$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5885f44b-797d-3d8c-ac09-9e2c45b9fa8c.roa File: 5885f44b-797d-3d8c-ac09-9e2c45b9fa8c.roa (raw, json) Hash identifier: cHwWQCeiLZZeh0iotQR62CnBSQ6mSNTkj4Bk2YcKQe0= Subject key identifier: AA:7D:0D:72:53:10:46:C3:38:A5:F3:5B:9C:77:45:27:32:93:65:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5BA6D716C19874E23425A000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5885f44b-797d-3d8c-ac09-9e2c45b9fa8c.roa Signing time: Thu 01 Oct 2026 13:30:10 +0000 ROA not before: Thu 01 Oct 2026 13:30:10 +0000 ROA not after: Wed 30 Dec 2026 14:30:10 +0000 asID: 7029 IP address blocks: 173.213.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:a6:d7:16:c1:98:74:e2:34:25:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 1 13:30:10 2026 GMT Not After : Dec 30 14:30:10 2026 GMT Subject: CN=286ba98b-f019-45f1-9a90-6f84dd613ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:09:27:40:15:23:ea:da:07:de:26:4e:41: a0:df:f9:d9:0b:8f:dd:30:f1:60:9b:4e:31:d2:61: fb:61:80:08:8f:b5:4f:5c:48:57:07:c1:8d:22:67: a7:f7:04:f6:20:00:7f:4d:e0:8b:7f:eb:ba:a2:56: 7a:6c:ac:c0:47:0a:22:99:4f:ca:66:f4:fd:c2:15: 33:3a:57:d3:b6:81:26:c7:24:ee:be:bc:a6:cc:f5: 16:e4:55:1d:20:30:e1:f6:7b:c3:cb:7d:49:9d:f7: 3d:7d:e8:f8:8e:69:c6:e3:02:e6:6d:c2:bc:84:36: a9:47:19:79:66:96:77:d3:71:10:c5:c1:b4:c8:af: f2:cd:c8:60:c8:b9:14:45:85:2f:3f:d5:f8:f0:21: 22:a5:0c:02:d7:03:fb:ad:98:e2:fb:c1:75:49:dd: 41:2a:97:e2:b7:04:19:b5:a2:1a:0d:cf:0e:27:ef: 1a:d1:7c:45:db:26:53:32:c3:b6:6b:f2:ef:90:07: 11:50:03:0d:ff:fa:70:17:08:13:98:66:64:61:8a: 7c:78:63:f9:8f:61:b9:8a:d6:19:fa:3f:50:12:18: de:c3:86:b5:1b:30:21:7a:85:1d:fc:f2:55:e3:48: 9a:7e:75:48:e0:9c:ae:4d:29:c8:62:44:e3:01:37: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:0D:72:53:10:46:C3:38:A5:F3:5B:9C:77:45:27:32:93:65:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5885f44b-797d-3d8c-ac09-9e2c45b9fa8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f8:56:fd:e2:87:dd:32:c1:7f:a8:62:cd:51:bf:c3:8e:bc: 38:4c:ae:d1:eb:b7:32:9f:68:a1:c4:87:11:4e:e3:91:58:0b: 6f:33:34:6f:86:c4:05:04:71:ad:0c:17:7c:e6:67:89:d9:66: 10:ac:78:e5:3a:18:be:9a:af:30:fc:a3:d9:dd:b6:42:17:58: 0d:6a:e9:86:68:6e:46:ba:75:2c:3d:00:4f:93:52:37:8e:cb: 69:78:b9:b6:97:52:36:e3:57:2a:5e:d6:30:7d:95:0d:fe:45: 0d:73:bf:06:4e:ae:1d:c0:eb:d1:de:56:e0:2c:55:f9:bf:45: 0b:84:8d:62:ff:f9:02:f5:ac:72:95:b2:bd:be:5e:55:a5:27: 3e:fc:02:a1:72:1a:94:2f:41:51:0a:e1:c8:de:a2:12:1e:f2: 49:70:b5:a4:df:c9:e8:cc:3f:62:06:ee:bd:fc:67:0f:73:c1: 7f:db:3c:f3:af:be:63:2b:7c:25:11:d5:49:0b:a3:ad:97:2e: 5c:c2:21:21:9f:7a:3e:bb:3c:eb:6a:94:40:36:e5:41:d6:a8: e2:37:85:60:d2:eb:1d:61:38:f4:2b:58:39:63:55:46:4c:05: f7:e3:87:b4:d1:f8:0e:d3:0e:73:db:69:9c:26:e8:47:36:b5: 09:22:1e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bptcWwZh04jQloAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMTEzMzAxMFoXDTI2MTIzMDE0MzAxMFowLzEtMCsGA1UEAxMk Mjg2YmE5OGItZjAxOS00NWYxLTlhOTAtNmY4NGRkNjEzY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxskJJ0AVI+raB94mTkGg3/nZC4/dMPFgm04x 0mH7YYAIj7VPXEhXB8GNImen9wT2IAB/TeCLf+u6olZ6bKzARwoimU/KZvT9whUz OlfTtoEmxyTuvrymzPUW5FUdIDDh9nvDy31Jnfc9fej4jmnG4wLmbcK8hDapRxl5 ZpZ303EQxcG0yK/yzchgyLkURYUvP9X48CEipQwC1wP7rZji+8F1Sd1BKpfitwQZ taIaDc8OJ+8a0XxF2yZTMsO2a/LvkAcRUAMN//pwFwgTmGZkYYp8eGP5j2G5itYZ +j9QEhjew4a1GzAheoUd/PJV40iafnVI4JyuTSnIYkTjATcXcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKp9DXJTEEbDOKXzW5x3RScyk2VpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTg4NWY0NGItNzk3ZC0z ZDhjLWFjMDktOWUyYzQ1YjlmYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrdWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj4Vv3ih90ywX+oYs1Rv8OOvDhMrtHrtzKfaKHEhxFO45FYC28zNG+G xAUEca0MF3zmZ4nZZhCseOU6GL6arzD8o9ndtkIXWA1q6YZobka6dSw9AE+TUjeO y2l4ubaXUjbjVype1jB9lQ3+RQ1zvwZOrh3A69HeVuAsVfm/RQuEjWL/+QL1rHKV sr2+XlWlJz78AqFyGpQvQVEK4cjeohIe8klwtaTfyejMP2IG7r38Zw9zwX/bPPOv vmMrfCUR1UkLo62XLlzCISGfej67POtqlEA25UHWqOI3hWDS6x1hOPQrWDljVUZM Bffjh7TR+A7TDnPbaZwm6Ec2tQkiHqw= -----END CERTIFICATE-----Generated at Tue Oct 13 15:01:48 2026 by rpki-client