$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa File: 1acc8c5b-1d39-3e1e-886a-120184f0d402.roa (raw, json) Hash identifier: ecW3KWWlSleFKJFwYGTFUxTo5t8otbUBb/66hn2PcNU= Subject key identifier: 45:EE:DF:92:BA:09:DC:39:98:37:21:F8:27:52:44:23:A5:42:85:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA79589D7D3848FEC48488C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.187.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:89:d7:d3:84:8f:ec:48:48:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1b103073-4de9-4c4c-b724-615c8091e4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:80:b6:52:46:ff:3e:3d:82:2e:31:4a:79: 56:05:ca:83:5e:b9:19:7c:2b:1c:35:68:52:75:9c: 9c:07:98:6b:b7:54:79:91:60:6c:60:8e:1c:ce:46: cb:bd:ac:2a:e0:73:b3:fb:4f:dc:bd:21:da:b1:e4: b4:14:24:e8:93:fe:7f:9e:ad:39:ae:a6:79:6a:ae: e7:ce:26:9f:01:c9:ce:d0:e1:f9:7d:62:bc:18:f0: ca:ac:34:ba:07:33:e3:91:85:e6:ad:5f:2e:99:5e: e5:02:9b:5c:4d:f9:6d:7c:77:de:3d:71:b6:b8:a9: ee:d5:6c:03:3f:73:fa:43:6d:23:08:66:db:07:24: 0b:0d:1a:7e:d5:50:58:65:1e:bf:7f:15:fe:cb:4a: a2:fc:39:54:60:6b:e1:ff:de:7a:35:ad:22:c4:6a: 80:a8:22:d5:b9:3d:ba:20:cb:fa:07:b1:cd:b1:cd: 73:de:98:a0:34:70:25:4c:ce:ea:dd:39:c6:33:49: bc:64:19:93:d2:3c:55:15:40:b9:f4:a7:fc:5f:a4: 2d:5a:54:8b:d4:7b:a2:a2:5c:92:b2:b0:c1:b1:03: f2:8d:85:4f:92:10:5a:ea:c9:19:76:07:f2:7f:91: 11:07:2b:21:a9:79:64:2b:7c:a9:da:76:76:56:70: 8c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EE:DF:92:BA:09:DC:39:98:37:21:F8:27:52:44:23:A5:42:85:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e8:8d:0d:97:49:89:97:44:47:69:d6:45:a4:7a:59:8c:27: 92:07:70:8e:f0:0f:8a:a6:7b:50:ab:89:10:1e:ec:16:e1:4a: ed:17:22:84:77:16:2a:d5:14:12:86:e9:61:85:c9:6c:d3:bb: cc:64:01:f9:af:d9:4e:c5:5b:90:ab:88:e6:af:ed:32:c5:c3: b5:94:ed:e2:b8:41:b1:ec:97:60:84:90:c1:74:48:25:37:08: fb:79:11:57:9d:6a:86:32:78:56:b2:61:61:ae:c1:b4:23:5c: ce:90:ce:fd:2e:da:b7:ef:81:7c:d8:6c:8c:b0:f5:5f:31:99: 72:d9:62:c1:7e:35:f4:41:bf:ae:7d:28:e1:74:e7:2a:07:39: aa:c1:19:14:eb:66:8a:de:fe:db:0e:ab:1f:59:ca:52:cd:53: bb:63:4e:02:93:38:22:04:50:2d:55:1f:00:92:52:87:06:0c: e6:26:03:45:80:9a:fc:78:e5:51:a4:eb:65:22:37:e8:87:f9: 3c:e2:36:37:56:db:9c:a9:38:f1:d2:e3:b8:9e:37:a3:3e:71: 36:b0:07:a8:ea:5c:4e:65:d5:83:00:19:14:a1:ee:57:2a:fc: 44:b7:a4:79:da:83:16:b3:ed:43:5d:b0:ca:97:20:c7:63:31: 7c:cd:4b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlYnX04SP7EhIjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWIxMDMwNzMtNGRlOS00YzRjLWI3MjQtNjE1YzgwOTFlNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPeAtlJG/z49gi4xSnlWBcqDXrkZfCscNWhS dZycB5hrt1R5kWBsYI4czkbLvawq4HOz+0/cvSHaseS0FCTok/5/nq05rqZ5aq7n ziafAcnO0OH5fWK8GPDKrDS6BzPjkYXmrV8umV7lAptcTfltfHfePXG2uKnu1WwD P3P6Q20jCGbbByQLDRp+1VBYZR6/fxX+y0qi/DlUYGvh/956Na0ixGqAqCLVuT26 IMv6B7HNsc1z3pigNHAlTM7q3TnGM0m8ZBmT0jxVFUC59Kf8X6QtWlSL1HuiolyS srDBsQPyjYVPkhBa6skZdgfyf5ERByshqXlkK3yp2nZ2VnCMYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXu35K6Cdw5mDch+CdSRCOlQoUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjYzhjNWItMWQzOS0z ZTFlLTg4NmEtMTIwMTg0ZjBkNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXojQ2XSYmXREdp1kWkelmMJ5IHcI7wD4qme1CriRAe7BbhSu0XIoR3 FirVFBKG6WGFyWzTu8xkAfmv2U7FW5CriOav7TLFw7WU7eK4QbHsl2CEkMF0SCU3 CPt5EVedaoYyeFayYWGuwbQjXM6Qzv0u2rfvgXzYbIyw9V8xmXLZYsF+NfRBv659 KOF05yoHOarBGRTrZore/tsOqx9ZylLNU7tjTgKTOCIEUC1VHwCSUocGDOYmA0WA mvx45VGk62UiN+iH+TziNjdW25ypOPHS47ieN6M+cTawB6jqXE5l1YMAGRSh7lcq /ES3pHnagxaz7UNdsMqXIMdjMXzNS+o= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:50 2026 by rpki-client