$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa File: 0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa (raw, json) Hash identifier: 1y0EyiHRXr19sLl/TQBdbocBkpT1uEUEi/D1/z2p93A= Subject key identifier: 26:4C:D5:45:E3:88:E5:91:63:AF:67:FB:F6:23:67:30:0C:DB:00:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A50255AE85790BDACAC9540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 173.189.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:25:5a:e8:57:90:bd:ac:ac:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=15dd4ea4-c18e-40db-990b-f7225aaea6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:8a:36:61:a5:e5:17:8c:b6:bc:8a:b3:be: 17:ac:c9:fd:c9:a4:da:40:82:84:2e:45:81:cf:13: 0a:84:0e:fa:5f:20:7a:03:c4:0c:0a:ab:15:11:cb: 09:77:75:68:6e:91:c4:b3:29:6c:0f:7b:80:dd:9b: 53:b2:54:34:b5:ca:dc:14:73:48:d5:52:c4:74:dc: 86:ab:d9:cb:1c:f9:56:4d:50:14:5b:62:ba:70:61: 1f:dd:7e:51:a0:e3:d2:75:6d:9b:70:51:58:dc:27: dc:54:2b:44:7f:7b:55:89:d7:1e:da:d2:f4:9a:22: d9:40:60:5c:41:c7:9b:f9:84:b7:14:bd:04:b4:25: 80:4e:a0:85:b8:87:67:db:ae:eb:72:c7:e7:f8:5b: e9:98:5a:00:5a:77:f4:fc:d0:b3:41:46:53:1f:cf: 1b:79:b0:9a:ea:ac:a5:ac:04:97:73:b0:5b:c8:7b: ba:03:79:cf:ae:b8:bb:35:97:88:ad:fd:52:11:6f: 99:94:19:f8:2e:46:ed:61:cb:d9:b6:59:06:57:49: da:3d:a8:79:81:38:b7:52:c9:96:1f:8e:00:12:3d: bb:5c:aa:73:69:57:2e:34:b3:2c:72:a7:f6:0c:84: 03:be:ea:ef:c1:22:c0:32:53:d9:86:89:d9:e6:6b: 47:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4C:D5:45:E3:88:E5:91:63:AF:67:FB:F6:23:67:30:0C:DB:00:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f8:bf:46:c6:92:de:20:fa:0b:ba:98:32:60:0d:5a:6c:b1: 75:d2:eb:b3:3d:32:4e:4f:ee:ba:bf:08:47:aa:e5:af:ec:41: 0e:b9:4b:8d:6f:40:02:58:42:09:c2:9c:e9:5a:cf:53:0f:b7: 58:c9:93:fc:2d:fc:97:50:16:e9:ef:4a:5b:1a:ce:00:65:1f: e6:28:46:8d:48:87:13:56:f6:f4:3c:eb:60:18:98:c2:e5:0c: 84:90:95:23:ce:3f:99:96:df:14:28:37:a7:8f:57:19:ee:2f: a2:93:01:4f:b3:93:bd:08:0e:4e:ec:7b:5d:94:d0:66:eb:a3: eb:62:de:9f:c2:9b:82:83:4c:21:01:40:d4:dd:83:bd:e9:c2: 35:ad:1a:bb:97:e2:28:2f:2c:da:e9:ad:52:3f:f0:2c:e6:97: a4:13:99:f3:ac:7b:b5:51:aa:50:70:f7:dc:06:67:c9:45:1f: ae:87:5c:a3:5a:c0:bd:90:43:68:eb:27:83:26:86:d6:21:4d: 25:a8:24:14:68:1d:a4:b8:06:d8:e0:00:ec:29:93:96:aa:b9: f7:82:7d:fa:8e:6b:44:c6:da:b5:79:c2:e5:03:1b:b0:e6:26: 2c:2c:f2:0e:c6:06:96:c3:0d:7a:85:31:83:62:76:7b:26:72: ab:00:f0:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UCVa6FeQvayslUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MTVkZDRlYTQtYzE4ZS00MGRiLTk5MGItZjcyMjVhYWVhNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjiKNmGl5ReMtryKs74XrMn9yaTaQIKELkWB zxMKhA76XyB6A8QMCqsVEcsJd3VobpHEsylsD3uA3ZtTslQ0tcrcFHNI1VLEdNyG q9nLHPlWTVAUW2K6cGEf3X5RoOPSdW2bcFFY3CfcVCtEf3tVidce2tL0miLZQGBc Qceb+YS3FL0EtCWATqCFuIdn267rcsfn+FvpmFoAWnf0/NCzQUZTH88bebCa6qyl rASXc7BbyHu6A3nPrri7NZeIrf1SEW+ZlBn4LkbtYcvZtlkGV0naPah5gTi3UsmW H44AEj27XKpzaVcuNLMscqf2DIQDvurvwSLAMlPZhonZ5mtHUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZM1UXjiOWRY69n+/YjZzAM2wDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQzMmYzZmMtODM4OC0z M2I3LTlmMjktMWYwZjRmNWIwNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv4v0bGkt4g+gu6mDJgDVpssXXS67M9Mk5P7rq/CEeq5a/sQQ65S41v QAJYQgnCnOlaz1MPt1jJk/wt/JdQFunvSlsazgBlH+YoRo1IhxNW9vQ862AYmMLl DISQlSPOP5mW3xQoN6ePVxnuL6KTAU+zk70IDk7se12U0Gbro+ti3p/Cm4KDTCEB QNTdg73pwjWtGruX4igvLNrprVI/8Czml6QTmfOse7VRqlBw99wGZ8lFH66HXKNa wL2QQ2jrJ4MmhtYhTSWoJBRoHaS4BtjgAOwpk5aqufeCffqOa0TG2rV5wuUDG7Dm Jiws8g7GBpbDDXqFMYNidnsmcqsA8JY= -----END CERTIFICATE-----Generated at Wed Oct 14 13:08:49 2026 by rpki-client