$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d01fa785-c9d0-379b-945c-f32c18629967.roa File: d01fa785-c9d0-379b-945c-f32c18629967.roa (raw, json) Hash identifier: PHv/PQu9Q8BFapdLSOXPKXglm/YBWGlgWduDnEqHHnA= Subject key identifier: 47:07:B9:1B:9C:8C:FC:E7:1E:82:F0:59:E3:B8:60:5D:D9:6C:5E:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F112E326337946BF58500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d01fa785-c9d0-379b-945c-f32c18629967.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 27338 IP address blocks: 74.8.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:11:2e:32:63:37:94:6b:f5:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7b1b6b82-74c5-45ea-9a84-1a18811804d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:64:6a:f5:2b:f4:c5:09:3e:0c:2d:1b:95: 11:1b:3a:5d:8c:78:e0:ab:fd:be:75:2e:e9:60:70: a6:4f:68:5c:9f:1b:fa:76:03:5a:80:cc:bc:b5:bc: c8:db:c8:14:be:9e:9f:08:17:dd:4b:7c:56:8c:89: 8e:f3:f2:ee:36:0d:fa:6b:fe:47:8a:8a:a6:85:f5: 75:db:24:9a:f9:b5:35:8f:cd:4b:f4:83:fb:ab:6a: 58:47:24:2d:ea:f4:e1:8c:c9:30:ca:6e:32:9d:3e: 95:6f:c3:ba:98:3b:c7:d5:2b:02:6a:87:4d:54:29: 44:ab:a3:d2:ef:34:76:09:6b:6d:03:5e:1d:1d:ea: 80:d3:14:11:cf:9a:74:7b:50:52:0e:e2:23:c6:12: ef:2c:ff:98:0e:60:55:0a:fe:97:4c:ea:34:01:ba: 69:a6:38:20:62:54:d0:e0:c1:f3:01:ae:93:0c:6e: 0e:bb:5d:65:1e:22:27:f9:75:c2:2d:41:00:e7:ff: ca:1e:bc:7a:3e:92:5b:77:0b:3e:19:8d:58:ca:a2: d7:42:c0:3c:00:8c:c9:0e:71:f0:42:6d:3e:61:22: b1:f3:c2:22:20:be:80:ea:84:6e:40:40:1b:5e:42: 49:c9:ce:86:6c:ec:b8:7e:86:cc:44:58:66:55:79: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:B9:1B:9C:8C:FC:E7:1E:82:F0:59:E3:B8:60:5D:D9:6C:5E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d01fa785-c9d0-379b-945c-f32c18629967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a7:2b:52:00:5a:d2:41:80:6e:6c:db:61:d3:88:a3:4a:2c: 43:35:1e:95:6b:70:36:eb:be:b8:79:d2:7d:a5:7f:e7:f2:bc: c8:cf:ce:a7:59:68:80:2b:03:26:07:79:48:b4:3f:91:b0:e1: 34:05:27:41:9e:12:fc:b1:2a:17:a1:ad:bd:f3:fc:e7:9b:9c: fc:2a:c4:95:2b:56:44:c9:5c:82:24:57:2c:9a:a0:1e:25:97: b3:90:40:f0:6b:16:c6:e3:9f:4b:c4:37:2f:1e:96:37:3c:79: 9e:95:48:9e:27:20:59:38:f2:37:c0:31:78:41:69:cb:92:0d: fc:59:24:4f:5a:82:09:11:fc:8b:4b:19:b0:4c:e0:84:0e:64: 2f:b0:7c:64:5b:22:27:9a:31:3f:e0:5c:c7:96:69:52:06:62: 6c:54:f0:08:68:15:9f:ea:cf:2e:9a:4c:77:a3:2c:83:a0:ee: 21:f7:41:ae:84:ea:99:d9:82:5a:5a:2b:92:92:1f:6d:2b:04: 47:43:19:aa:ca:11:9e:a7:1d:2c:29:9d:3a:ed:9f:06:eb:54: 16:9d:1e:52:85:0b:e5:1d:c3:c9:ba:cf:de:80:ef:91:17:ba: 35:5f:ef:17:5e:bd:2c:85:4a:f1:c4:f4:61:b5:33:7a:3c:ca: ca:76:cc:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxEuMmM3lGv1hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2IxYjZiODItNzRjNS00NWVhLTlhODQtMWExODgxMTgwNGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIRkavUr9MUJPgwtG5URGzpdjHjgq/2+dS7p YHCmT2hcnxv6dgNagMy8tbzI28gUvp6fCBfdS3xWjImO8/LuNg36a/5HioqmhfV1 2ySa+bU1j81L9IP7q2pYRyQt6vThjMkwym4ynT6Vb8O6mDvH1SsCaodNVClEq6PS 7zR2CWttA14dHeqA0xQRz5p0e1BSDuIjxhLvLP+YDmBVCv6XTOo0AbpppjggYlTQ 4MHzAa6TDG4Ou11lHiIn+XXCLUEA5//KHrx6PpJbdws+GY1YyqLXQsA8AIzJDnHw Qm0+YSKx88IiIL6A6oRuQEAbXkJJyc6GbOy4fobMRFhmVXmW4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcHuRucjPznHoLwWeO4YF3ZbF6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDAxZmE3ODUtYzlkMC0z NzliLTk0NWMtZjMyYzE4NjI5OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAanK1IAWtJBgG5s22HTiKNKLEM1HpVrcDbrvrh50n2lf+fyvMjPzqdZ aIArAyYHeUi0P5Gw4TQFJ0GeEvyxKhehrb3z/OebnPwqxJUrVkTJXIIkVyyaoB4l l7OQQPBrFsbjn0vENy8eljc8eZ6VSJ4nIFk48jfAMXhBacuSDfxZJE9aggkR/ItL GbBM4IQOZC+wfGRbIieaMT/gXMeWaVIGYmxU8AhoFZ/qzy6aTHejLIOg7iH3Qa6E 6pnZglpaK5KSH20rBEdDGarKEZ6nHSwpnTrtnwbrVBadHlKFC+Udw8m6z96A75EX ujVf7xdevSyFSvHE9GG1M3o8ysp2zKU= -----END CERTIFICATE-----Generated at Sat Oct 3 11:15:11 2026 by rpki-client