$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa File: 4c27ae8a-1fd5-388e-a051-f697661a310c.roa (raw, json) Hash identifier: nbsT9fea1EjNPuE8U7u5maBuqeX3omUbh2OpVTv6bME= Subject key identifier: 12:7F:91:C1:DA:4F:CB:B5:79:C1:39:5C:8E:C8:7C:8B:CD:E9:80:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D93CE1821D303DE5ADB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 174.131.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:93:ce:18:21:d3:03:de:5a:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=dc1f7edf-a801-4024-94d5-80476c3b7380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:11:0c:c4:e1:43:d8:5e:8d:56:bf:9f:0f: 1a:b8:0f:1b:c0:02:32:7c:01:a2:f7:f9:de:0b:26: 8b:2e:6c:be:bb:3a:89:99:9a:d4:e2:b9:3b:23:1b: f3:00:33:39:e2:98:41:6a:08:d4:95:b8:e6:37:27: 89:ad:07:d7:29:af:72:77:89:b4:26:6e:a6:fc:5d: 54:0a:8a:91:6f:20:a0:29:8b:a4:7b:a1:cb:2c:e2: 37:83:d6:cb:7e:84:3e:50:42:13:20:25:39:24:4a: 04:9d:e7:80:6d:76:80:12:ae:55:e1:f9:e5:14:93: 54:07:02:cc:51:27:21:17:9d:4c:10:8e:31:0f:1d: eb:39:15:8f:b8:70:58:9f:60:49:74:7b:94:29:1f: c1:b1:b4:64:e7:cc:64:0d:76:c5:2a:9b:b4:e1:80: 85:d1:ee:bb:a4:28:36:8e:08:e6:68:d2:07:e2:99: 75:e4:e2:3d:88:a8:89:15:57:dd:63:d4:65:df:e5: 56:a3:4a:f9:d9:86:dd:19:6b:ef:af:5e:f7:1a:13: d9:bd:46:ed:96:1b:f5:13:30:90:b2:bc:28:55:21: dd:2f:59:11:30:9a:a9:74:ee:e0:ac:91:c0:67:88: cd:40:c5:16:de:7b:80:aa:39:de:c9:05:94:37:17: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7F:91:C1:DA:4F:CB:B5:79:C1:39:5C:8E:C8:7C:8B:CD:E9:80:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0d:4e:c9:df:cb:f6:0b:3f:e8:f0:b4:c8:17:c5:42:92:37: 75:1e:1b:ae:8e:a7:13:27:f3:87:f8:48:33:9a:c4:67:06:e9: a0:aa:89:30:2a:f8:bc:c2:60:ec:3c:13:ae:0a:bb:19:56:68: a5:d0:93:55:64:60:cc:cb:81:bc:bc:fe:d6:a5:8c:92:53:bc: 15:77:92:c6:2a:53:34:1c:f1:c3:6b:3d:bd:b6:a6:c5:6e:99: 2a:d6:a9:e8:0f:f7:ca:7b:68:82:5e:c1:b2:1e:02:aa:33:c8: f8:dd:77:ec:14:f3:1c:67:e1:35:51:ac:f5:c3:63:23:2b:a1: 14:a7:2e:ca:d3:16:97:3c:64:6e:25:42:43:ca:a8:95:fd:bc: db:89:ec:30:f2:6d:82:97:d9:02:0f:74:49:54:63:f9:0e:31: b3:bf:4e:05:4c:2b:16:4a:1a:f0:30:c1:84:8e:cc:c3:95:43: 2f:1d:6a:c7:2b:53:fc:2c:10:1a:ad:24:9e:bc:e0:d2:4c:4a: 91:c2:97:09:bd:51:84:05:a3:77:f8:8d:b5:fc:01:3f:71:c0: 82:2c:5e:ee:de:36:d1:3a:da:57:5b:fc:49:5a:81:35:f9:a9: 8b:bb:fb:b6:71:d0:12:46:40:77:c2:a0:f7:06:bf:ff:ac:b3: af:30:d7:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZPOGCHTA95a2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZGMxZjdlZGYtYTgwMS00MDI0LTk0ZDUtODA0NzZjM2I3MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHYRDMThQ9hejVa/nw8auA8bwAIyfAGi9/ne CyaLLmy+uzqJmZrU4rk7IxvzADM54phBagjUlbjmNyeJrQfXKa9yd4m0Jm6m/F1U CoqRbyCgKYuke6HLLOI3g9bLfoQ+UEITICU5JEoEneeAbXaAEq5V4fnlFJNUBwLM USchF51MEI4xDx3rORWPuHBYn2BJdHuUKR/BsbRk58xkDXbFKpu04YCF0e67pCg2 jgjmaNIH4pl15OI9iKiJFVfdY9Rl3+VWo0r52YbdGWvvr173GhPZvUbtlhv1EzCQ srwoVSHdL1kRMJqpdO7grJHAZ4jNQMUW3nuAqjneyQWUNxcHbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ/kcHaT8u1ecE5XI7IfIvN6YCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMyN2FlOGEtMWZkNS0z ODhlLWEwNTEtZjY5NzY2MWEzMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUNTsnfy/YLP+jwtMgXxUKSN3UeG66OpxMn84f4SDOaxGcG6aCqiTAq +LzCYOw8E64KuxlWaKXQk1VkYMzLgby8/taljJJTvBV3ksYqUzQc8cNrPb22psVu mSrWqegP98p7aIJewbIeAqozyPjdd+wU8xxn4TVRrPXDYyMroRSnLsrTFpc8ZG4l QkPKqJX9vNuJ7DDybYKX2QIPdElUY/kOMbO/TgVMKxZKGvAwwYSOzMOVQy8dascr U/wsEBqtJJ684NJMSpHClwm9UYQFo3f4jbX8AT9xwIIsXu7eNtE62ldb/ElagTX5 qYu7+7Zx0BJGQHfCoPcGv/+ss68w12g= -----END CERTIFICATE-----Generated at Sat Oct 3 09:01:23 2026 by rpki-client