$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa File: acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa (raw, json) Hash identifier: +8RN0leS4sUd0k6kXvgeW0PsuuLFqwENFTDSUh1H4zU= Subject key identifier: 1D:86:7E:C1:E7:1F:23:7E:C9:D8:C5:BE:E6:4B:91:63:8D:E4:02:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F14BF18FAD9B225911480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.185.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:14:bf:18:fa:d9:b2:25:91:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e4a42ac9-b749-42f5-a43b-42eb8c9ffa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c9:7c:fb:49:e2:ed:67:d8:19:c7:98:44:c0: 06:f2:61:53:07:4d:6e:71:99:2e:4a:3e:2e:c0:3e: db:57:ba:0b:7b:f9:fa:7a:3d:58:5b:9f:5f:0c:b4: a1:90:a9:74:97:ab:4a:6f:58:c3:01:74:ad:ba:0d: 47:b1:a6:c4:09:51:27:3f:c5:5d:d7:f4:6e:fe:6b: 92:0d:45:03:f5:bf:e8:60:df:2f:1a:92:fc:07:63: b0:38:ab:8c:16:6e:ab:94:c8:aa:2b:d8:9f:a1:7c: a4:ef:1c:69:eb:4d:b8:ac:49:03:a3:b8:51:cd:e2: 4b:5d:4e:f3:f8:60:8b:6a:ba:4d:19:ce:53:30:71: fa:e4:bb:6f:1c:1e:cc:20:c8:ff:3a:7d:bf:de:fb: 30:9d:c5:29:b8:8b:07:3b:e0:bd:f4:7b:fb:49:ea: be:82:05:c6:1a:dc:8a:cf:02:8d:ab:bb:6d:62:d9: 4d:68:77:ef:da:a3:e0:a4:18:f0:93:7b:1b:8a:64: 89:95:e3:7b:0f:6b:e4:f4:91:8c:2d:ef:4c:46:c3: de:d1:e5:75:a0:de:af:44:93:4e:c3:5c:96:51:f2: 74:30:4f:1c:6b:25:26:16:2e:a6:12:d6:87:24:ff: a7:bd:18:5d:5b:fd:01:f5:05:cf:58:c3:ae:22:75: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:86:7E:C1:E7:1F:23:7E:C9:D8:C5:BE:E6:4B:91:63:8D:E4:02:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:4e:08:bd:c2:60:1b:44:6a:0d:21:c4:5a:e4:d6:0b:d0:a1: 52:d3:66:19:4d:da:ba:34:f6:ae:9a:a3:6c:2b:78:73:19:0d: f2:81:a7:6b:af:9a:8c:7e:e5:51:15:e2:29:eb:dd:71:5b:82: da:58:8a:ab:44:f4:d5:47:60:b7:cc:64:38:8a:3f:5b:19:f9: 16:d1:80:9e:e9:e8:2c:56:28:45:f5:9a:8b:f1:76:62:7a:79: 8f:91:0c:2c:59:0e:02:27:47:7d:2f:d5:3e:28:d0:c4:dc:7a: c2:e7:18:75:1f:3c:7c:80:cd:45:be:8c:b4:4f:50:90:ce:44: f6:94:66:79:9e:22:d6:0e:23:e7:18:16:57:0c:bd:fe:b5:cb: 0a:6c:ed:35:46:76:fd:67:58:b0:b3:4b:53:3b:f7:ee:17:85: 6f:10:c9:4b:f0:1f:1f:9f:5d:9a:14:20:ac:2d:a7:a5:03:6f: 3a:cd:14:bd:fd:96:d6:8c:34:3c:0a:d2:9e:45:8e:f1:37:21: 50:b3:ee:eb:04:d7:14:a8:69:eb:29:e0:f1:46:f5:23:18:fa: 1d:ae:4a:31:e6:bb:f0:e8:45:39:37:d2:3d:d7:b1:7a:7e:5b: bc:71:14:bf:b8:0e:42:23:4d:2d:a9:05:ca:e3:f7:ea:45:7b: a8:1f:e6:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxS/GPrZsiWRFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTRhNDJhYzktYjc0OS00MmY1LWE0M2ItNDJlYjhjOWZmYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMl8+0ni7WfYGceYRMAG8mFTB01ucZkuSj4u wD7bV7oLe/n6ej1YW59fDLShkKl0l6tKb1jDAXStug1HsabECVEnP8Vd1/Ru/muS DUUD9b/oYN8vGpL8B2OwOKuMFm6rlMiqK9ifoXyk7xxp6024rEkDo7hRzeJLXU7z +GCLarpNGc5TMHH65LtvHB7MIMj/On2/3vswncUpuIsHO+C99Hv7Seq+ggXGGtyK zwKNq7ttYtlNaHfv2qPgpBjwk3sbimSJleN7D2vk9JGMLe9MRsPe0eV1oN6vRJNO w1yWUfJ0ME8cayUmFi6mEtaHJP+nvRhdW/0B9QXPWMOuInVsyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2GfsHnHyN+ydjFvuZLkWON5ALxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNmZmJiY2ItYjZhZC0z YmNkLWIyYmUtMThhNTRmM2NkYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrblkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpOCL3CYBtEag0hxFrk1gvQoVLTZhlN2ro09q6ao2wreHMZDfKBp2uv mox+5VEV4inr3XFbgtpYiqtE9NVHYLfMZDiKP1sZ+RbRgJ7p6CxWKEX1movxdmJ6 eY+RDCxZDgInR30v1T4o0MTcesLnGHUfPHyAzUW+jLRPUJDORPaUZnmeItYOI+cY FlcMvf61ywps7TVGdv1nWLCzS1M79+4XhW8QyUvwHx+fXZoUIKwtp6UDbzrNFL39 ltaMNDwK0p5FjvE3IVCz7usE1xSoaesp4PFG9SMY+h2uSjHmu/DoRTk30j3XsXp+ W7xxFL+4DkIjTS2pBcrj9+pFe6gf5iY= -----END CERTIFICATE-----Generated at Fri Sep 25 22:08:19 2026 by rpki-client