$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9e13f2-242e-3632-ac7f-25413d6418e7.roa File: 0f9e13f2-242e-3632-ac7f-25413d6418e7.roa (raw, json) Hash identifier: qikC4co2r8gFNokjBnZHhw+gtw/dT1JuzXs56W8L6pk= Subject key identifier: C7:62:E2:39:4B:64:28:E5:B3:25:A2:E7:D7:D4:FC:46:5A:D9:D3:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78FD76B6F242F9FF2579600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9e13f2-242e-3632-ac7f-25413d6418e7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.190.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:d7:6b:6f:24:2f:9f:f2:57:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ca9ebc98-33c4-46e4-abf2-ed47cf7d147c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:36:9a:dc:e9:db:f6:69:ef:7e:27:11:3a: 6b:e5:4e:83:21:ed:1a:c3:b7:60:2d:a3:d1:f8:b8: 95:d3:dd:b9:67:90:fc:7f:fe:50:5c:21:ef:fd:7e: 5c:13:97:42:78:ee:94:45:07:0d:1e:fd:e7:38:45: fe:39:82:24:c2:b4:a5:3f:7e:1f:6d:1f:a6:5d:00: c5:72:bf:de:c7:42:c5:3c:e4:33:0c:69:bf:6d:31: 61:aa:c2:69:6a:ae:b7:1e:7a:39:10:6d:dd:de:94: 62:a1:1a:e2:22:a7:fa:67:e1:47:11:93:93:df:58: 92:60:a8:fc:2d:3c:96:b0:8c:61:4f:7c:b3:4a:8f: 2c:42:9b:d2:7d:eb:1b:7b:f5:98:6b:94:b1:86:95: 5d:a9:f5:95:83:0b:13:e3:ac:9b:95:f5:98:56:dd: 91:d5:dd:b3:ef:e6:39:d7:d1:f4:8a:72:00:2a:1e: 2a:f8:63:9a:db:b5:83:3c:e5:b9:0a:de:5b:8d:a7: 82:9a:45:6b:55:2e:85:e5:43:2b:b3:d3:5a:33:c5: 18:88:b6:ba:44:f4:10:25:3c:f7:7d:da:19:73:35: 6a:15:59:e7:77:d6:de:c3:72:31:cf:ca:e9:d9:b4: 61:d7:40:ad:94:5c:4b:7e:7f:8b:dd:f1:74:16:72: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:62:E2:39:4B:64:28:E5:B3:25:A2:E7:D7:D4:FC:46:5A:D9:D3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9e13f2-242e-3632-ac7f-25413d6418e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c6:e6:de:ba:46:b1:d5:86:b3:6f:b6:33:28:0f:74:7f:ef: 04:fb:71:52:97:a7:29:d4:1b:d7:0f:08:9c:d5:18:67:9e:ad: 60:af:32:d3:c9:92:7d:5a:18:77:bc:58:9c:ce:f6:b7:15:1b: 33:9f:04:23:76:62:91:00:74:0c:e0:1a:3a:b0:06:ed:5c:f3: 30:61:69:d0:ab:eb:9b:51:df:20:19:a0:e4:6f:12:f5:b4:a5: 40:31:be:0b:ac:fe:98:90:83:8b:94:ea:04:4b:8f:53:cd:47: 73:38:4f:07:eb:f8:4f:6f:9d:ab:88:ad:55:eb:4c:fb:71:5b: 81:1f:df:b9:2b:6d:10:2e:06:e4:20:27:29:4a:d8:b5:5e:b6: 6b:34:37:38:c2:a8:ce:78:9b:10:1b:31:ac:a0:db:24:b9:03: 57:9a:a5:b9:e6:c1:b4:43:c9:1d:53:bc:20:de:6a:16:bb:56: 9e:85:94:91:61:2a:6f:4c:9b:20:fa:04:83:fe:c5:c1:c6:9a: 9e:a2:ed:23:9b:16:5f:03:a8:05:10:cb:a4:90:d9:f6:d5:2c: 88:98:58:f3:00:7b:bc:07:6b:fd:1f:c6:aa:25:7d:ec:45:bb: 74:ca:40:fc:a4:7a:d9:52:95:fa:1c:31:03:69:78:cf:86:e8: 8b:f0:69:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj9drbyQvn/JXlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2E5ZWJjOTgtMzNjNC00NmU0LWFiZjItZWQ0N2NmN2QxNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Y2mtzp2/Zp734nETpr5U6DIe0aw7dgLaPR +LiV0925Z5D8f/5QXCHv/X5cE5dCeO6URQcNHv3nOEX+OYIkwrSlP34fbR+mXQDF cr/ex0LFPOQzDGm/bTFhqsJpaq63Hno5EG3d3pRioRriIqf6Z+FHEZOT31iSYKj8 LTyWsIxhT3yzSo8sQpvSfesbe/WYa5SxhpVdqfWVgwsT46yblfWYVt2R1d2z7+Y5 19H0inIAKh4q+GOa27WDPOW5Ct5bjaeCmkVrVS6F5UMrs9NaM8UYiLa6RPQQJTz3 fdoZczVqFVnnd9bew3Ixz8rp2bRh10CtlFxLfn+L3fF0FnKRCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdi4jlLZCjlsyWi59fU/EZa2dOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGY5ZTEzZjItMjQyZS0z NjMyLWFjN2YtMjU0MTNkNjQxOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb7KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/G5t66RrHVhrNvtjMoD3R/7wT7cVKXpynUG9cPCJzVGGeerWCvMtPJ kn1aGHe8WJzO9rcVGzOfBCN2YpEAdAzgGjqwBu1c8zBhadCr65tR3yAZoORvEvW0 pUAxvgus/piQg4uU6gRLj1PNR3M4Twfr+E9vnauIrVXrTPtxW4Ef37krbRAuBuQg JylK2LVetms0NzjCqM54mxAbMayg2yS5A1eapbnmwbRDyR1TvCDeaha7Vp6FlJFh Km9MmyD6BIP+xcHGmp6i7SObFl8DqAUQy6SQ2fbVLIiYWPMAe7wHa/0fxqolfexF u3TKQPyketlSlfocMQNpeM+G6IvwacQ= -----END CERTIFICATE-----Generated at Thu Aug 27 17:02:24 2026 by rpki-client