77:33:42:8c:21:2f:91:de:d4:b4:c1:c9:ea:3a:33:9a:28:b3: aa:00:cf:ee:bd:1e:09:da:0e:24:33:12:91:f5:6b:05:3a:0d: a5:80:28:2c:04:59:27:5d:1f:fa:8e:89:20:1b:a2:41:76:1a: ff:42:92:70:f5:12:f3:c0:0c:5f:ef:d4:91:64:ca:03:38:f2: 80:fe:28:40:1a:46:fc:c1:90:48:4e:01:01:24:95:78:2a:ad: 19:91:03:45:7d:c6:bf:bc:a9:27:5c:42:f6:5c:af:bd:a3:22: bf:b5:49:82:e7:dc:b8:7b:07:ac:16:94:2b:58:92:c9:cc:0b: 29:1c:41:43:07:9e:1e:9a:d1:5f:88:26:f4:81:16:4e:12:8e: 95:67:c4:aa:40:ce:b7:f8:10:93:c6:58:03:5a:ac:21:49:20: a8:33:0d:34:cf:f3:1d:40:e9:17:9d:25:8f:ff:a5:cb:a5:63: 5b:10:0a:fe:db:0e:79:85:da:44:16:18:6f:6a:46:39:d0:68: e5:22:4d:e4:b1:cc:30:33:a9:13:eb:d4:ff:70:5d:63:79:ef: c2:21:f2:df:27:d0:06:e8:40:ff:55:b0:04:f3:44:ff:1a:2a: b3:91:71:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0ra8ng4mK4/4jsUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MDc5OTBhM2ItMzRiYi00MTI5LThhNWUtNWZkZTkyZjkyNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZyShMop38yZ7iAvgHE2lXWysDLHA+mulD15 37KSEOsr1qb2EoO+qYBrAWTR2BnGJJN+kv9Itf12A8uRncvngddyvlQUOGKgjph2 C6fMFwpMPENXhXWcPguXZefX36v/vtLv7u099Hc2TPGTVxoTQbphmNcry4Y+sWIt /3GlCfIb/G4qtVrg4GVR1HCQiO3d6LKznvea093xXTB1a2uejzN/mvgAgmxfgTJc /lXBk06hdi+gLb2jkoeib6b/amNrbobyv9aKiSmdk4baxuBONr7ACyc8FZjJpclt vsoO4renksmfsp+SkeiNiHCW68K0bCn39J4Wnl9dX11s8CLotQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzzhAuGSU7JTKWdb3dTsGxp0a/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzlhNTM0NGMtNTUyYy0z NmM3LWE5NDItMjcyZTNkNzdiYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCHR9Qnn0lsQ0QY+qf+6h2ZYnczQowhL5He1LTByeo6M5oos6oAz+69 HgnaDiQzEpH1awU6DaWAKCwEWSddH/qOiSAbokF2Gv9CknD1EvPADF/v1JFkygM4 8oD+KEAaRvzBkEhOAQEklXgqrRmRA0V9xr+8qSdcQvZcr72jIr+1SYLn3Lh7B6wW lCtYksnMCykcQUMHnh6a0V+IJvSBFk4SjpVnxKpAzrf4EJPGWANarCFJIKgzDTTP 8x1A6RedJY//pculY1sQCv7bDnmF2kQWGG9qRjnQaOUiTeSxzDAzqRPr1P9wXWN5 78Ih8t8n0AboQP9VsATzRP8aKrORcdI= -----END CERTIFICATE-----Generated at Wed Sep 30 19:46:06 2026 by rpki-client