$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a065ddd0-cdc2-360e-a988-03ed946a51b3.roa File: a065ddd0-cdc2-360e-a988-03ed946a51b3.roa (raw, json) Hash identifier: P2/WpxGMUp1jwbNIeZfCSHMNwcMuxLOhuKYQFSAo3Jc= Subject key identifier: D6:E8:E9:01:40:44:3B:62:61:21:BC:80:C2:F4:73:9D:3F:48:0A:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B46B9C6BA9C129E64180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a065ddd0-cdc2-360e-a988-03ed946a51b3.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.190.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b4:6b:9c:6b:a9:c1:29:e6:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=1adfa9b6-f2f3-44d2-91a3-44119e879e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:d3:df:75:ac:12:4e:47:3b:43:47:cb:9f: 14:7e:3e:f0:df:40:64:96:a2:b3:bd:09:33:4c:9a: 89:92:b6:ad:cd:3a:23:a0:14:0c:3a:6b:fe:e6:db: 15:5b:ea:91:a3:f3:9a:b5:9c:37:7b:90:9c:da:65: 5d:27:ea:74:26:f1:32:3b:5b:18:19:78:bf:19:a0: f7:b5:38:60:0d:58:fc:a2:40:16:94:b6:50:ef:65: 82:3b:d1:86:18:9d:82:5c:b3:87:90:a1:74:ad:61: 13:55:7f:ad:a8:0f:3c:84:73:09:62:7c:1b:1e:12: 3f:fc:d8:2f:35:20:cc:f4:ca:b5:34:72:73:f7:7d: b5:f5:cf:f7:21:60:b8:4f:06:a5:57:18:3d:ac:d1: 3a:b2:c6:a7:bb:cf:9b:96:66:4f:20:1f:4c:41:a6: bf:7e:4d:d1:ca:31:5d:5c:00:65:da:ef:39:90:f7: 70:4a:fc:14:1b:45:3b:5d:a9:60:6e:52:90:3d:82: f0:0f:9f:25:bf:3a:aa:07:bd:b5:98:a9:c4:dc:55: 61:ba:b8:7a:43:1b:e7:47:4e:d3:87:6e:7c:e8:7b: 16:11:f0:5f:48:c9:a4:af:f7:25:5b:f0:f7:e4:fa: 00:f3:9d:5a:83:ba:27:39:3f:a9:44:f1:93:36:91: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E8:E9:01:40:44:3B:62:61:21:BC:80:C2:F4:73:9D:3F:48:0A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a065ddd0-cdc2-360e-a988-03ed946a51b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1c:50:fd:a7:d9:fa:ce:12:95:db:f0:df:1e:ee:15:bc:4e: 79:f8:5d:ef:e7:9d:39:bc:0b:38:a7:15:46:a0:36:5f:f1:7c: 97:69:99:f4:7f:d7:5d:8f:25:c4:33:e5:82:6c:6d:a4:4e:1c: fc:1f:f6:48:23:f2:b2:6a:fe:10:a2:f3:92:5d:c2:61:6d:89: a1:a5:97:f1:1c:c5:82:70:c0:78:33:ee:06:32:00:9d:8f:81: 5c:b6:6c:50:a8:80:99:26:2c:2d:c8:96:f9:10:9a:28:d7:ef: b8:95:3f:ee:c9:c6:5a:50:07:b6:33:8a:5c:c5:fd:f4:9b:c6: 6b:26:f5:f2:53:6f:c3:88:ba:ab:3a:db:c3:f6:fb:a5:68:4e: 86:6f:df:45:ba:9e:80:31:3a:d5:93:4d:2e:b4:83:52:fb:b3: 77:35:a0:8b:95:79:d1:5d:b0:75:1c:4b:44:54:31:23:4d:3c: cc:5b:97:53:5d:e4:c5:e0:81:50:bd:40:de:58:15:55:4a:e1: b4:a7:a9:6a:bc:f2:85:99:f0:ea:d9:3c:23:57:3b:d7:d2:11: b1:a0:e7:c7:ee:ca:72:f3:8b:48:eb:85:36:bc:06:1c:3d:3b: 90:60:2d:92:0d:f9:b2:9d:44:27:2f:9f:b0:f2:94:e3:fd:e5: 76:ad:00:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rRrnGupwSnmQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MWFkZmE5YjYtZjJmMy00NGQyLTkxYTMtNDQxMTllODc5ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFjT33WsEk5HO0NHy58Ufj7w30BklqKzvQkz TJqJkratzTojoBQMOmv+5tsVW+qRo/OatZw3e5Cc2mVdJ+p0JvEyO1sYGXi/GaD3 tThgDVj8okAWlLZQ72WCO9GGGJ2CXLOHkKF0rWETVX+tqA88hHMJYnwbHhI//Ngv NSDM9Mq1NHJz93219c/3IWC4TwalVxg9rNE6ssanu8+blmZPIB9MQaa/fk3RyjFd XABl2u85kPdwSvwUG0U7XalgblKQPYLwD58lvzqqB721mKnE3FVhurh6QxvnR07T h2586HsWEfBfSMmkr/clW/D35PoA851ag7onOT+pRPGTNpGX9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbo6QFARDtiYSG8gML0c50/SApiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA2NWRkZDAtY2RjMi0z NjBlLWE5ODgtMDNlZDk0NmE1MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFccUP2n2frOEpXb8N8e7hW8Tnn4Xe/nnTm8CzinFUagNl/xfJdpmfR/ 112PJcQz5YJsbaROHPwf9kgj8rJq/hCi85JdwmFtiaGll/EcxYJwwHgz7gYyAJ2P gVy2bFCogJkmLC3IlvkQmijX77iVP+7JxlpQB7YzilzF/fSbxmsm9fJTb8OIuqs6 28P2+6VoToZv30W6noAxOtWTTS60g1L7s3c1oIuVedFdsHUcS0RUMSNNPMxbl1Nd 5MXggVC9QN5YFVVK4bSnqWq88oWZ8OrZPCNXO9fSEbGg58fuynLzi0jrhTa8Bhw9 O5BgLZIN+bKdRCcvn7DylOP95XatAPY= -----END CERTIFICATE-----Generated at Thu Oct 15 05:58:16 2026 by rpki-client