$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c11b6e2-846f-3039-9c54-9c9b269eaaa8.roa File: 5c11b6e2-846f-3039-9c54-9c9b269eaaa8.roa (raw, json) Hash identifier: hQNanbBr50lRW7hEkbeYjgsWr+SDTGrJseeywRYCo+M= Subject key identifier: 42:63:88:58:87:5B:66:05:3D:C2:24:A9:0E:C3:33:A8:A1:58:BC:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49861B290A782ECFEE335FE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c11b6e2-846f-3039-9c54-9c9b269eaaa8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 27338 IP address blocks: 74.10.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:1b:29:0a:78:2e:cf:ee:33:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6544cdcc-9315-4951-8275-f44d45c4745a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:84:0c:f4:7f:37:5e:70:2c:89:8e:3e:c6:bd: c1:8a:12:47:27:fd:ba:88:5d:ae:77:99:bd:c9:29: 0b:af:cb:3a:b8:47:09:56:33:8e:68:ca:a7:1f:87: 6e:c6:78:27:cf:67:a8:14:4a:04:25:0b:0b:c8:4e: 2c:8a:07:33:4b:78:81:06:6c:5a:7d:5e:c9:b7:1e: a3:34:9d:8a:32:61:75:3b:7f:e3:17:e7:df:21:e4: a4:5a:9f:8a:62:94:f0:8c:9d:0a:ba:b3:95:c1:71: e2:6d:c6:94:ad:35:3f:35:92:7c:41:1d:63:c7:ca: b2:27:c1:20:4f:71:12:d6:53:a1:f3:de:dc:04:f9: 40:f9:b0:a1:d5:04:13:2d:70:74:75:84:2f:b4:06: ad:20:58:0a:37:32:bd:c3:fd:bf:f6:42:e1:4b:84: 98:38:80:d5:2d:5e:f4:d2:e1:38:e9:b8:32:c8:2b: a2:23:50:21:c5:ed:fe:60:4b:51:f7:b7:8c:70:2b: a5:c7:b0:21:1f:fb:b7:48:11:8b:5c:fc:b7:6d:0d: fb:90:e4:b7:7b:38:1e:88:db:31:4e:a3:f2:aa:15: 81:b4:dc:47:dd:71:6d:8e:b0:2b:0e:4f:8e:c0:03: e8:59:46:a7:21:a6:ee:19:e8:20:33:7c:4a:7f:cb: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:63:88:58:87:5B:66:05:3D:C2:24:A9:0E:C3:33:A8:A1:58:BC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c11b6e2-846f-3039-9c54-9c9b269eaaa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.10.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:67:90:35:f6:8d:52:7f:cc:2b:4a:df:4e:e9:24:bc:7c:36: 31:2b:47:d6:4d:b3:0c:87:1b:20:c2:56:12:61:cb:39:e7:4b: 66:b4:40:b7:6d:88:81:bb:7a:3e:f3:0a:74:1a:83:d3:10:1d: 60:90:ba:91:68:36:f9:a5:ae:87:93:4e:bf:64:55:16:66:a3: ed:d6:84:09:c9:da:86:e1:89:2e:01:56:05:31:cf:64:7d:70: cd:35:45:00:07:28:7c:04:aa:6f:d0:8c:09:16:e7:79:15:bb: 5d:de:d5:ee:29:7d:ae:c3:81:16:60:16:25:42:5d:2d:c9:8e: f8:79:45:60:aa:76:a9:18:f3:3e:8e:aa:ce:56:ee:e5:d2:1a: 74:b8:b2:59:71:b1:c6:3d:e8:14:94:62:70:a8:6a:6b:bc:bb: a3:92:cc:6d:47:32:5d:af:2f:dd:d6:69:e3:28:b7:26:8a:1d: 98:87:c9:ae:38:c9:a9:96:80:68:52:96:c0:2e:f2:e7:f8:23: cb:14:b9:32:62:dc:8b:32:43:11:30:5f:95:06:5c:52:5e:d9: b5:8f:d9:23:f7:60:7d:bf:21:f2:b3:f4:14:a7:6d:ee:ac:66: 75:8e:7e:cc:64:81:d3:de:7d:96:ee:e7:ac:00:c4:ac:a7:cf: 23:a0:0c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhhspCnguz+4zX+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjU0NGNkY2MtOTMxNS00OTUxLTgyNzUtZjQ0ZDQ1YzQ3NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YQM9H83XnAsiY4+xr3BihJHJ/26iF2ud5m9 ySkLr8s6uEcJVjOOaMqnH4duxngnz2eoFEoEJQsLyE4sigczS3iBBmxafV7Jtx6j NJ2KMmF1O3/jF+ffIeSkWp+KYpTwjJ0KurOVwXHibcaUrTU/NZJ8QR1jx8qyJ8Eg T3ES1lOh897cBPlA+bCh1QQTLXB0dYQvtAatIFgKNzK9w/2/9kLhS4SYOIDVLV70 0uE46bgyyCuiI1Ahxe3+YEtR97eMcCulx7AhH/u3SBGLXPy3bQ37kOS3ezgeiNsx TqPyqhWBtNxH3XFtjrArDk+OwAPoWUanIabuGeggM3xKf8sxZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJjiFiHW2YFPcIkqQ7DM6ihWLxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWMxMWI2ZTItODQ2Zi0z MDM5LTljNTQtOWM5YjI2OWVhYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBnkDX2jVJ/zCtK307pJLx8NjErR9ZNswyHGyDCVhJhyznnS2a0QLdt iIG7ej7zCnQag9MQHWCQupFoNvmlroeTTr9kVRZmo+3WhAnJ2obhiS4BVgUxz2R9 cM01RQAHKHwEqm/QjAkW53kVu13e1e4pfa7DgRZgFiVCXS3Jjvh5RWCqdqkY8z6O qs5W7uXSGnS4sllxscY96BSUYnCoamu8u6OSzG1HMl2vL93WaeMotyaKHZiHya44 yamWgGhSlsAu8uf4I8sUuTJi3IsyQxEwX5UGXFJe2bWP2SP3YH2/IfKz9BSnbe6s ZnWOfsxkgdPefZbu56wAxKynzyOgDBE= -----END CERTIFICATE-----Generated at Tue Sep 29 15:50:53 2026 by rpki-client