$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa File: 1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa (raw, json) Hash identifier: X1MkkbdQQq8kL4lJFuNBgD1MpBBiC6w0LxsxjHFl0hU= Subject key identifier: 49:96:87:0F:8D:79:71:34:87:F0:F2:DC:F8:82:DB:22:10:7F:F1:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49863761143B644FCCD457C2 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.186.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:37:61:14:3b:64:4f:cc:d4:57:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d58e99d3-2bae-4409-abe9-e87b427e9bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:f5:b0:62:29:45:9a:77:26:f3:3c:14:bb: 82:6f:f9:67:53:cf:8b:dd:2d:36:e4:e1:82:19:64: 93:6b:0a:94:8d:4e:b4:b7:15:41:e7:08:0c:9e:67: 03:22:3d:25:05:0f:b8:89:f8:b1:71:eb:10:7f:fa: 2e:e5:d6:4d:25:42:37:8e:a6:4a:f3:e8:5a:8e:03: 7a:c1:2f:72:73:bc:a1:50:55:6a:45:8e:ea:be:c7: 78:12:b0:a6:ea:62:4a:fa:31:ff:63:59:4c:c1:15: db:6f:ba:73:18:8f:df:7f:21:ed:9c:b8:e4:16:17: 08:be:77:11:6b:de:21:c3:c3:d8:1c:fa:a1:14:2d: 57:88:b5:63:ca:a4:84:5f:72:47:62:40:3d:70:f7: 43:6f:dd:d5:0f:33:b0:f0:25:8c:c5:b7:76:a9:b2: 68:9c:2f:b7:4e:95:3f:26:7e:90:cd:b7:ac:c1:0a: eb:ea:b6:42:ed:09:f1:f4:b5:2f:55:c4:ae:58:5e: ff:f9:ca:87:1b:11:d1:98:2f:d5:5e:c3:8f:02:b2: e8:27:80:b2:e5:de:26:0d:e9:03:d8:4b:62:73:4c: 22:08:de:0c:64:e7:5c:bc:a3:0d:28:a6:82:05:72: d7:a5:13:ce:30:8f:bf:47:d5:25:37:16:5d:98:d9: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:96:87:0F:8D:79:71:34:87:F0:F2:DC:F8:82:DB:22:10:7F:F1:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1c:2a:31:59:ea:c6:44:38:e0:dc:64:3d:c1:cf:a6:68:81: c9:d9:01:88:02:8e:fe:59:88:bb:4d:f0:a9:d6:ab:68:57:a8: 5d:09:3b:cc:95:b9:3e:08:51:52:df:a4:dd:28:d2:58:41:48: 32:54:97:c4:5f:b6:c8:5b:e7:25:1a:42:0a:ef:56:85:24:24: 4b:33:05:f0:cd:dc:43:eb:92:fc:91:6b:a4:61:f7:cf:c2:61: 13:db:f4:db:9b:3d:fd:a5:bc:ca:2b:fb:f5:57:65:fa:00:68: f3:2b:5c:dc:60:40:b5:56:79:72:d7:c1:f2:ed:83:80:7e:a2: 3a:3d:5c:6a:e9:a7:c5:ed:95:28:96:c2:88:60:04:06:48:66: f6:7d:8e:78:4c:18:af:7f:fc:2a:c7:d1:55:0a:87:c6:a5:4a: f2:3c:41:15:7a:d6:13:f9:ba:06:7c:4d:9d:dd:1e:0d:2d:81: 17:49:70:4b:57:25:53:3f:f6:73:f4:b0:9d:82:20:b0:e3:22: 20:f2:34:d9:0d:e4:25:25:f0:b2:ce:45:18:23:58:d5:58:a6: c3:00:56:9f:d1:ec:25:ac:82:60:cc:62:38:80:73:79:db:a6: 88:31:44:54:2e:87:50:9a:31:d9:47:b9:25:5e:4f:11:13:87: 80:d9:58:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhjdhFDtkT8zUV8IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDU4ZTk5ZDMtMmJhZS00NDA5LWFiZTktZTg3YjQyN2U5YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtb1sGIpRZp3JvM8FLuCb/lnU8+L3S025OGC GWSTawqUjU60txVB5wgMnmcDIj0lBQ+4ifixcesQf/ou5dZNJUI3jqZK8+hajgN6 wS9yc7yhUFVqRY7qvsd4ErCm6mJK+jH/Y1lMwRXbb7pzGI/ffyHtnLjkFhcIvncR a94hw8PYHPqhFC1XiLVjyqSEX3JHYkA9cPdDb93VDzOw8CWMxbd2qbJonC+3TpU/ Jn6QzbeswQrr6rZC7Qnx9LUvVcSuWF7/+cqHGxHRmC/VXsOPArLoJ4Cy5d4mDekD 2Etic0wiCN4MZOdcvKMNKKaCBXLXpRPOMI+/R9UlNxZdmNl5DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmWhw+NeXE0h/Dy3PiC2yIQf/G0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMxZjg1NjItMzVlNS0z MTgwLWI0ZGYtZTQ2MDVmZjA2YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGocKjFZ6sZEOODcZD3Bz6ZogcnZAYgCjv5ZiLtN8KnWq2hXqF0JO8yV uT4IUVLfpN0o0lhBSDJUl8Rftshb5yUaQgrvVoUkJEszBfDN3EPrkvyRa6Rh98/C YRPb9NubPf2lvMor+/VXZfoAaPMrXNxgQLVWeXLXwfLtg4B+ojo9XGrpp8XtlSiW wohgBAZIZvZ9jnhMGK9//CrH0VUKh8alSvI8QRV61hP5ugZ8TZ3dHg0tgRdJcEtX JVM/9nP0sJ2CILDjIiDyNNkN5CUl8LLORRgjWNVYpsMAVp/R7CWsgmDMYjiAc3nb pogxRFQuh1CaMdlHuSVeTxETh4DZWPg= -----END CERTIFICATE-----Generated at Tue Oct 13 17:41:42 2026 by rpki-client