$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa55e9ec-4ad3-3e3b-aa5e-533a923584b5.roa File: fa55e9ec-4ad3-3e3b-aa5e-533a923584b5.roa (raw, json) Hash identifier: irb20LJTYHiaHsAVlpn9oBd5Po/MXg5i1SjrUYNswak= Subject key identifier: B8:16:33:99:78:72:6B:A2:D6:9A:D9:35:8E:95:75:2F:48:08:1E:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4974EB95A2DC79D196DC9180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa55e9ec-4ad3-3e3b-aa5e-533a923584b5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.190.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:eb:95:a2:dc:79:d1:96:dc:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb839034-6168-4067-a0d9-9fbe68c5fff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:1b:95:7b:3b:92:42:06:e1:83:bc:5b:86: c0:81:d6:b7:80:02:ab:1c:27:f4:81:3e:b0:c7:19: c7:36:4f:91:fc:23:82:bc:d8:c1:33:b0:84:72:d9: 06:55:f7:c3:02:7c:01:23:aa:e8:7a:92:19:d7:79: 51:5c:99:c8:c4:d8:b0:a5:df:54:82:c5:f3:d7:11: b6:62:98:39:44:5c:cf:5b:3f:71:b1:8f:bb:d8:23: 8f:1c:6b:a0:ee:28:d6:2b:06:f1:69:66:8a:a7:77: 16:05:1c:76:d0:06:3f:a4:1a:bf:d8:a1:5f:db:b0: a9:65:d6:c9:57:bf:b3:2b:ca:a3:bb:bd:84:11:01: 84:e7:90:48:ec:41:76:36:e8:01:46:14:f9:43:2f: da:13:9d:19:75:51:06:f8:e9:e1:51:06:27:82:39: c0:be:88:d2:6c:b8:6a:50:78:c1:d4:a3:5a:6a:ad: 50:e2:81:e0:ba:da:3a:f9:42:e3:63:3d:de:e1:cf: 02:8c:d7:92:42:17:8f:8b:01:a5:45:31:e6:d6:fd: 2a:d4:ab:13:7f:42:d7:4d:e4:d7:b2:14:f8:eb:88: 15:86:ba:be:06:13:fc:79:24:e6:7d:cc:82:17:7e: 42:4d:6f:39:a8:77:6d:c6:9d:ab:62:99:9a:3b:ce: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:16:33:99:78:72:6B:A2:D6:9A:D9:35:8E:95:75:2F:48:08:1E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa55e9ec-4ad3-3e3b-aa5e-533a923584b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:17:bf:6a:8e:cd:ce:b6:05:88:f7:b2:e9:fb:16:96:ea:73: 7e:3c:49:f0:e5:9d:07:b0:70:dd:c6:80:32:69:d6:a3:70:7e: 55:48:b4:93:8c:ac:32:93:11:5f:53:ee:14:8c:0c:fa:2f:14: cb:b4:59:26:30:40:0a:a8:07:9a:4f:23:7d:90:74:06:2c:a3: a6:d2:51:67:d2:0c:39:08:69:2f:52:d0:22:9e:90:ec:6a:d9: 54:68:b9:f4:e5:4f:fd:14:f0:1a:73:eb:f7:fc:14:41:f8:e7: d5:c9:84:6c:3d:ba:b4:3f:66:7e:d9:fb:79:0e:2a:da:7b:6c: 25:57:68:fd:82:31:50:57:97:b8:b6:f3:1f:69:50:1c:d9:50: 31:0e:db:91:87:85:51:83:5e:38:cc:0a:68:d2:b5:f2:22:4c: 50:c5:85:93:10:7c:8d:15:5d:32:ad:91:58:12:20:93:e5:5b: 70:c7:d6:a5:00:1f:41:13:36:7f:24:dc:62:33:74:bd:78:83: 38:fa:12:33:2a:a9:9a:bf:31:c1:cc:ee:b9:b9:b0:4f:97:6e: 42:21:c5:e9:61:87:2d:01:16:2a:a6:43:c5:4b:d6:2b:93:71: 5d:9d:7a:4d:56:40:42:82:3f:84:2b:b5:d9:0b:b9:a1:02:b4: 3f:d2:e9:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOuVotx50ZbckYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmI4MzkwMzQtNjE2OC00MDY3LWEwZDktOWZiZTY4YzVmZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1QblXs7kkIG4YO8W4bAgda3gAKrHCf0gT6w xxnHNk+R/COCvNjBM7CEctkGVffDAnwBI6roepIZ13lRXJnIxNiwpd9UgsXz1xG2 Ypg5RFzPWz9xsY+72COPHGug7ijWKwbxaWaKp3cWBRx20AY/pBq/2KFf27CpZdbJ V7+zK8qju72EEQGE55BI7EF2NugBRhT5Qy/aE50ZdVEG+OnhUQYngjnAvojSbLhq UHjB1KNaaq1Q4oHguto6+ULjYz3e4c8CjNeSQhePiwGlRTHm1v0q1KsTf0LXTeTX shT464gVhrq+BhP8eSTmfcyCF35CTW85qHdtxp2rYpmaO862RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgWM5l4cmui1prZNY6VdS9ICB7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmE1NWU5ZWMtNGFkMy0z ZTNiLWFhNWUtNTMzYTkyMzU4NGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAXv2qOzc62BYj3sun7Fpbqc348SfDlnQewcN3GgDJp1qNwflVItJOM rDKTEV9T7hSMDPovFMu0WSYwQAqoB5pPI32QdAYso6bSUWfSDDkIaS9S0CKekOxq 2VRoufTlT/0U8Bpz6/f8FEH459XJhGw9urQ/Zn7Z+3kOKtp7bCVXaP2CMVBXl7i2 8x9pUBzZUDEO25GHhVGDXjjMCmjStfIiTFDFhZMQfI0VXTKtkVgSIJPlW3DH1qUA H0ETNn8k3GIzdL14gzj6EjMqqZq/McHM7rm5sE+XbkIhxelhhy0BFiqmQ8VL1iuT cV2dek1WQEKCP4QrtdkLuaECtD/S6ao= -----END CERTIFICATE-----Generated at Sat Sep 26 02:23:57 2026 by rpki-client