$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c31dcf31-f9ba-3b96-b5a0-61beed5cce6a.roa File: c31dcf31-f9ba-3b96-b5a0-61beed5cce6a.roa (raw, json) Hash identifier: ez9t4HG/IRmGOYGLHUgG8HxULfj3f8rfJctpu1jdZuk= Subject key identifier: 56:AC:0C:6B:6D:A0:43:68:87:FC:49:AA:2F:02:89:5C:B3:B4:C5:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F02423D855C65A923F809C880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c31dcf31-f9ba-3b96-b5a0-61beed5cce6a.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 173.185.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:3d:85:5c:65:a9:23:f8:09:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=dcb42687-0507-4ae5-8e62-4c93d07dbebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:80:fd:ec:c4:22:05:25:86:33:64:1f:11: e2:e5:e2:83:bf:51:f1:10:89:14:1b:62:a6:47:ec: 5c:e6:52:63:09:1d:a7:06:96:9c:13:71:00:df:d3: e7:d6:b3:9c:3c:d2:bc:8f:c4:24:98:e2:d9:b7:5c: e4:2f:01:b2:cb:ab:b8:52:bf:e4:02:73:68:ad:8f: d1:96:77:2c:2c:05:03:77:23:3b:b2:fc:71:c3:28: 96:a4:1e:a2:ab:38:f9:e2:af:9b:26:80:a6:55:15: ac:5e:40:5d:d6:2d:a2:ed:ec:15:c8:8f:d0:98:bb: cc:e1:24:af:c5:2e:56:da:09:5d:9c:b7:de:9b:0a: d2:a3:17:0b:ae:17:81:35:5b:da:77:fd:a4:50:79: 87:47:6a:86:68:11:da:0f:80:36:d4:b4:04:68:fe: d6:c3:e3:51:b0:fa:e6:97:ba:bf:08:b9:05:f7:73: 77:5c:40:1b:d0:79:42:18:c4:68:84:16:fa:8a:9a: ac:09:5e:83:53:ab:54:20:b7:75:41:f1:a7:ef:1a: 96:a8:f3:4f:cd:34:9f:ac:05:ed:0b:f4:c3:22:aa: d7:00:e6:bb:d5:ff:f2:9f:3c:a6:86:b4:58:e1:19: f7:c7:fe:d9:fd:17:f7:77:c7:71:b7:88:0d:8e:4d: 8d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AC:0C:6B:6D:A0:43:68:87:FC:49:AA:2F:02:89:5C:B3:B4:C5:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c31dcf31-f9ba-3b96-b5a0-61beed5cce6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ba:91:46:a6:53:6a:ee:5e:39:da:ae:97:aa:ed:53:7c:99: 4e:54:ed:9e:09:6a:fe:c2:fa:06:10:fa:f4:ef:c7:45:55:2a: b1:db:b1:ab:d1:40:03:12:52:1d:15:6c:11:ec:50:5b:62:30: 0f:65:d3:a2:57:bb:bf:28:a1:c1:0a:5d:15:ee:ca:24:38:90: a0:c8:80:e0:5f:3a:ce:e2:91:73:8b:4f:c3:c4:2c:16:a0:22: 38:f3:3e:f3:4f:1d:af:f7:e1:a8:46:4f:f6:41:13:48:9f:e7: db:b1:a6:98:76:eb:bb:30:de:f5:1f:b7:3d:35:35:1e:37:b9: e5:66:93:9b:fc:e6:f6:ed:1d:cc:96:41:c0:c1:f3:7c:8a:d2: d4:eb:c6:9e:d2:b9:1a:17:d9:57:14:84:9f:40:d8:33:48:f3: 9e:aa:3f:04:0f:70:5b:58:7a:cc:a3:00:0d:d9:31:a4:ba:3b: 8c:44:8c:54:de:ce:34:7c:c9:16:cb:25:8a:75:77:c6:28:10: 5f:55:56:f5:a6:c0:1e:b6:69:a1:8b:da:ff:c2:a3:99:62:88: 9f:49:2d:6c:b1:8c:74:11:52:8d:15:f7:cc:eb:b8:7f:1c:b7: 7c:06:e4:64:ab:72:bd:bd:3d:fc:0a:f9:95:64:91:13:9e:e3: a1:50:31:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQj2FXGWpI/gJyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZGNiNDI2ODctMDUwNy00YWU1LThlNjItNGM5M2QwN2RiZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhaA/ezEIgUlhjNkHxHi5eKDv1HxEIkUG2Km R+xc5lJjCR2nBpacE3EA39Pn1rOcPNK8j8QkmOLZt1zkLwGyy6u4Ur/kAnNorY/R lncsLAUDdyM7svxxwyiWpB6iqzj54q+bJoCmVRWsXkBd1i2i7ewVyI/QmLvM4SSv xS5W2gldnLfemwrSoxcLrheBNVvad/2kUHmHR2qGaBHaD4A21LQEaP7Ww+NRsPrm l7q/CLkF93N3XEAb0HlCGMRohBb6ipqsCV6DU6tUILd1QfGn7xqWqPNPzTSfrAXt C/TDIqrXAOa71f/ynzymhrRY4Rn3x/7Z/Rf3d8dxt4gNjk2NMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFasDGttoENoh/xJqi8CiVyztMUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzMxZGNmMzEtZjliYS0z Yjk2LWI1YTAtNjFiZWVkNWNjZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi6kUamU2ruXjnarpeq7VN8mU5U7Z4Jav7C+gYQ+vTvx0VVKrHbsavR QAMSUh0VbBHsUFtiMA9l06JXu78oocEKXRXuyiQ4kKDIgOBfOs7ikXOLT8PELBag IjjzPvNPHa/34ahGT/ZBE0if59uxpph267sw3vUftz01NR43ueVmk5v85vbtHcyW QcDB83yK0tTrxp7SuRoX2VcUhJ9A2DNI856qPwQPcFtYesyjAA3ZMaS6O4xEjFTe zjR8yRbLJYp1d8YoEF9VVvWmwB62aaGL2v/Co5liiJ9JLWyxjHQRUo0V98zruH8c t3wG5GSrcr29PfwK+ZVkkROe46FQMeE= -----END CERTIFICATE-----Generated at Sat Oct 3 13:20:45 2026 by rpki-client