$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa File: 0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa (raw, json) Hash identifier: FEzIedLDKxgws8c6gOwXLZQDiPpC3VdPbJBnzqtHo+M= Subject key identifier: 4A:67:98:85:5E:18:84:0F:10:03:CB:71:FB:3A:73:FD:BB:31:73:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62CACB189E8EC8DADE2BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 173.185.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ca:cb:18:9e:8e:c8:da:de:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=22a42e95-c55e-4eb6-b6c7-365ebdfb20ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:2e:fb:54:69:31:44:cf:3d:04:33:aa:67: 7a:8b:0d:db:be:c1:02:1c:5e:f7:a7:b3:ca:f8:53: a8:8c:ae:69:7a:cf:67:97:43:d0:f4:75:7f:28:50: 90:b8:93:2a:69:a6:d5:2f:46:72:b7:87:90:c8:8d: 38:61:3e:50:e4:75:05:e5:c0:de:fd:43:c1:86:f4: 33:50:5a:cf:14:c0:e9:38:d8:10:1a:c1:b9:91:cc: a0:67:24:b0:7f:4a:55:f4:ef:dc:93:a5:9a:aa:9a: 6f:9d:e7:9d:83:7d:a9:d7:8f:47:b6:1a:58:cf:86: 53:c8:47:f1:3a:56:ca:67:8e:71:b4:61:2d:94:01: 73:48:3a:8c:84:e1:17:78:68:40:94:8b:b9:af:b0: af:a1:ba:dc:2a:0e:e6:6a:17:e9:6c:9b:82:f1:5e: 94:96:71:fb:34:07:ab:7c:46:93:9b:52:0d:c8:69: 2c:ee:17:76:68:b0:e9:d2:0c:b3:76:6a:73:a2:e7: d1:dd:f5:72:56:c4:0e:dc:ee:ef:77:07:8a:ef:e6: 39:1e:ca:19:58:63:b2:fa:46:0c:21:1f:ce:04:22: 65:f5:92:e4:99:37:a1:18:c5:d7:49:fd:40:ed:9e: 5a:2b:b4:09:85:35:cb:4c:bf:e9:dc:3b:6f:f0:f2: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:67:98:85:5E:18:84:0F:10:03:CB:71:FB:3A:73:FD:BB:31:73:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:cb:79:e9:ae:51:93:a6:83:84:4a:8d:04:e5:26:e5:9f:a7: 2a:ff:4a:44:89:53:9c:23:e9:f4:14:aa:17:bd:23:9e:b0:27: e6:8d:60:c6:d7:f2:82:63:0f:97:a5:3a:3b:68:c8:1e:cf:64: 58:d5:f8:d6:3e:2d:96:2c:6f:34:ac:ed:fc:1b:55:97:f1:70: 61:0e:6b:ff:a1:47:3e:8d:82:81:4d:84:83:bc:87:27:d5:a1: 1a:8f:e4:b8:c0:af:5a:00:0a:eb:43:29:a8:e1:29:16:16:d3: f3:0c:5c:59:37:b4:52:d5:62:0d:3c:b7:34:a3:ca:68:a6:1c: d5:64:84:0f:9f:0b:7d:02:8d:26:89:f6:66:21:c9:1b:fb:33: db:e2:59:28:8d:30:ef:c0:af:2e:bf:48:f8:5f:cd:19:d0:3c: 16:58:4b:f1:e5:a9:08:68:5d:69:d0:f1:db:8d:68:76:90:be: 24:38:20:1f:5a:07:5e:ec:28:e4:32:16:c9:01:96:c0:d6:52: 6b:1f:20:82:0b:56:e9:a0:84:aa:6d:39:0e:aa:dd:c9:30:fc: 35:43:4e:db:98:8a:a5:51:d3:2d:74:27:89:d0:1e:57:53:10: 77:b9:e3:6e:9f:20:1e:d6:e2:b1:ef:89:ae:9c:d5:ff:e9:ab: be:cb:36:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsrLGJ6OyNreK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MjJhNDJlOTUtYzU1ZS00ZWI2LWI2YzctMzY1ZWJkZmIyMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwu+1RpMUTPPQQzqmd6iw3bvsECHF73p7PK +FOojK5pes9nl0PQ9HV/KFCQuJMqaabVL0Zyt4eQyI04YT5Q5HUF5cDe/UPBhvQz UFrPFMDpONgQGsG5kcygZySwf0pV9O/ck6Waqppvneedg32p149HthpYz4ZTyEfx OlbKZ45xtGEtlAFzSDqMhOEXeGhAlIu5r7CvobrcKg7mahfpbJuC8V6UlnH7NAer fEaTm1INyGks7hd2aLDp0gyzdmpzoufR3fVyVsQO3O7vdweK7+Y5HsoZWGOy+kYM IR/OBCJl9ZLkmTehGMXXSf1A7Z5aK7QJhTXLTL/p3Dtv8PJOewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpnmIVeGIQPEAPLcfs6c/27MXNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGJlMTRlZTItMjdjYS0z ZmRmLTlkNWItMWU3NjdkYjRlZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTLeemuUZOmg4RKjQTlJuWfpyr/SkSJU5wj6fQUqhe9I56wJ+aNYMbX 8oJjD5elOjtoyB7PZFjV+NY+LZYsbzSs7fwbVZfxcGEOa/+hRz6NgoFNhIO8hyfV oRqP5LjAr1oACutDKajhKRYW0/MMXFk3tFLVYg08tzSjymimHNVkhA+fC30CjSaJ 9mYhyRv7M9viWSiNMO/Ary6/SPhfzRnQPBZYS/HlqQhoXWnQ8duNaHaQviQ4IB9a B17sKOQyFskBlsDWUmsfIIILVumghKptOQ6q3ckw/DVDTtuYiqVR0y10J4nQHldT EHe5426fIB7W4rHvia6c1f/pq77LNgs= -----END CERTIFICATE-----Generated at Tue Oct 13 08:17:59 2026 by rpki-client