$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa File: d8aada01-f195-3c39-b506-9b9140b28ba2.roa (raw, json) Hash identifier: /2xcB7/oW5RtPAq6HhVj5Bb+SxOEtAgr1n+4AaFY4G8= Subject key identifier: 64:9A:CF:26:14:4E:46:DF:7A:3D:5F:D4:D7:D9:2D:21:68:21:35:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D9751FA2AD8954952EE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 151.213.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:97:51:fa:2a:d8:95:49:52:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=bfe86fc2-ce2b-49d7-a149-7e115c9dd967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:21:44:0c:18:29:8b:a2:8c:5c:61:f2:19: f5:9e:c3:30:68:cc:96:e2:ca:3d:f5:a5:17:47:64: 55:45:f8:95:11:d1:d2:cb:70:24:19:fe:39:0d:d9: 64:23:5b:12:1f:88:aa:06:a7:88:2a:15:52:63:51: 09:f0:c1:a5:4d:40:d3:71:37:e4:5d:3b:df:0c:eb: 13:a7:6d:5a:20:6a:99:f5:98:74:61:d1:7e:95:5f: 16:ee:90:d4:57:c7:bb:cc:57:ce:5d:88:61:c8:58: d4:3a:53:b3:3e:2e:2d:13:b6:2b:ce:36:68:5b:24: 12:3c:fd:0f:7c:f2:d8:df:02:7d:71:50:bb:05:64: e6:e0:d8:af:f1:eb:9f:e8:10:86:b9:39:57:0c:51: 6d:dc:0b:07:fc:3f:fa:c9:5b:23:d2:81:9d:76:8a: 6c:46:bb:36:09:c2:86:96:18:ea:fb:81:8b:f9:fe: 82:30:fe:98:fd:ff:72:32:35:a8:4a:f0:b4:06:26: 34:b0:2a:13:68:6a:9d:1f:6d:bf:28:e7:57:7c:f3: 75:0b:cf:a3:fe:a5:8f:c5:c1:6d:df:93:3f:e3:4c: 75:0d:a2:ed:4f:fc:cf:6f:82:6f:71:e6:7b:aa:94: 4a:0c:f8:43:4d:d4:d3:57:f4:0a:3f:4a:0a:7c:03: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9A:CF:26:14:4E:46:DF:7A:3D:5F:D4:D7:D9:2D:21:68:21:35:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b4:87:03:46:85:36:dd:1a:a8:eb:7e:10:d4:37:81:0f:ad: 90:55:fe:8d:45:76:84:c7:c0:ad:a8:c7:66:36:87:89:68:1f: 53:c0:f8:d8:98:36:97:c9:44:29:cd:46:03:f2:c1:db:16:56: 8e:f8:b0:c9:92:7e:62:7d:64:c8:c2:df:e0:04:2b:00:0e:15: 9d:f7:65:2d:d7:93:02:5c:11:51:fe:65:a0:fc:98:41:79:d8: ae:6d:bd:72:94:c2:98:20:0a:50:58:14:2e:be:0b:ab:8c:7a: 8a:23:60:07:56:7d:f6:b7:27:1c:37:e9:a4:d8:2f:95:cb:ad: 97:d5:bf:d4:96:e4:35:ba:c8:3d:e3:de:f7:3f:33:e1:8d:38: 17:e1:d9:2e:a1:88:4a:60:f5:d2:82:35:36:3b:92:e6:83:45: 74:db:b7:3c:9b:31:9a:92:03:ae:33:7c:96:ce:56:93:e4:c5: 39:35:c6:c7:4f:22:d1:d5:8e:af:05:84:ce:50:e8:97:18:17: d1:49:4c:cd:74:d1:1b:db:14:01:90:60:df:65:6e:6f:39:bf: 9a:fd:01:c8:b1:42:ad:fd:27:05:45:6a:c0:e4:85:f0:a6:d2: 09:b8:b2:20:b4:39:cc:a1:62:59:16:43:72:98:09:93:7d:2e: 4d:dc:f0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZdR+irYlUlS7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YmZlODZmYzItY2UyYi00OWQ3LWExNDktN2UxMTVjOWRkOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtUhRAwYKYuijFxh8hn1nsMwaMyW4so99aUX R2RVRfiVEdHSy3AkGf45DdlkI1sSH4iqBqeIKhVSY1EJ8MGlTUDTcTfkXTvfDOsT p21aIGqZ9Zh0YdF+lV8W7pDUV8e7zFfOXYhhyFjUOlOzPi4tE7YrzjZoWyQSPP0P fPLY3wJ9cVC7BWTm4Niv8euf6BCGuTlXDFFt3AsH/D/6yVsj0oGddopsRrs2CcKG lhjq+4GL+f6CMP6Y/f9yMjWoSvC0BiY0sCoTaGqdH22/KOdXfPN1C8+j/qWPxcFt 35M/40x1DaLtT/zPb4JvceZ7qpRKDPhDTdTTV/QKP0oKfANxMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSazyYUTkbfej1f1NfZLSFoITU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDhhYWRhMDEtZjE5NS0z YzM5LWI1MDYtOWI5MTQwYjI4YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq0hwNGhTbdGqjrfhDUN4EPrZBV/o1FdoTHwK2ox2Y2h4loH1PA+NiY NpfJRCnNRgPywdsWVo74sMmSfmJ9ZMjC3+AEKwAOFZ33ZS3XkwJcEVH+ZaD8mEF5 2K5tvXKUwpggClBYFC6+C6uMeoojYAdWffa3Jxw36aTYL5XLrZfVv9SW5DW6yD3j 3vc/M+GNOBfh2S6hiEpg9dKCNTY7kuaDRXTbtzybMZqSA64zfJbOVpPkxTk1xsdP ItHVjq8FhM5Q6JcYF9FJTM100RvbFAGQYN9lbm85v5r9AcixQq39JwVFasDkhfCm 0gm4siC0OcyhYlkWQ3KYCZN9Lk3c8NE= -----END CERTIFICATE-----Generated at Sat Oct 3 10:43:44 2026 by rpki-client