$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d9b1eef-3238-3c93-9444-e91f4b5e174a.roa File: 6d9b1eef-3238-3c93-9444-e91f4b5e174a.roa (raw, json) Hash identifier: oKxPXHCuO8EpImSIgYeuzbPG9E0da6rlYaGK4Cw6t+o= Subject key identifier: 6C:FA:66:A8:99:40:49:95:F1:EB:12:E1:08:60:14:D0:A0:1F:29:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7352CDC407D8A3E162DD2A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d9b1eef-3238-3c93-9444-e91f4b5e174a.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 173.185.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:cd:c4:07:d8:a3:e1:62:dd:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=521d0394-ca13-4b65-b440-5d80d16af193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:27:1e:2e:59:05:d3:10:69:d1:0f:7f:28: 65:45:53:c5:33:08:79:59:a6:64:7b:df:68:d2:1f: 47:1a:ff:47:90:5d:03:d4:1d:32:09:6c:f4:fe:b2: 15:9c:4c:cb:93:4b:32:8c:32:ee:2c:12:f2:30:92: 65:7c:62:41:d3:7c:7e:dc:82:9b:57:44:55:72:33: d7:9c:64:c2:58:9d:a5:c8:a7:a5:52:37:dd:d1:02: 24:75:c3:3e:3c:ad:b8:dd:28:20:d2:cf:36:d0:7d: 76:c4:01:50:c5:8e:50:ce:05:af:53:e6:69:1a:78: 3b:24:7d:b4:02:1b:94:4c:eb:da:9f:9e:cf:c5:8d: 79:1b:6d:b1:69:39:83:37:e3:e9:c2:0e:ed:09:17: cc:d0:1d:99:66:bb:bc:64:8e:fe:46:a7:a1:63:3e: fc:93:e9:78:99:24:4a:d6:cb:9f:01:5e:cc:e9:ec: 8e:32:43:cb:a5:bd:57:c0:61:ff:15:e9:03:7d:49: 6d:99:02:46:50:bf:22:45:31:d4:fc:b8:82:3a:9e: 29:fd:6e:a6:1f:a8:6c:ff:2a:6c:e2:38:2b:30:fb: 62:ae:0c:03:36:da:d9:cb:3b:3a:86:12:20:a7:89: 81:25:b6:14:c9:23:95:98:43:3a:96:49:21:8f:2b: 08:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FA:66:A8:99:40:49:95:F1:EB:12:E1:08:60:14:D0:A0:1F:29:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d9b1eef-3238-3c93-9444-e91f4b5e174a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:4b:66:9b:f2:03:6c:f4:49:85:6b:3c:d1:9a:c8:a1:b5:b5: 53:fb:86:43:0a:78:56:30:59:52:89:58:20:fc:61:4f:14:db: 60:85:6e:72:c5:44:91:61:48:0f:d4:39:42:a8:91:28:a7:d4: 3c:c7:7e:d9:38:10:9a:59:13:29:28:ae:12:22:d8:1e:b7:8b: 60:3c:87:80:87:1b:16:d6:2a:0f:05:d7:b1:1b:8e:bf:c9:80: 24:4d:76:42:15:c4:4e:91:b4:db:4f:eb:e9:e0:90:6d:15:a9: 0c:de:fb:b2:9e:22:97:58:08:23:31:fd:66:48:72:ec:db:5c: ef:2c:e3:ad:d5:a3:bc:b8:0b:cf:4e:3b:2f:bb:51:83:f6:cd: 7e:b8:51:4a:e0:04:bd:92:79:23:c6:3c:cf:6f:33:97:3b:83: f5:ab:76:a3:dd:e2:fc:1c:50:72:4f:60:bc:c7:5a:55:12:34: 5f:af:55:3b:f0:ae:c2:3d:a2:0e:0f:18:12:81:56:98:c6:81: 77:76:b8:dd:a1:25:89:3c:d6:d8:d3:07:21:08:c4:c4:62:33: e3:eb:0c:62:cc:62:a7:e5:18:cf:c9:53:48:1d:a0:4a:f6:54: 0b:fc:7b:8d:81:ed:16:0f:34:0a:76:c5:f7:16:8e:f6:18:4c: 70:f4:42:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUs3EB9ij4WLdKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk NTIxZDAzOTQtY2ExMy00YjY1LWI0NDAtNWQ4MGQxNmFmMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3cnHi5ZBdMQadEPfyhlRVPFMwh5WaZke99o 0h9HGv9HkF0D1B0yCWz0/rIVnEzLk0syjDLuLBLyMJJlfGJB03x+3IKbV0RVcjPX nGTCWJ2lyKelUjfd0QIkdcM+PK243Sgg0s820H12xAFQxY5QzgWvU+ZpGng7JH20 AhuUTOvan57PxY15G22xaTmDN+Ppwg7tCRfM0B2ZZru8ZI7+RqehYz78k+l4mSRK 1sufAV7M6eyOMkPLpb1XwGH/FekDfUltmQJGUL8iRTHU/LiCOp4p/W6mH6hs/yps 4jgrMPtirgwDNtrZyzs6hhIgp4mBJbYUySOVmEM6lkkhjysI4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGz6ZqiZQEmV8esS4QhgFNCgHymwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQ5YjFlZWYtMzIzOC0z YzkzLTk0NDQtZTkxZjRiNWUxNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArblmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5LZpvyA2z0SYVrPNGayKG1tVP7hkMKeFYwWVKJWCD8YU8U22CFbnLF RJFhSA/UOUKokSin1DzHftk4EJpZEykorhIi2B63i2A8h4CHGxbWKg8F17Ebjr/J gCRNdkIVxE6RtNtP6+ngkG0VqQze+7KeIpdYCCMx/WZIcuzbXO8s463Vo7y4C89O Oy+7UYP2zX64UUrgBL2SeSPGPM9vM5c7g/WrdqPd4vwcUHJPYLzHWlUSNF+vVTvw rsI9og4PGBKBVpjGgXd2uN2hJYk81tjTByEIxMRiM+PrDGLMYqflGM/JU0gdoEr2 VAv8e42B7RYPNAp2xfcWjvYYTHD0Qgk= -----END CERTIFICATE-----Generated at Wed Oct 14 07:52:37 2026 by rpki-client