$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa File: ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa (raw, json) Hash identifier: 6y+BOzuVTs+4DqFsxtPsMkx9TdkfpXLLJAJ3zzZflRk= Subject key identifier: 74:2E:6F:31:7D:C4:51:68:7A:84:6B:2B:62:65:AF:77:E4:FC:1A:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F778324F631785E4C4E2D0A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 173.191.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:24:f6:31:78:5e:4c:4e:2d:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=8b68a4f8-55fb-4090-bf8b-183b0a4eb6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cc:51:8a:c4:b9:fc:5e:63:2f:67:0c:96:4e: 9c:ad:b9:6f:0b:44:8c:f7:68:3f:49:35:0a:44:40: 8d:00:6f:27:fe:fe:b1:6b:ac:0a:f6:82:56:17:34: 50:a8:3c:39:ef:57:cf:37:43:c1:df:f9:49:31:12: 35:b7:6e:e7:1b:ba:fc:ab:10:2d:5c:34:51:2d:d8: c3:77:bc:c3:bb:a4:07:57:41:3a:d5:2a:ad:65:75: cb:16:b8:b5:63:76:1b:5a:31:13:f6:16:64:0f:0b: 9e:f3:9e:0d:24:c7:68:43:a6:1d:89:f0:46:31:85: 62:79:40:82:69:65:f1:95:c4:81:44:b9:dd:81:0b: 65:4e:bd:dd:e7:51:0f:71:58:04:0c:00:82:0a:f2: 94:0b:86:a6:e9:28:8d:84:8a:aa:e7:20:48:de:b3: fe:51:0c:61:2d:3c:5b:d5:f4:a7:aa:92:4a:e3:fd: ce:4a:a2:2e:bb:bc:7f:af:d4:b2:2f:9a:5a:d7:a2: 03:cf:86:d2:34:76:a1:0c:99:3e:e1:7c:84:5c:10: be:11:0a:04:a2:72:f2:4b:87:bb:bf:31:b0:1e:96: 39:64:96:28:f5:65:85:c3:18:52:bd:31:29:86:8c: 0d:66:28:e0:c4:3d:70:af:fa:5c:03:65:97:9a:e3: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2E:6F:31:7D:C4:51:68:7A:84:6B:2B:62:65:AF:77:E4:FC:1A:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:95:ef:45:60:4f:b8:d3:78:95:6a:1c:cd:92:97:41:ae:57: da:48:a4:5b:e9:0e:3a:01:57:13:3e:b1:64:83:bd:21:60:8b: d2:18:e7:28:40:2a:83:87:4b:bd:13:7b:74:69:f8:47:f9:61: a9:45:34:bd:61:bf:46:32:fd:af:39:02:6e:ea:79:d9:68:45: 69:9b:49:45:59:0f:2d:b2:41:f5:9e:e4:85:59:91:a8:c1:f9: 0d:a7:7b:1f:ae:9c:dc:f2:37:ad:fb:b9:a1:28:12:29:45:e3: 51:49:f5:12:8c:aa:28:7a:8f:bf:fe:83:97:d4:60:05:41:85: 12:ec:17:d7:8b:b8:cc:20:be:ca:bd:70:25:87:37:4f:9c:28: de:f7:c3:64:09:20:64:6f:33:5b:f5:88:3f:e0:bb:8b:33:20: 3f:94:e3:e6:4e:c1:96:a2:a0:30:6c:65:41:33:ca:a6:a4:d6: 0d:80:fb:37:16:d9:d3:ad:39:fb:66:76:a4:62:3c:d1:36:46: b8:34:1a:7e:77:05:ec:42:cb:b9:21:e0:a2:c9:a0:c3:40:40: 6e:a3:40:13:f7:5f:a3:42:fe:64:c2:d2:1c:64:f2:86:c6:92: d5:92:4c:09:c2:89:fd:8b:46:17:ad:d0:09:94:16:fe:ae:d0: 2d:fd:8a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gyT2MXheTE4tCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGI2OGE0ZjgtNTVmYi00MDkwLWJmOGItMTgzYjBhNGViNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8xRisS5/F5jL2cMlk6crblvC0SM92g/STUK RECNAG8n/v6xa6wK9oJWFzRQqDw571fPN0PB3/lJMRI1t27nG7r8qxAtXDRRLdjD d7zDu6QHV0E61SqtZXXLFri1Y3YbWjET9hZkDwue854NJMdoQ6YdifBGMYVieUCC aWXxlcSBRLndgQtlTr3d51EPcVgEDACCCvKUC4am6SiNhIqq5yBI3rP+UQxhLTxb 1fSnqpJK4/3OSqIuu7x/r9SyL5pa16IDz4bSNHahDJk+4XyEXBC+EQoEonLyS4e7 vzGwHpY5ZJYo9WWFwxhSvTEphowNZijgxD1wr/pcA2WXmuP2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQubzF9xFFoeoRrK2Jlr3fk/BoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWMxODE2ZWYtZjY5My0z YTJjLWJjZTQtNzkxY2E0MmQ1ZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiV70VgT7jTeJVqHM2Sl0GuV9pIpFvpDjoBVxM+sWSDvSFgi9IY5yhA KoOHS70Te3Rp+Ef5YalFNL1hv0Yy/a85Am7qedloRWmbSUVZDy2yQfWe5IVZkajB +Q2nex+unNzyN637uaEoEilF41FJ9RKMqih6j7/+g5fUYAVBhRLsF9eLuMwgvsq9 cCWHN0+cKN73w2QJIGRvM1v1iD/gu4szID+U4+ZOwZaioDBsZUEzyqak1g2A+zcW 2dOtOftmdqRiPNE2Rrg0Gn53BexCy7kh4KLJoMNAQG6jQBP3X6NC/mTC0hxk8obG ktWSTAnCif2LRhet0AmUFv6u0C39ilA= -----END CERTIFICATE-----Generated at Tue Oct 13 04:17:46 2026 by rpki-client