$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5962485-84aa-3f48-9077-168092cd0cd9.roa File: a5962485-84aa-3f48-9077-168092cd0cd9.roa (raw, json) Hash identifier: hSMA9RUht43+FufA6iIbky9Pl18Lvz5msR+vGMYuJn4= Subject key identifier: 83:2C:68:3B:6A:95:6C:E2:AB:26:93:1D:93:F5:EF:12:55:D6:99:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D92F53C04DC687378E940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5962485-84aa-3f48-9077-168092cd0cd9.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.187.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:92:f5:3c:04:dc:68:73:78:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=f21d028a-528e-49e5-b3b4-081ad8cbbd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:bf:38:3d:90:67:2a:29:7b:5e:fa:f4:d7: 20:15:80:f0:16:14:46:eb:b6:6f:6d:26:5d:25:7b: 96:09:b1:65:87:18:3b:49:aa:1e:7f:88:6e:86:48: 46:06:e8:2f:5c:20:1b:d9:6b:61:eb:46:78:37:6e: fc:05:67:bb:88:2d:f7:ee:86:15:6d:77:b6:4c:43: 9f:e5:87:2c:f6:d2:94:cf:02:33:21:aa:e4:d5:7e: 5c:bc:d9:ec:20:78:54:dd:c0:e5:f1:e2:49:ab:1a: d1:a9:76:26:3d:cc:e5:b6:24:59:83:4e:ba:43:11: 0b:49:75:ef:ba:34:85:d0:71:cd:d8:40:ae:1f:7b: 47:fe:50:fa:e2:e7:05:da:5b:e0:78:00:1c:4d:02: ad:e7:a6:41:db:85:26:3a:30:e8:cb:e3:22:d5:c7: f5:52:7b:d7:5f:88:29:d1:e2:ea:51:d1:0c:2d:21: d5:4c:22:16:89:c3:09:e0:b5:3d:0f:0d:1a:32:35: 61:45:b1:3a:99:13:14:10:d7:53:bb:e7:c9:2d:a5: 30:eb:52:4c:95:b3:8e:44:9f:6b:15:ac:d1:da:81: 2b:54:19:01:a5:04:b6:85:d8:66:83:eb:c0:74:de: 1f:87:67:1f:d6:e8:53:c1:35:45:90:65:f3:52:73: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2C:68:3B:6A:95:6C:E2:AB:26:93:1D:93:F5:EF:12:55:D6:99:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5962485-84aa-3f48-9077-168092cd0cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:93:0f:73:2e:0b:0b:81:e6:0f:73:c7:6e:30:1d:91:1b:b1: 7d:e7:e2:97:f1:ca:b4:64:95:eb:2f:2e:56:dc:85:0c:84:cf: cd:91:b7:cd:82:bc:71:84:8d:73:8b:09:9f:33:7f:61:ab:af: b8:58:0d:99:64:37:ac:d4:33:63:60:04:99:7c:8a:a1:bd:29: 87:13:fd:99:7d:0d:ba:78:fc:39:d9:be:71:b3:6e:86:43:0e: c8:db:e3:c7:29:a0:0a:57:62:15:23:cb:8d:60:06:78:d5:56: 73:fa:3a:d2:b3:ea:5d:7b:47:99:5e:47:c2:75:5e:e5:b5:98: 52:f7:81:08:a1:44:6d:78:10:a5:9a:56:04:4a:35:e6:fb:c1: e7:44:9f:33:74:d6:05:88:cb:cf:a5:7d:d8:24:72:e1:05:41: c3:01:ca:41:66:f6:10:89:d5:44:9c:ad:1e:7b:8b:20:b5:9f: 43:f7:06:4c:6f:f1:42:3c:2f:3f:e4:65:96:fc:60:3c:6f:1c: 4d:d7:b3:06:ff:5e:a3:af:9e:d2:9e:66:2c:fe:23:bf:d2:0e: 68:cc:08:4d:d8:e7:1d:b2:ca:31:d5:3d:bd:d5:0e:26:03:bc: 33:23:67:ce:c7:59:2e:08:5b:89:25:fa:28:d7:8b:56:9e:f5: 14:43:92:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZL1PATcaHN46UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZjIxZDAyOGEtNTI4ZS00OWU1LWIzYjQtMDgxYWQ4Y2JiZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+W/OD2QZyope1769NcgFYDwFhRG67ZvbSZd JXuWCbFlhxg7Saoef4huhkhGBugvXCAb2Wth60Z4N278BWe7iC337oYVbXe2TEOf 5Ycs9tKUzwIzIark1X5cvNnsIHhU3cDl8eJJqxrRqXYmPczltiRZg066QxELSXXv ujSF0HHN2ECuH3tH/lD64ucF2lvgeAAcTQKt56ZB24UmOjDoy+Mi1cf1UnvXX4gp 0eLqUdEMLSHVTCIWicMJ4LU9Dw0aMjVhRbE6mRMUENdTu+fJLaUw61JMlbOORJ9r FazR2oErVBkBpQS2hdhmg+vAdN4fh2cf1uhTwTVFkGXzUnMm9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMsaDtqlWziqyaTHZP17xJV1plDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU5NjI0ODUtODRhYS0z ZjQ4LTkwNzctMTY4MDkyY2QwY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOTD3MuCwuB5g9zx24wHZEbsX3n4pfxyrRklesvLlbchQyEz82Rt82C vHGEjXOLCZ8zf2Grr7hYDZlkN6zUM2NgBJl8iqG9KYcT/Zl9Dbp4/DnZvnGzboZD Dsjb48cpoApXYhUjy41gBnjVVnP6OtKz6l17R5leR8J1XuW1mFL3gQihRG14EKWa VgRKNeb7wedEnzN01gWIy8+lfdgkcuEFQcMBykFm9hCJ1UScrR57iyC1n0P3Bkxv 8UI8Lz/kZZb8YDxvHE3Xswb/XqOvntKeZiz+I7/SDmjMCE3Y5x2yyjHVPb3VDiYD vDMjZ87HWS4IW4kl+ijXi1ae9RRDkqM= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:39 2026 by rpki-client