$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa File: a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa (raw, json) Hash identifier: QkO4fGN7NkeoNVu0G0ucDIvtkU5QrE6MQlHFY9T665M= Subject key identifier: FA:59:D7:CE:12:AB:3C:2F:DD:1E:4E:A2:BE:6F:C6:C3:13:76:09:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F77835898D490C55F4A53C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 173.191.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:58:98:d4:90:c5:5f:4a:53:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=76c7169c-9eb1-4734-9666-6a3114aab871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5d:e7:53:cd:fc:b3:1f:fe:6f:c5:d6:4a:00: d4:76:ed:ae:6a:2a:b8:20:39:e8:c9:55:21:64:90: e7:db:70:cd:c3:20:f9:82:23:cf:d2:99:15:7b:91: 9f:10:9e:bd:0b:2e:ce:4d:6e:66:61:1d:51:34:9c: 84:43:24:c8:5f:be:01:18:a0:44:fe:cb:c2:9b:07: 24:93:d7:dc:6c:b3:64:17:bd:6b:6f:b7:57:00:fb: cf:29:35:95:62:03:db:68:b3:c4:19:3a:2b:13:89: df:f3:62:2f:4d:93:0c:56:47:3a:89:e7:24:2f:d8: 46:85:c8:f7:be:a4:dc:b4:a8:50:b2:72:2f:0a:21: 34:c0:b0:25:0a:51:9c:22:24:a0:84:51:7f:f4:e5: d2:3b:e3:43:b1:ae:28:5d:b3:90:31:b8:ef:65:85: 38:0d:28:20:a7:cb:3c:5c:5c:cc:bf:3d:a3:51:b8: 73:90:93:7e:87:78:e7:86:3d:42:0f:75:06:e1:c6: 3a:e1:22:16:75:46:42:eb:bb:f9:fd:70:ad:d4:02: d4:da:a1:f1:db:cb:14:cc:6c:28:b3:51:e2:5c:c0: 04:20:02:84:4f:0b:6c:11:54:d8:2f:14:ec:b5:26: e8:d4:97:2a:38:59:7f:44:6c:0c:8d:36:8f:54:dd: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:59:D7:CE:12:AB:3C:2F:DD:1E:4E:A2:BE:6F:C6:C3:13:76:09:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c3:56:53:7b:e2:8f:2e:60:e8:c8:57:22:e7:11:e7:58:de: c8:14:07:1c:23:80:59:e1:72:eb:2a:80:5e:4b:43:7a:07:8f: 11:57:41:a0:4b:4c:6f:3b:d4:98:8d:0a:47:c5:4b:ff:da:89: 19:1f:a1:d3:8f:0d:a1:ef:1a:04:17:b6:b0:38:4f:8e:6a:7e: 51:2a:76:7e:81:7b:fe:2f:a5:dc:32:41:8e:72:f0:12:41:6a: 24:36:ca:4b:11:12:ff:70:a5:cc:ae:d3:f0:ac:b7:80:f3:bb: ee:65:50:51:9a:41:af:68:9a:78:f9:15:8e:9c:58:90:4a:5c: a1:fc:28:b6:0f:4f:34:26:5f:c5:07:a4:72:63:39:cc:44:d1: 1b:68:cf:4b:f3:ce:68:2a:68:50:b7:d1:67:b0:c6:7b:57:1b: b6:90:38:4a:ad:6f:41:49:d4:92:d1:fb:b2:04:56:58:3c:35: 80:29:3c:65:fe:10:58:9e:2e:3c:63:76:e1:de:8d:73:72:29: c4:41:97:d5:76:4a:4e:a7:64:0b:4b:9b:4e:36:09:f2:7d:2a: 8e:e7:70:66:0d:ee:37:af:9e:24:9e:23:28:d2:da:53:3c:4e: 5d:1c:2d:51:a9:e1:05:fe:91:69:42:10:4a:64:bb:7e:7f:88: 2a:81:44:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1iY1JDFX0pTyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NzZjNzE2OWMtOWViMS00NzM0LTk2NjYtNmEzMTE0YWFiODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl3nU838sx/+b8XWSgDUdu2uaiq4IDnoyVUh ZJDn23DNwyD5giPP0pkVe5GfEJ69Cy7OTW5mYR1RNJyEQyTIX74BGKBE/svCmwck k9fcbLNkF71rb7dXAPvPKTWVYgPbaLPEGTorE4nf82IvTZMMVkc6ieckL9hGhcj3 vqTctKhQsnIvCiE0wLAlClGcIiSghFF/9OXSO+NDsa4oXbOQMbjvZYU4DSggp8s8 XFzMvz2jUbhzkJN+h3jnhj1CD3UG4cY64SIWdUZC67v5/XCt1ALU2qHx28sUzGwo s1HiXMAEIAKETwtsEVTYLxTstSbo1JcqOFl/RGwMjTaPVN28iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpZ184Sqzwv3R5Oor5vxsMTdgmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU5OGIyYjAtMTZlNS0z MGEzLWE4ZDAtZGY0ZGE1ZmIyMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETDVlN74o8uYOjIVyLnEedY3sgUBxwjgFnhcusqgF5LQ3oHjxFXQaBL TG871JiNCkfFS//aiRkfodOPDaHvGgQXtrA4T45qflEqdn6Be/4vpdwyQY5y8BJB aiQ2yksREv9wpcyu0/Cst4Dzu+5lUFGaQa9omnj5FY6cWJBKXKH8KLYPTzQmX8UH pHJjOcxE0Rtoz0vzzmgqaFC30WewxntXG7aQOEqtb0FJ1JLR+7IEVlg8NYApPGX+ EFieLjxjduHejXNyKcRBl9V2Sk6nZAtLm042CfJ9Ko7ncGYN7jevniSeIyjS2lM8 Tl0cLVGp4QX+kWlCEEpku35/iCqBRF8= -----END CERTIFICATE-----Generated at Tue Oct 13 08:14:25 2026 by rpki-client