$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa File: b85fcffe-594a-3ca2-98c5-30c94c748750.roa (raw, json) Hash identifier: KQWiohfqaPT1m3BL5+Bzd9Q2eb8oHXd+34kVnOHSLP4= Subject key identifier: 8E:4C:9A:7A:B1:B9:14:0C:3E:4D:BB:6F:3E:5E:FE:10:F3:A8:07:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D78100069232F999A92A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 205.147.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:78:10:00:69:23:2f:99:9a:92:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2b28cb4d-7680-4ac7-a39c-cbc21406a23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:35:19:41:c2:80:d7:3e:87:9c:0a:37:68: 5e:8a:3d:d2:0b:4a:ac:36:18:b3:4a:c2:3b:ec:28: 89:e3:f3:d5:f1:ac:d8:c5:11:c2:8b:84:e7:c8:06: 93:43:08:c7:62:f0:5a:ec:97:13:d9:6b:92:a2:6f: 72:a6:bc:97:1a:47:2e:9d:30:32:60:24:37:ea:65: 18:78:a6:ad:43:47:3d:c0:af:17:24:ba:3d:a0:95: 28:b3:cb:fc:07:f6:0a:58:90:3b:9d:c5:e8:ef:2a: f7:91:e1:3d:f5:71:02:a8:6b:34:cc:29:1a:72:fe: 1c:65:08:75:ed:43:e7:a0:fe:e7:25:41:eb:25:08: 13:09:83:85:2c:35:54:66:2d:52:a2:1e:3e:bc:8c: 61:5f:72:1c:ad:ce:9c:7c:3c:c9:57:32:9f:7c:5c: ac:69:38:d3:09:bb:78:87:9c:f7:80:bd:3a:53:41: dd:e6:8b:c1:22:94:03:d7:46:01:cf:68:d3:f9:fd: 8e:f6:dd:81:f6:09:09:b9:0a:be:86:21:21:b0:2e: 22:31:0f:65:f2:94:e6:7b:50:36:9a:dc:24:46:80: 24:c4:34:18:37:f5:40:69:25:48:01:d5:c3:85:f5: 2e:6d:7b:9d:ae:55:25:f3:dd:19:3b:01:c6:7d:4e: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:9A:7A:B1:B9:14:0C:3E:4D:BB:6F:3E:5E:FE:10:F3:A8:07:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.147.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e9:94:0e:01:ca:00:b9:45:07:57:8e:be:40:e3:f6:fe:cc: 0a:ff:67:99:e9:22:79:8f:da:31:ba:59:ca:24:c9:72:56:ae: 47:f7:6e:00:76:a0:10:bd:7d:f1:03:d5:43:f0:73:63:f2:1e: a4:ab:41:fc:51:71:bf:57:c6:e6:1d:5b:02:a5:bd:e7:1f:91: dc:c3:1e:f4:94:25:86:99:11:1a:18:03:ae:63:54:e8:56:70: 8c:cb:69:c4:fd:d0:f4:dd:3c:e0:ad:4a:14:48:c3:d8:7c:b1: 2c:dc:99:53:23:c2:91:f6:a6:22:10:42:15:4d:f8:c2:41:29: 3b:5e:a9:ac:8c:44:42:aa:a0:7d:19:24:10:4a:6b:7b:33:4f: ae:39:f8:5f:e3:6a:a6:d2:dd:c4:15:31:13:53:b6:10:34:8c: 6b:6f:1f:02:e6:95:8c:83:41:dc:d6:94:5c:b2:8e:3a:a0:8c: 52:f0:93:8b:0f:c7:67:09:7e:af:6b:95:3f:57:4a:f2:0e:d1: c3:f1:bc:19:a5:f5:52:f2:f4:3a:63:b8:3e:f1:7f:36:79:1b: 28:91:62:99:ab:6f:d0:26:b5:2f:7d:34:d3:8f:b4:2d:eb:cd: ef:f9:dd:38:e9:4d:6f:0d:9b:e1:f6:e9:d0:49:c0:46:76:ce: b9:09:43:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXgQAGkjL5makqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmIyOGNiNGQtNzY4MC00YWM3LWEzOWMtY2JjMjE0MDZhMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq541GUHCgNc+h5wKN2heij3SC0qsNhizSsI7 7CiJ4/PV8azYxRHCi4TnyAaTQwjHYvBa7JcT2WuSom9ypryXGkcunTAyYCQ36mUY eKatQ0c9wK8XJLo9oJUos8v8B/YKWJA7ncXo7yr3keE99XECqGs0zCkacv4cZQh1 7UPnoP7nJUHrJQgTCYOFLDVUZi1Soh4+vIxhX3Icrc6cfDzJVzKffFysaTjTCbt4 h5z3gL06U0Hd5ovBIpQD10YBz2jT+f2O9t2B9gkJuQq+hiEhsC4iMQ9l8pTme1A2 mtwkRoAkxDQYN/VAaSVIAdXDhfUubXudrlUl890ZOwHGfU4KbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5MmnqxuRQMPk27bz5e/hDzqAcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg1ZmNmZmUtNTk0YS0z Y2EyLTk4YzUtMzBjOTRjNzQ4NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvplA4BygC5RQdXjr5A4/b+zAr/Z5npInmP2jG6WcokyXJWrkf3bgB2 oBC9ffED1UPwc2PyHqSrQfxRcb9XxuYdWwKlvecfkdzDHvSUJYaZERoYA65jVOhW cIzLacT90PTdPOCtShRIw9h8sSzcmVMjwpH2piIQQhVN+MJBKTteqayMREKqoH0Z JBBKa3szT645+F/jaqbS3cQVMRNTthA0jGtvHwLmlYyDQdzWlFyyjjqgjFLwk4sP x2cJfq9rlT9XSvIO0cPxvBml9VLy9DpjuD7xfzZ5GyiRYpmrb9AmtS99NNOPtC3r ze/53TjpTW8Nm+H26dBJwEZ2zrkJQ60= -----END CERTIFICATE-----Generated at Tue Sep 29 15:50:09 2026 by rpki-client