$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa File: b38aba09-012f-3d09-87cf-93c71f23adb3.roa (raw, json) Hash identifier: QfuLDev5YTrTr2jdFQYTh00il2zCPMydKEBuQKJSPWM= Subject key identifier: 8B:D3:10:94:DB:1F:9E:7A:CF:FB:57:CE:DF:7F:08:CD:2E:55:06:CB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4986224BF8B58477FC08F980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.185.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:22:4b:f8:b5:84:77:fc:08:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4ab3e36d-3872-430f-9b96-1029e485d8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:4d:19:20:15:e9:cc:53:c1:4b:84:83:e0: 53:de:71:f7:2e:86:76:b6:36:b7:53:1d:2b:ae:0d: f4:fd:f7:33:99:cb:01:86:f7:bc:5a:23:69:eb:15: f3:ef:01:65:7a:13:d7:32:68:4c:8c:ed:e5:8b:7e: ce:7d:65:32:d3:61:94:cc:3b:11:62:16:30:b4:8b: 73:6c:5c:68:65:2d:89:08:1f:c9:74:5d:63:eb:5b: 07:ee:ea:b9:de:15:41:b9:4f:32:9c:d1:42:f4:d5: f0:1b:90:40:f1:18:9f:03:34:a5:49:4e:83:3a:04: 14:e0:16:ea:b4:ca:aa:1f:58:9e:b7:7c:a9:7a:65: 24:3f:8a:c5:a6:ff:e9:51:03:82:53:ae:cc:a6:1a: d9:99:a2:8b:dd:f1:76:2c:70:49:6c:93:b7:9f:1f: 49:03:70:0c:cc:c6:41:13:3a:a9:17:06:df:6f:f1: 9f:58:d8:ac:d7:12:9a:be:e8:95:57:bd:f7:a0:b6: 99:24:49:00:cd:e3:b3:ff:ce:ae:61:60:29:6d:ff: 3d:f5:a0:5f:4a:de:c4:1f:d4:11:ae:36:58:f7:c4: 89:ab:6b:d2:d3:36:a3:c3:37:f5:bc:7d:9d:60:0c: 9c:1e:79:c7:5f:ab:39:f9:13:79:d4:84:e6:c6:15: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D3:10:94:DB:1F:9E:7A:CF:FB:57:CE:DF:7F:08:CD:2E:55:06:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:03:f0:d6:e7:d1:aa:48:88:cf:5e:0c:42:4a:2e:a4:53:da: 28:1f:28:48:ed:ca:ba:9a:72:8f:9c:c4:85:d1:31:7c:fb:cc: 15:a5:34:0e:87:13:ea:5f:ac:a1:b3:32:2c:1a:4f:07:30:94: e4:70:cc:01:94:8e:68:84:b6:38:43:67:15:24:0e:23:a9:ff: 5e:98:f6:fd:47:99:85:18:ee:68:0c:b0:8c:29:25:e1:7c:e7: 06:9a:27:a1:9e:c8:f4:01:3f:63:e5:84:57:f7:a8:6d:c3:a4: 8d:39:ad:fb:d8:96:e1:7e:c3:c2:6e:e5:17:2f:4f:51:90:92: 9c:b6:9d:b4:c9:92:75:c5:7d:3b:c9:57:e5:e9:50:76:e4:1d: 9b:93:00:c2:92:af:29:13:79:52:f3:ef:89:d8:7d:4a:6e:a5: 18:31:2c:fe:ef:57:4e:c0:c0:86:61:d6:2f:c7:59:6b:67:09: bd:2d:da:53:d0:7c:a2:08:5b:1c:8b:cc:3f:c0:72:61:a9:05: 77:be:fd:63:bd:cb:6b:c8:bc:af:10:e2:82:62:2f:c2:d7:3f: 05:c6:7b:7d:42:da:93:14:74:72:4c:03:f9:ba:2d:d7:59:87: e1:e1:1a:2e:d6:43:dc:59:1e:b6:bc:66:5e:32:79:7e:1b:62: 7b:b5:68:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhiJL+LWEd/wI+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGFiM2UzNmQtMzg3Mi00MzBmLTliOTYtMTAyOWU0ODVkOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zdNGSAV6cxTwUuEg+BT3nH3LoZ2tja3Ux0r rg30/fczmcsBhve8WiNp6xXz7wFlehPXMmhMjO3li37OfWUy02GUzDsRYhYwtItz bFxoZS2JCB/JdF1j61sH7uq53hVBuU8ynNFC9NXwG5BA8RifAzSlSU6DOgQU4Bbq tMqqH1iet3ypemUkP4rFpv/pUQOCU67MphrZmaKL3fF2LHBJbJO3nx9JA3AMzMZB EzqpFwbfb/GfWNis1xKavuiVV733oLaZJEkAzeOz/86uYWApbf899aBfSt7EH9QR rjZY98SJq2vS0zajwzf1vH2dYAycHnnHX6s5+RN51ITmxhVuZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvTEJTbH556z/tXzt9/CM0uVQbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjM4YWJhMDktMDEyZi0z ZDA5LTg3Y2YtOTNjNzFmMjNhZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8D8Nbn0apIiM9eDEJKLqRT2igfKEjtyrqaco+cxIXRMXz7zBWlNA6H E+pfrKGzMiwaTwcwlORwzAGUjmiEtjhDZxUkDiOp/16Y9v1HmYUY7mgMsIwpJeF8 5waaJ6GeyPQBP2PlhFf3qG3DpI05rfvYluF+w8Ju5RcvT1GQkpy2nbTJknXFfTvJ V+XpUHbkHZuTAMKSrykTeVLz74nYfUpupRgxLP7vV07AwIZh1i/HWWtnCb0t2lPQ fKIIWxyLzD/AcmGpBXe+/WO9y2vIvK8Q4oJiL8LXPwXGe31C2pMUdHJMA/m6LddZ h+HhGi7WQ9xZHra8Zl4yeX4bYnu1aLQ= -----END CERTIFICATE-----Generated at Fri Sep 25 05:10:22 2026 by rpki-client