$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa File: d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa (raw, json) Hash identifier: rSXJgKI7aWMlbDDmLoZz9hxh0+SgIAkNnAiXcJIJrm0= Subject key identifier: E7:91:BD:47:58:7F:2C:91:25:A2:7D:48:BC:B4:89:56:57:72:32:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F498620533D4E6F1B0B41E840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 151.213.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:20:53:3d:4e:6f:1b:0b:41:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ced8cd16-1362-4abc-8395-377a0c00eeec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:c2:50:9b:0f:6e:02:ed:a6:a9:8d:38:89: 5f:e4:51:58:af:83:3d:c7:a9:c3:64:a5:16:29:18: ce:7a:ed:88:68:86:e7:11:51:d0:33:f1:a5:b6:e6: 02:20:6f:e0:3a:eb:ce:08:2d:55:f4:cc:53:36:c1: 06:d7:27:6b:a3:b7:ca:46:41:08:8e:48:3a:f0:d7: f0:05:da:b9:bc:13:6a:ef:00:de:0e:9d:39:52:c4: 6d:7b:c4:8b:08:37:76:a6:20:db:0e:73:f6:9c:d8: db:db:b9:99:c4:ac:eb:05:e9:ed:af:25:85:96:0f: dc:fb:8f:7e:3c:d6:ff:c8:a3:5b:78:1e:53:7f:f3: f8:d2:89:66:17:ab:b2:19:ee:67:63:45:a5:29:7e: 56:15:fc:d9:b4:04:9f:e1:40:33:57:81:96:80:3d: 0f:76:56:0b:8d:be:65:8c:be:ae:61:72:37:71:d9: 8a:93:25:3a:4b:0f:14:83:ae:88:5f:81:0a:a2:8e: 4d:56:cf:c3:07:66:42:ae:77:54:2d:5b:91:84:1e: f9:d5:5e:a1:d3:3c:28:54:48:29:2c:8d:6f:d5:00: 31:33:3f:e8:b6:de:c8:c3:5c:0b:ef:3a:86:72:aa: b6:a4:1b:9f:7e:c0:b4:9d:a6:37:a4:c6:78:3f:32: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:91:BD:47:58:7F:2C:91:25:A2:7D:48:BC:B4:89:56:57:72:32:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d9:a9:d9:7d:e1:13:24:35:77:4d:8a:0f:fa:b8:c1:0b:ed: 86:a6:40:20:fb:8b:09:90:96:74:86:68:a6:7d:d5:52:f7:61: 32:c9:d3:9b:10:fc:48:de:88:4d:06:f8:c9:15:c9:f1:27:f7: 14:2a:74:42:1d:8f:20:43:71:0f:5d:76:b1:eb:6a:9c:b3:98: 91:41:9d:3f:3f:64:ca:ff:f0:d6:52:2f:3d:95:45:ce:09:6d: 1a:4c:00:13:3a:f4:11:fc:42:af:98:5f:43:cf:39:bf:94:ff: d6:a9:71:f5:a1:3b:c0:ef:fb:f5:1a:a8:46:d9:ba:7c:4d:ed: 3d:98:0d:83:cb:30:f5:59:09:43:31:bf:e5:6a:a6:a8:e1:66: 5d:f0:24:6b:9f:84:53:81:28:52:cc:91:18:5e:69:60:d1:56: 29:4b:f5:0a:89:04:51:ec:0e:8f:22:a1:b6:ea:54:1e:17:95: 4b:44:7d:ee:b8:d6:be:71:fa:19:ae:81:5b:b2:9c:e7:99:de: ba:e7:38:08:05:37:03:19:04:05:34:91:d1:60:27:0f:43:53: b5:5b:12:a6:b2:8d:fc:c3:ee:97:f0:5c:49:74:b7:69:14:56: 13:70:2c:f5:00:f8:32:6d:3a:81:56:96:43:00:cb:a5:ff:8b: be:db:66:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhiBTPU5vGwtB6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2VkOGNkMTYtMTM2Mi00YWJjLTgzOTUtMzc3YTBjMDBlZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurfCUJsPbgLtpqmNOIlf5FFYr4M9x6nDZKUW KRjOeu2IaIbnEVHQM/GltuYCIG/gOuvOCC1V9MxTNsEG1ydro7fKRkEIjkg68Nfw Bdq5vBNq7wDeDp05UsRte8SLCDd2piDbDnP2nNjb27mZxKzrBentryWFlg/c+49+ PNb/yKNbeB5Tf/P40olmF6uyGe5nY0WlKX5WFfzZtASf4UAzV4GWgD0PdlYLjb5l jL6uYXI3cdmKkyU6Sw8Ug66IX4EKoo5NVs/DB2ZCrndULVuRhB751V6h0zwoVEgp LI1v1QAxMz/ott7Iw1wL7zqGcqq2pBuffsC0naY3pMZ4PzJ3vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeRvUdYfyyRJaJ9SLy0iVZXcjLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDczYTBhMmEtOTkzMy0z Y2Q1LWIyODktYzdlYjJmODA1YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9VIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3Zqdl94RMkNXdNig/6uMEL7YamQCD7iwmQlnSGaKZ91VL3YTLJ05sQ /EjeiE0G+MkVyfEn9xQqdEIdjyBDcQ9ddrHrapyzmJFBnT8/ZMr/8NZSLz2VRc4J bRpMABM69BH8Qq+YX0PPOb+U/9apcfWhO8Dv+/UaqEbZunxN7T2YDYPLMPVZCUMx v+VqpqjhZl3wJGufhFOBKFLMkRheaWDRVilL9QqJBFHsDo8iobbqVB4XlUtEfe64 1r5x+hmugVuynOeZ3rrnOAgFNwMZBAU0kdFgJw9DU7VbEqayjfzD7pfwXEl0t2kU VhNwLPUA+DJtOoFWlkMAy6X/i77bZoU= -----END CERTIFICATE-----Generated at Fri Sep 25 06:54:47 2026 by rpki-client