$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e4cda90-3391-3d63-ae47-28d039bbd167.roa File: 8e4cda90-3391-3d63-ae47-28d039bbd167.roa (raw, json) Hash identifier: t1NuGcsponbxOSIRuUDK8Mqr2tf/FwXvHIAT37aKoQw= Subject key identifier: 4E:0C:2A:00:B4:20:42:E5:CE:4F:B5:8B:B5:01:48:D8:C7:62:6C:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6F22CD2F76AEBEDC51941200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e4cda90-3391-3d63-ae47-28d039bbd167.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 173.190.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:cd:2f:76:ae:be:dc:51:94:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=1a3ecdf8-5140-459b-b04b-0f463675ef92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:d3:45:58:71:83:0e:2c:86:43:b3:9c:6c: 70:bf:b9:14:f3:96:c8:c9:ef:43:68:24:63:f6:f3: 5b:6a:98:86:8d:cb:67:a4:17:77:7d:b5:70:3e:53: fc:d1:e2:5a:0d:0b:19:61:a9:40:0b:90:7d:a9:2b: a6:55:65:41:97:51:9b:ef:a5:ef:7b:59:e8:65:a8: c4:50:d5:a7:e4:bc:8b:d9:b2:6d:41:9e:59:0b:a7: d7:f5:0d:d5:3e:83:b9:4e:86:34:e2:32:62:21:cd: 32:d2:bc:4a:d6:fc:cc:e4:5b:48:f3:db:d7:53:31: cd:15:21:e5:03:8a:c1:12:a9:64:12:95:68:85:b4: 2e:23:6e:74:a0:2b:90:7b:90:e4:2c:7b:44:07:fe: 0a:a2:45:f0:a4:6f:ef:6b:da:5c:ff:f8:d1:00:56: 01:4f:61:b1:76:6d:1f:bb:aa:f1:3c:d7:92:46:dc: bf:20:e3:e9:22:51:db:cd:c2:04:1d:61:7c:32:74: 2a:3c:cc:09:a4:98:50:5a:e0:df:66:4e:86:5d:1a: 70:b1:b7:a0:5a:d7:e9:17:cc:bb:b5:80:10:26:50: 85:22:6d:c0:01:bd:62:db:5f:a1:d4:27:3f:22:09: 6c:bb:6d:d4:25:a1:12:71:89:cc:91:f8:88:b9:23: 0c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0C:2A:00:B4:20:42:E5:CE:4F:B5:8B:B5:01:48:D8:C7:62:6C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e4cda90-3391-3d63-ae47-28d039bbd167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8f:21:33:a7:f6:ac:d9:b1:40:1d:09:93:9b:8e:6f:41:6f: 28:74:26:14:5c:09:67:be:82:ca:94:a4:a9:ad:09:35:56:76: 64:95:78:44:5b:d7:f4:e8:f2:ef:6d:da:bb:c8:3b:18:33:c2: f1:d7:9d:e2:61:f9:42:43:be:cb:73:c3:63:be:38:59:be:12: 10:03:5a:ca:9c:49:69:33:23:40:b5:4e:9c:98:49:38:51:15: 5a:eb:b1:29:f4:f8:5e:11:6e:26:38:0e:26:dc:66:7b:33:bd: 06:54:dd:cb:5f:9a:d9:68:a5:b4:c1:20:ce:f8:19:fd:3a:0d: 8f:14:73:71:fb:fc:c5:dc:32:4a:ec:d1:22:b3:b2:bc:56:28: 6f:3a:54:71:74:c6:74:3d:60:33:79:cd:69:25:a9:f0:b2:83: 86:ac:0a:ac:01:d9:77:ba:bc:ea:48:3a:de:ee:63:e9:6f:5d: 85:de:e9:a2:69:25:84:5e:3b:13:ab:55:08:67:e2:b3:ab:94: d5:18:f0:1b:a0:35:94:bf:d8:d7:3a:7b:e9:eb:e2:8b:b8:08: d0:0c:51:ee:3f:79:99:b5:42:01:a5:ac:bf:6e:87:bb:7b:cb: 9f:54:b2:89:d6:20:8a:3a:e4:6b:93:76:0d:3e:62:42:c3:34: 47:3f:2a:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIs0vdq6+3FGUEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MWEzZWNkZjgtNTE0MC00NTliLWIwNGItMGY0NjM2NzVlZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbTTRVhxgw4shkOznGxwv7kU85bIye9DaCRj 9vNbapiGjctnpBd3fbVwPlP80eJaDQsZYalAC5B9qSumVWVBl1Gb76Xve1noZajE UNWn5LyL2bJtQZ5ZC6fX9Q3VPoO5ToY04jJiIc0y0rxK1vzM5FtI89vXUzHNFSHl A4rBEqlkEpVohbQuI250oCuQe5DkLHtEB/4KokXwpG/va9pc//jRAFYBT2Gxdm0f u6rxPNeSRty/IOPpIlHbzcIEHWF8MnQqPMwJpJhQWuDfZk6GXRpwsbegWtfpF8y7 tYAQJlCFIm3AAb1i21+h1Cc/Iglsu23UJaEScYnMkfiIuSMMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4MKgC0IELlzk+1i7UBSNjHYmxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGU0Y2RhOTAtMzM5MS0z ZDYzLWFlNDctMjhkMDM5YmJkMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb6XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6PITOn9qzZsUAdCZObjm9Bbyh0JhRcCWe+gsqUpKmtCTVWdmSVeERb 1/To8u9t2rvIOxgzwvHXneJh+UJDvstzw2O+OFm+EhADWsqcSWkzI0C1TpyYSThR FVrrsSn0+F4RbiY4DibcZnszvQZU3ctfmtlopbTBIM74Gf06DY8Uc3H7/MXcMkrs 0SKzsrxWKG86VHF0xnQ9YDN5zWklqfCyg4asCqwB2Xe6vOpIOt7uY+lvXYXe6aJp JYReOxOrVQhn4rOrlNUY8BugNZS/2Nc6e+nr4ou4CNAMUe4/eZm1QgGlrL9uh7t7 y59UsonWIIo65GuTdg0+YkLDNEc/Kgw= -----END CERTIFICATE-----Generated at Wed Oct 14 07:53:17 2026 by rpki-client