$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a27e3ae5-1dda-3e60-932d-9d75f5322d84.roa File: a27e3ae5-1dda-3e60-932d-9d75f5322d84.roa (raw, json) Hash identifier: dJyN8iaGUzKzzYFD0NUwYLXRfBSXUtUU080FDBE53uo= Subject key identifier: 3C:D3:D5:94:80:7F:BB:57:F7:10:6E:D8:F3:86:F7:0B:BD:BB:F7:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1B624202862C74F4D03F2540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a27e3ae5-1dda-3e60-932d-9d75f5322d84.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 174.130.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:42:02:86:2c:74:f4:d0:3f:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=ba42af37-80f8-497b-b197-86b69457e023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:43:45:1a:d9:0c:45:96:8d:4c:c9:10:8e:ca: 71:e3:ea:24:4a:87:ad:88:9f:70:41:a9:5d:a9:51: b8:30:9b:92:bd:43:3a:ec:28:da:10:85:92:e5:52: c0:40:50:60:29:2c:30:2d:45:27:29:8f:51:5f:c4: 1e:59:3e:86:0f:aa:a1:cf:4b:e9:ed:e7:c3:8f:5b: bb:e0:ec:56:26:04:7a:94:0e:95:65:54:a5:6b:44: ab:6c:44:33:60:f4:1e:34:eb:25:16:c1:60:c0:f9: da:6c:df:56:71:3a:30:26:7e:46:af:28:82:ee:19: 42:85:90:79:48:5a:f3:90:2b:d3:a8:93:08:30:c6: 22:f8:ee:61:80:c3:5d:8d:77:88:27:5e:ae:ec:d9: f6:a6:dc:4c:b6:9b:41:45:de:22:bb:87:47:ff:10: b9:4c:90:32:f5:31:01:04:84:65:f5:ad:9b:d6:8d: e3:69:25:68:c8:d7:60:10:3a:a2:f0:79:27:f9:07: 4d:5c:3b:22:ae:a6:15:0f:da:77:7e:fc:b0:77:98: 63:e2:3b:fc:c7:c9:f6:e7:ae:59:7b:b0:ea:96:94: 2e:10:48:48:14:fe:d3:6c:55:02:09:3a:e7:14:09: 39:6c:11:99:ae:bc:80:54:c9:75:b3:c3:2e:b9:68: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D3:D5:94:80:7F:BB:57:F7:10:6E:D8:F3:86:F7:0B:BD:BB:F7:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a27e3ae5-1dda-3e60-932d-9d75f5322d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e5:4e:47:16:5e:b5:7a:d0:43:b6:1d:ef:f3:b8:12:3a:59: 37:06:ed:46:8f:d4:01:d7:13:9a:11:f2:cb:11:59:25:db:ba: 2f:ac:00:5d:df:a7:96:2a:e1:9a:87:ba:47:cf:9d:9f:bb:c2: 0f:15:e9:2b:5e:54:f8:b4:a8:e2:4e:af:4e:52:84:d6:43:e9: ef:88:53:e4:8e:ec:45:1c:dd:e5:e8:6e:02:64:99:05:4b:df: 4e:81:0c:21:3e:bc:8d:bb:4f:da:a3:73:e7:b0:09:29:47:09: f1:d1:d4:72:67:24:5e:f2:ae:3b:ba:8e:c6:41:0d:0b:72:d6: 71:e8:9f:46:85:30:6e:5e:b5:81:55:9d:e9:0c:f0:5f:46:e3: b9:29:05:6b:c9:f6:cb:5d:db:31:85:c4:ac:e4:da:20:6e:41: 08:d7:59:11:c4:2f:ff:70:83:fb:1f:94:53:ba:8c:76:d8:bc: 31:61:34:f9:ea:30:43:47:a3:55:f7:ab:de:c1:ae:6f:9a:ca: 77:49:94:a3:c8:4d:3c:1d:45:3b:bc:98:2e:e1:44:e3:37:4d: be:79:0b:96:09:33:f4:e8:10:da:64:4f:4a:41:ca:9a:b9:0f: 55:94:47:6c:6e:5b:c1:cd:1e:89:14:75:9b:fe:96:3f:da:ed: 2f:03:62:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkIChix09NA/JUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YmE0MmFmMzctODBmOC00OTdiLWIxOTctODZiNjk0NTdlMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgENFGtkMRZaNTMkQjspx4+okSoetiJ9wQald qVG4MJuSvUM67CjaEIWS5VLAQFBgKSwwLUUnKY9RX8QeWT6GD6qhz0vp7efDj1u7 4OxWJgR6lA6VZVSla0SrbEQzYPQeNOslFsFgwPnabN9WcTowJn5GryiC7hlChZB5 SFrzkCvTqJMIMMYi+O5hgMNdjXeIJ16u7Nn2ptxMtptBRd4iu4dH/xC5TJAy9TEB BIRl9a2b1o3jaSVoyNdgEDqi8Hkn+QdNXDsirqYVD9p3fvywd5hj4jv8x8n2565Z e7DqlpQuEEhIFP7TbFUCCTrnFAk5bBGZrryAVMl1s8MuuWg51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzT1ZSAf7tX9xBu2POG9wu9u/eTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI3ZTNhZTUtMWRkYS0z ZTYwLTkzMmQtOWQ3NWY1MzIyZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroJbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvlTkcWXrV60EO2He/zuBI6WTcG7UaP1AHXE5oR8ssRWSXbui+sAF3f p5Yq4ZqHukfPnZ+7wg8V6SteVPi0qOJOr05ShNZD6e+IU+SO7EUc3eXobgJkmQVL 306BDCE+vI27T9qjc+ewCSlHCfHR1HJnJF7yrju6jsZBDQty1nHon0aFMG5etYFV nekM8F9G47kpBWvJ9std2zGFxKzk2iBuQQjXWRHEL/9wg/sflFO6jHbYvDFhNPnq MENHo1X3q97Brm+ayndJlKPITTwdRTu8mC7hROM3Tb55C5YJM/ToENpkT0pBypq5 D1WUR2xuW8HNHokUdZv+lj/a7S8DYro= -----END CERTIFICATE-----Generated at Thu Sep 24 15:27:59 2026 by rpki-client