$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c165e6b-2a16-392e-9ca9-ea8b22ef78c0.roa File: 1c165e6b-2a16-392e-9ca9-ea8b22ef78c0.roa (raw, json) Hash identifier: xHY0NSOuijUUihOiMtMP8QVbsEkrfZLMPuE7NEPfF1s= Subject key identifier: 6E:AA:5F:B7:32:8D:4D:59:D9:CE:98:73:CB:F5:71:2B:29:8B:7D:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4C3D6E3941BC935BE1082AA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c165e6b-2a16-392e-9ca9-ea8b22ef78c0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 7029 IP address blocks: 173.189.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6e:39:41:bc:93:5b:e1:08:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c2bef021-545d-4e8f-a55c-d2f15a6040be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:14:d1:61:08:91:61:0f:88:89:c5:73:fc:f1: 78:cb:c6:b0:e8:55:03:f8:23:e8:9d:94:de:06:38: 18:29:6c:9c:0b:40:67:b1:7b:00:c4:82:13:80:88: f9:8f:45:fd:34:5e:2d:1f:41:35:f3:d4:30:ac:3a: 0d:5a:6e:14:0f:50:52:0b:25:37:13:0f:9c:fe:8c: 75:d8:55:29:74:96:fa:7c:d4:12:68:af:a8:a7:82: 39:27:49:85:bc:32:1f:fc:6c:0e:fc:fa:41:cd:df: 5c:f1:28:c0:ba:a3:f3:50:20:bc:ab:63:70:b7:cf: 18:4f:bf:8f:29:64:4a:3c:dc:a0:94:de:31:2a:62: b0:f8:6e:6f:50:b5:fd:fe:28:b3:23:57:ad:a1:03: 4f:de:0a:cc:f5:aa:b6:34:50:45:61:e6:34:6f:14: 94:41:1d:cc:c3:1b:33:a5:14:2e:9e:d9:f8:f8:39: 2e:d5:cd:8c:18:1b:15:91:5e:b3:4e:a9:68:73:cd: 33:b8:ab:28:7b:74:08:5a:a9:57:c7:42:61:50:98: 77:d4:3f:fe:87:aa:76:9d:ef:92:d7:68:dd:7f:fd: 62:7c:7a:eb:5f:00:e3:96:a8:10:49:c2:1e:8c:09: e5:a1:c1:5a:0b:42:2a:dd:37:e2:6c:6a:e5:64:fd: 52:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AA:5F:B7:32:8D:4D:59:D9:CE:98:73:CB:F5:71:2B:29:8B:7D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c165e6b-2a16-392e-9ca9-ea8b22ef78c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:57:09:38:3e:2b:4b:cd:40:9b:67:11:74:13:60:6f:9b:1b: ef:fd:13:d5:34:e7:0d:90:1d:a6:23:ad:f2:05:d3:4e:4e:9e: 77:c0:9a:58:95:c8:59:10:c6:ee:5b:6c:1c:90:ee:4d:22:09: cf:d9:5a:e6:28:58:91:57:cf:f9:17:a2:c2:80:07:39:23:fb: 23:c1:46:94:cb:4a:76:f8:cb:06:80:51:14:ba:89:21:28:bc: 54:da:23:72:7f:fa:d0:cd:78:b6:d1:cb:51:96:74:70:61:ca: 11:f4:f3:3f:05:fb:29:d9:86:14:31:eb:d0:ac:4f:84:f5:35: ee:39:0b:0b:05:8a:1d:86:cb:1a:f4:dc:c8:d4:20:e3:60:83: 5b:c6:01:e2:12:cd:7f:ed:c5:43:69:53:9f:44:4d:95:9c:d1: 06:17:42:fa:c6:40:f4:5a:da:b3:41:d7:cc:d3:b9:f8:80:07: 76:ed:b3:1c:96:5f:a2:b0:d2:ad:05:d5:5b:c5:ca:96:5b:54: 16:42:b9:b8:f9:72:d9:ac:67:85:56:b1:8b:46:d0:0a:0c:5b: e0:19:d8:01:fc:36:f6:d7:b3:72:84:fa:09:e0:4e:b6:3c:f8: f4:06:38:7e:cc:b7:48:3e:3b:95:d4:25:bb:c5:46:35:d9:35: 01:50:1d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPW45QbyTW+EIKqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YzJiZWYwMjEtNTQ1ZC00ZThmLWE1NWMtZDJmMTVhNjA0MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghTRYQiRYQ+IicVz/PF4y8aw6FUD+CPonZTe BjgYKWycC0BnsXsAxIITgIj5j0X9NF4tH0E189QwrDoNWm4UD1BSCyU3Ew+c/ox1 2FUpdJb6fNQSaK+op4I5J0mFvDIf/GwO/PpBzd9c8SjAuqPzUCC8q2Nwt88YT7+P KWRKPNyglN4xKmKw+G5vULX9/iizI1etoQNP3grM9aq2NFBFYeY0bxSUQR3Mwxsz pRQuntn4+Dku1c2MGBsVkV6zTqloc80zuKsoe3QIWqlXx0JhUJh31D/+h6p2ne+S 12jdf/1ifHrrXwDjlqgQScIejAnlocFaC0Iq3TfibGrlZP1SpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6qX7cyjU1Z2c6Yc8v1cSspi30WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMxNjVlNmItMmExNi0z OTJlLTljYTktZWE4YjIyZWY3OGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9XCTg+K0vNQJtnEXQTYG+bG+/9E9U05w2QHaYjrfIF005OnnfAmliV yFkQxu5bbByQ7k0iCc/ZWuYoWJFXz/kXosKABzkj+yPBRpTLSnb4ywaAURS6iSEo vFTaI3J/+tDNeLbRy1GWdHBhyhH08z8F+ynZhhQx69CsT4T1Ne45CwsFih2Gyxr0 3MjUIONgg1vGAeISzX/txUNpU59ETZWc0QYXQvrGQPRa2rNB18zTufiAB3btsxyW X6Kw0q0F1VvFypZbVBZCubj5ctmsZ4VWsYtG0AoMW+AZ2AH8NvbXs3KE+gngTrY8 +PQGOH7Mt0g+O5XUJbvFRjXZNQFQHTo= -----END CERTIFICATE-----Generated at Tue Oct 13 21:35:12 2026 by rpki-client