$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/42ab8dfa-7bed-33ca-8682-2516d4d398e8.roa File: 42ab8dfa-7bed-33ca-8682-2516d4d398e8.roa (raw, json) Hash identifier: 8R1x0MQQMkbdmOCn7FeraRuIbi0UH5AhFZG3sOr+ZZY= Subject key identifier: 84:4C:BF:EC:7B:DD:F5:76:A6:2E:3E:0D:EC:C4:D4:71:5A:2C:FA:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4542803556F378B8A96AFE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/42ab8dfa-7bed-33ca-8682-2516d4d398e8.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 7029 IP address blocks: 174.130.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:80:35:56:f3:78:b8:a9:6a:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=7bfed2b3-4ca3-428c-b0ce-780278b4b89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:75:11:a3:be:36:2b:fe:32:67:fa:1a:fd: 57:fd:27:fc:a1:cb:b4:32:c0:d8:7c:82:f3:30:7b: 2a:6c:6a:9d:83:f7:69:c3:4e:18:69:e3:f9:1e:5d: b6:e7:67:ab:6a:e7:f0:4c:b1:cd:43:1a:e9:fc:f9: c8:b6:84:e1:0f:c8:a7:16:57:25:8e:f7:e4:95:fd: 3d:3d:c0:33:0c:c1:8b:a7:ac:c3:a2:67:e2:d5:cd: c0:5e:e6:1f:3d:b0:0b:fa:7c:e3:7a:ef:2c:59:55: 5c:c9:cb:ef:91:72:24:f6:ca:72:97:e3:10:c0:08: 76:a3:c9:84:80:23:fa:ae:ea:b4:8d:aa:ab:c1:a2: ed:c4:65:1b:3d:53:e7:e0:9f:f0:55:af:ce:8b:34: 55:fe:ad:ff:cf:ce:c5:6b:e9:a6:b6:80:ce:98:e9: 05:a0:a3:7f:cf:37:66:c7:a9:48:ec:c9:98:b3:1c: ae:32:7e:71:4c:64:03:aa:0b:a3:0e:db:76:48:3c: 57:e9:3a:58:0e:d9:0a:6c:92:b4:75:ba:d9:30:93: 32:68:4f:4a:24:7d:62:d3:bf:31:a3:f5:2b:53:93: 96:c0:4f:34:78:a8:6a:37:79:07:a4:b8:25:7d:25: 41:db:c3:07:08:f1:63:e5:be:12:33:b1:0b:d1:38: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4C:BF:EC:7B:DD:F5:76:A6:2E:3E:0D:EC:C4:D4:71:5A:2C:FA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/42ab8dfa-7bed-33ca-8682-2516d4d398e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e5:11:33:91:84:57:e5:a7:7e:59:ef:d3:24:2e:56:34:3e: 83:70:65:6b:ac:97:3b:df:18:8f:a7:b3:41:1d:a4:ab:7d:d0: 1b:21:63:9e:9d:a0:24:2f:58:2e:60:2e:f1:3b:da:b9:00:e4: 86:da:49:5a:bc:3c:97:ee:9b:ef:dc:ca:e5:1a:d7:a9:15:82: 1a:3b:be:35:8c:14:7e:29:58:07:ea:bc:ca:67:a4:fe:44:43: 3e:04:c6:19:79:50:b6:93:01:c5:c4:f2:ff:f4:05:48:9c:2c: b0:e7:db:90:69:9f:d4:cd:77:8b:ed:c7:3e:66:8d:ce:20:f9: e2:37:7b:43:85:e0:2a:fb:72:15:ee:b6:81:2d:ee:4f:e8:82: b6:50:7b:c0:ee:d6:a6:ce:e1:91:a7:b0:93:7c:94:ed:ea:15: 5d:50:de:05:0e:3d:71:ba:f7:c6:e7:65:b1:61:a3:9d:8d:f0: f4:2f:d5:82:08:8a:e0:ed:d1:5a:cf:35:d7:39:55:0c:31:9e: 1c:ee:a4:4e:62:98:5f:99:d8:75:c5:f6:8e:58:96:25:af:3e: 2e:c3:0f:d1:d2:bd:d2:b6:30:2d:e4:62:ca:03:8a:82:ec:07: 11:43:a3:cb:a4:fc:a2:32:0d:45:37:0f:f6:c2:2f:3d:ba:71: 29:d5:f3:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoA1VvN4uKlq/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk N2JmZWQyYjMtNGNhMy00MjhjLWIwY2UtNzgwMjc4YjRiODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fx1EaO+Niv+Mmf6Gv1X/Sf8ocu0MsDYfILz MHsqbGqdg/dpw04YaeP5Hl2252eraufwTLHNQxrp/PnItoThD8inFlcljvfklf09 PcAzDMGLp6zDomfi1c3AXuYfPbAL+nzjeu8sWVVcycvvkXIk9spyl+MQwAh2o8mE gCP6ruq0jaqrwaLtxGUbPVPn4J/wVa/OizRV/q3/z87Fa+mmtoDOmOkFoKN/zzdm x6lI7MmYsxyuMn5xTGQDqgujDtt2SDxX6TpYDtkKbJK0dbrZMJMyaE9KJH1i078x o/UrU5OWwE80eKhqN3kHpLglfSVB28MHCPFj5b4SM7EL0TjiQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRMv+x73fV2pi4+DezE1HFaLPpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDJhYjhkZmEtN2JlZC0z M2NhLTg2ODItMjUxNmQ0ZDM5OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHlETORhFflp35Z79MkLlY0PoNwZWuslzvfGI+ns0EdpKt90BshY56d oCQvWC5gLvE72rkA5IbaSVq8PJfum+/cyuUa16kVgho7vjWMFH4pWAfqvMpnpP5E Qz4Exhl5ULaTAcXE8v/0BUicLLDn25Bpn9TNd4vtxz5mjc4g+eI3e0OF4Cr7chXu toEt7k/ogrZQe8Du1qbO4ZGnsJN8lO3qFV1Q3gUOPXG698bnZbFho52N8PQv1YII iuDt0VrPNdc5VQwxnhzupE5imF+Z2HXF9o5YliWvPi7DD9HSvdK2MC3kYsoDioLs BxFDo8uk/KIyDUU3D/bCLz26cSnV84w= -----END CERTIFICATE-----Generated at Thu Sep 24 22:32:31 2026 by rpki-client