$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa File: 36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa (raw, json) Hash identifier: rUhYqqOg60m3Pl6AsjSqDKL9/sNR028sjiTmdIAKFxA= Subject key identifier: 75:AC:F6:E8:6C:BD:6B:29:97:20:CF:92:AD:04:AD:A3:93:03:63:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D9ADE8C50BD145AA8A880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 174.130.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:9a:de:8c:50:bd:14:5a:a8:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=4d4c0ce1-cabd-4d3f-95ff-86a8874a9fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:ae:ba:eb:34:35:99:c9:67:5e:12:1d:2f: 4d:b9:5e:1f:a6:89:59:18:27:07:a8:a9:63:ac:8d: 14:8a:f8:c5:01:30:f9:0f:7e:ec:94:a7:cc:d3:20: b4:89:cb:a0:33:49:9d:ab:34:44:f0:ce:ed:10:0a: 82:b5:c0:e2:70:f2:60:69:0e:c6:10:1e:3a:a7:4a: cd:c4:1f:3a:5a:6d:da:e0:75:b7:f3:d4:7d:0b:08: 17:c7:23:a8:b8:77:60:be:36:97:ba:eb:31:e0:84: 47:cc:6e:aa:56:9a:eb:52:92:e3:be:39:3d:d9:f9: a6:a4:4c:8f:e9:32:e5:cb:12:62:4c:f7:97:7d:e6: ab:54:ce:ed:d2:4b:be:0d:a0:38:a9:b2:12:69:73: bd:de:85:a9:06:85:81:76:3c:84:14:25:36:03:44: 9c:e2:7f:7e:84:b3:f5:e3:f3:6c:32:5c:97:48:7f: 23:fd:b0:b5:55:60:fb:33:9c:62:b0:9f:a7:ed:06: cb:43:ef:07:b1:36:66:51:6e:ba:fe:b4:eb:9a:7b: 08:82:af:3c:35:06:6b:ff:4c:b6:4a:33:97:1e:49: 00:bf:15:01:81:ae:c3:ff:58:14:f6:c1:79:f9:8c: 31:ae:1a:36:c2:1c:6c:73:68:7b:44:e6:90:9a:25: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AC:F6:E8:6C:BD:6B:29:97:20:CF:92:AD:04:AD:A3:93:03:63:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:db:db:97:ec:83:3e:0a:7d:c9:71:55:cc:61:6b:e0:42:5f: 12:a4:f3:8d:58:47:dc:72:a5:72:5b:7b:96:46:a2:fb:d0:0f: 68:98:f8:f5:48:08:4d:9f:8f:00:d6:d5:15:6e:47:14:79:61: 71:e1:84:ce:9a:12:9f:50:a3:3f:e5:81:8e:3a:b3:6c:76:fb: b1:b0:a6:be:46:9d:f6:a3:9c:69:8b:78:f2:97:51:5b:c1:5c: 87:8e:97:25:c9:e6:76:5c:f9:a2:26:61:41:86:66:f2:68:02: c0:14:2c:8f:cc:d6:84:f3:6f:77:26:f4:0c:71:2d:00:20:23: e4:e8:02:84:1f:12:28:a9:ca:e4:25:16:3c:74:bf:c1:50:7a: 92:34:d2:3e:4b:fc:15:ce:78:74:f4:e5:15:99:ac:ac:d0:14: df:f9:b4:6d:58:7e:75:77:4a:fa:1c:7c:be:a1:5d:cd:3a:e5: 12:f2:c3:9d:a9:cc:1b:fe:e0:05:09:ba:04:0a:5a:2f:df:f8: 1f:0a:62:86:fb:d6:3d:8a:af:da:f8:c8:3b:c9:b5:37:13:09: 30:d8:b1:6c:5c:cb:54:ab:ac:57:2d:1b:46:f8:4d:39:3e:ca: c4:cd:22:a9:d7:cb:f6:6a:21:a2:47:b1:f2:95:cd:dd:4a:cb: 0a:bf:e8:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZrejFC9FFqoqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NGQ0YzBjZTEtY2FiZC00ZDNmLTk1ZmYtODZhODg3NGE5ZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr+uuus0NZnJZ14SHS9NuV4fpolZGCcHqKlj rI0UivjFATD5D37slKfM0yC0icugM0mdqzRE8M7tEAqCtcDicPJgaQ7GEB46p0rN xB86Wm3a4HW389R9CwgXxyOouHdgvjaXuusx4IRHzG6qVprrUpLjvjk92fmmpEyP 6TLlyxJiTPeXfearVM7t0ku+DaA4qbISaXO93oWpBoWBdjyEFCU2A0Sc4n9+hLP1 4/NsMlyXSH8j/bC1VWD7M5xisJ+n7QbLQ+8HsTZmUW66/rTrmnsIgq88NQZr/0y2 SjOXHkkAvxUBga7D/1gU9sF5+Ywxrho2whxsc2h7ROaQmiX0mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWs9uhsvWsplyDPkq0EraOTA2MPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzY5MDljYjctNTk1MC0z YmNjLWI5NGMtYTBkMmExYzBkMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjb25fsgz4KfclxVcxha+BCXxKk841YR9xypXJbe5ZGovvQD2iY+PVI CE2fjwDW1RVuRxR5YXHhhM6aEp9Qoz/lgY46s2x2+7Gwpr5GnfajnGmLePKXUVvB XIeOlyXJ5nZc+aImYUGGZvJoAsAULI/M1oTzb3cm9AxxLQAgI+ToAoQfEiipyuQl Fjx0v8FQepI00j5L/BXOeHT05RWZrKzQFN/5tG1YfnV3SvocfL6hXc065RLyw52p zBv+4AUJugQKWi/f+B8KYob71j2Kr9r4yDvJtTcTCTDYsWxcy1SrrFctG0b4TTk+ ysTNIqnXy/ZqIaJHsfKVzd1Kywq/6H8= -----END CERTIFICATE-----Generated at Tue Oct 13 16:01:55 2026 by rpki-client