$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa File: 1e069c73-4292-3ffe-a143-d91bade4b8f5.roa (raw, json) Hash identifier: J8gNr8qaypNjpGZmC2caKGEPwLA5RvcN245Gc3sc9ic= Subject key identifier: 8E:F7:63:F4:1F:16:6A:22:25:B2:4D:ED:FA:D8:47:30:CD:16:F9:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D934FC19ABC572A745018 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.211.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:93:4f:c1:9a:bc:57:2a:74:50:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=519b6afb-a63c-4e9f-9655-35cf22379046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0b:75:e5:c9:cc:31:4f:8b:cf:2b:d3:b9:20: 20:21:26:87:51:c1:a8:54:25:71:61:0a:48:64:d6: 92:58:27:2a:64:8a:02:d6:64:e6:dc:27:d0:1c:e9: 71:56:c0:67:e1:6b:0e:7c:45:63:5f:00:c1:8e:1a: 93:c1:be:ef:d9:f2:27:b9:4c:d7:b2:f7:43:b7:ee: 08:5d:26:87:4a:11:bd:28:df:fc:16:70:35:04:d7: b6:8f:52:63:74:90:28:db:3d:d0:41:98:f0:55:1d: 73:a0:0e:a2:54:3b:57:e8:32:e4:9e:3f:8d:82:b1: 65:df:1c:3c:dd:33:bd:67:cf:df:2f:b8:b3:3a:b3: 2f:0a:29:51:52:60:e5:d9:77:99:d8:9b:ea:28:f5: e1:53:0c:8d:16:00:dc:93:10:a0:94:3b:0b:84:3a: 87:6e:b7:a1:36:fb:cb:75:21:4f:dc:93:ca:52:8d: f7:12:95:d8:dd:a2:b0:52:a6:d9:09:2a:3b:bf:27: 01:40:85:f5:ba:b8:25:c7:ff:b7:2d:52:95:48:98: fb:45:69:fa:71:5e:31:c1:28:fd:c3:4e:e0:fd:9a: 3c:55:b9:26:da:35:75:32:bd:49:81:a0:1f:ff:8a: e7:46:83:f8:0a:6f:e7:86:6b:17:75:be:48:03:45: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F7:63:F4:1F:16:6A:22:25:B2:4D:ED:FA:D8:47:30:CD:16:F9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.211.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:54:2e:db:d0:ab:39:67:33:d4:c5:95:0b:df:34:63:f6:2b: 47:81:21:56:72:8e:35:24:dd:47:34:c0:90:5b:47:76:c4:71: 85:5e:e9:e9:a0:42:d8:92:b1:54:6e:31:06:6f:57:b9:b5:19: 2a:97:94:66:51:57:bc:3b:27:0a:4b:fe:fe:19:b4:66:71:44: 94:cb:79:6f:1e:b3:28:28:33:64:74:58:e3:b3:e5:07:8c:27: c6:85:1a:63:68:fa:63:de:41:04:dd:bd:93:4c:6c:c7:e1:a0: f9:4d:59:88:a8:3d:02:12:63:68:2f:b7:fd:ef:36:af:88:2c: b8:c8:54:e7:77:10:78:61:fa:1d:83:1a:17:88:c1:53:c1:7b: c7:fe:90:1a:b2:9c:85:e0:15:98:f2:ee:2f:ad:f4:41:72:36: 4b:e0:6a:76:98:e7:2d:41:28:4c:b3:8e:17:0c:0a:14:a9:e7: d4:5b:f5:e7:32:a0:dd:7b:74:a0:9c:e9:8b:85:bd:20:38:b6: e5:8f:06:0b:12:f0:23:3a:11:64:a0:ca:d8:ee:06:07:43:b6: ec:3f:9e:25:57:25:d3:12:22:79:f4:30:e0:d3:2d:ba:b9:0a: 72:d4:5e:b6:e0:b2:13:f6:5d:b3:09:bf:7f:98:ce:57:74:65: 93:c9:19:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZNPwZq8Vyp0UBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTE5YjZhZmItYTYzYy00ZTlmLTk2NTUtMzVjZjIyMzc5MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggt15cnMMU+LzyvTuSAgISaHUcGoVCVxYQpI ZNaSWCcqZIoC1mTm3CfQHOlxVsBn4WsOfEVjXwDBjhqTwb7v2fInuUzXsvdDt+4I XSaHShG9KN/8FnA1BNe2j1JjdJAo2z3QQZjwVR1zoA6iVDtX6DLknj+NgrFl3xw8 3TO9Z8/fL7izOrMvCilRUmDl2XeZ2JvqKPXhUwyNFgDckxCglDsLhDqHbrehNvvL dSFP3JPKUo33EpXY3aKwUqbZCSo7vycBQIX1urglx/+3LVKVSJj7RWn6cV4xwSj9 w07g/Zo8Vbkm2jV1Mr1JgaAf/4rnRoP4Cm/nhmsXdb5IA0XmxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI73Y/QfFmoiJbJN7frYRzDNFvmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUwNjljNzMtNDI5Mi0z ZmZlLWExNDMtZDkxYmFkZTRiOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrdPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9ULtvQqzlnM9TFlQvfNGP2K0eBIVZyjjUk3Uc0wJBbR3bEcYVe6emg QtiSsVRuMQZvV7m1GSqXlGZRV7w7JwpL/v4ZtGZxRJTLeW8esygoM2R0WOOz5QeM J8aFGmNo+mPeQQTdvZNMbMfhoPlNWYioPQISY2gvt/3vNq+ILLjIVOd3EHhh+h2D GheIwVPBe8f+kBqynIXgFZjy7i+t9EFyNkvganaY5y1BKEyzjhcMChSp59Rb9ecy oN17dKCc6YuFvSA4tuWPBgsS8CM6EWSgytjuBgdDtuw/niVXJdMSInn0MODTLbq5 CnLUXrbgshP2XbMJv3+Yzld0ZZPJGZ4= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:43 2026 by rpki-client