$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be84b696-0732-38c2-a4b0-4121e185344c.roa File: be84b696-0732-38c2-a4b0-4121e185344c.roa (raw, json) Hash identifier: vdFkuTbEF6dw0LpVyMxnZxnZjSloR0bNU1oqQtUOUqY= Subject key identifier: EA:E9:DC:40:BD:6D:20:9E:B2:9F:6B:3B:7B:F8:A5:C1:E2:96:2A:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E736A1669F47A658956E79900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be84b696-0732-38c2-a4b0-4121e185344c.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 173.186.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:16:69:f4:7a:65:89:56:e7:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=963d9cf7-4836-4699-adfe-27fd6a9cbe52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d0:07:49:59:23:f1:ea:82:85:7e:2a:f9:19: a2:e7:2b:19:51:a1:7e:b6:51:1d:05:cd:48:b7:f3: 98:64:26:f0:0c:c5:54:61:f3:63:83:8c:5f:4c:df: a4:ad:32:88:ea:2c:f8:9d:6d:da:a9:1f:b5:da:7a: 9b:c6:a0:30:10:8b:e5:f3:1e:72:c6:88:87:59:05: bd:80:56:c6:39:28:02:ee:98:01:02:bc:69:5e:4f: ee:cb:ca:7c:95:63:2d:57:83:4e:31:0c:35:c5:1d: 18:c9:94:64:b3:7f:89:75:42:be:89:ac:c9:16:a8: 36:ff:66:8e:b1:74:58:62:2b:4f:17:f9:a9:66:fe: f4:4a:06:d8:a9:1d:30:f9:2c:4d:f9:2e:e0:df:14: 9e:5b:76:9c:6a:0c:25:80:0d:02:2c:30:7f:a7:5c: e3:32:59:d9:a1:88:03:a9:97:d3:c8:88:f1:c3:73: 9d:71:34:1e:b7:54:ec:b0:bb:9a:ef:26:00:9b:01: ed:55:25:61:4b:3e:10:d1:e1:26:a9:99:0a:df:26: 14:28:4f:98:5b:cc:32:37:09:98:22:19:e1:88:ed: f7:07:14:93:55:dd:88:ad:ac:d6:ba:09:2f:f0:e5: 18:2e:e1:74:ff:e8:a6:d7:8f:86:0e:d1:70:3c:6b: 13:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:DC:40:BD:6D:20:9E:B2:9F:6B:3B:7B:F8:A5:C1:E2:96:2A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be84b696-0732-38c2-a4b0-4121e185344c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5b:77:4a:ff:a4:d6:84:3b:07:17:de:ae:a7:74:74:4e:6f: 40:62:8e:74:50:af:93:29:0c:49:ad:ea:9c:bb:84:7c:3b:16: 05:af:d5:98:e6:ac:d3:ac:ea:b7:f1:ed:53:ca:6b:d9:d5:17: 4f:be:02:83:aa:f0:07:82:e1:33:a9:54:db:39:39:5d:fc:78: 7d:ee:d0:e4:e3:90:de:77:cc:8f:ed:33:6a:17:0e:03:95:ea: 0e:26:1a:0a:b5:cb:c9:29:ba:92:68:c6:70:1e:ef:43:e1:30: 55:ad:4d:70:2d:22:09:1d:ee:a1:1a:c6:44:cd:e5:6b:3e:a9: 98:18:70:57:19:05:dc:fe:62:ff:fb:db:41:10:8a:e4:6d:54: 2a:03:80:58:ba:20:bd:14:2d:54:53:e5:45:ce:d5:9e:53:be: 43:0f:93:df:ed:6f:ae:93:36:a0:c5:4e:b5:81:99:74:c3:f6: 7a:2f:b8:e1:44:89:61:de:38:d7:18:2e:92:fd:73:f9:4f:03: 2d:36:69:71:98:e0:8a:99:37:d0:a2:5a:ec:02:c0:8a:b3:9d: b7:db:4a:21:c1:5e:3d:3f:9c:85:57:88:77:8e:2f:c2:02:d3: 89:bc:04:4b:d0:99:4a:d3:b8:41:1a:60:9a:62:28:5b:04:d2: fd:59:3d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zahZp9HpliVbnmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk OTYzZDljZjctNDgzNi00Njk5LWFkZmUtMjdmZDZhOWNiZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tAHSVkj8eqChX4q+Rmi5ysZUaF+tlEdBc1I t/OYZCbwDMVUYfNjg4xfTN+krTKI6iz4nW3aqR+12nqbxqAwEIvl8x5yxoiHWQW9 gFbGOSgC7pgBArxpXk/uy8p8lWMtV4NOMQw1xR0YyZRks3+JdUK+iazJFqg2/2aO sXRYYitPF/mpZv70SgbYqR0w+SxN+S7g3xSeW3acagwlgA0CLDB/p1zjMlnZoYgD qZfTyIjxw3OdcTQet1TssLua7yYAmwHtVSVhSz4Q0eEmqZkK3yYUKE+YW8wyNwmY IhnhiO33BxSTVd2IrazWugkv8OUYLuF0/+im14+GDtFwPGsT1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrp3EC9bSCesp9rO3v4pcHiliryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmU4NGI2OTYtMDczMi0z OGMyLWE0YjAtNDEyMWUxODUzNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbqmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJbd0r/pNaEOwcX3q6ndHROb0BijnRQr5MpDEmt6py7hHw7FgWv1Zjm rNOs6rfx7VPKa9nVF0++AoOq8AeC4TOpVNs5OV38eH3u0OTjkN53zI/tM2oXDgOV 6g4mGgq1y8kpupJoxnAe70PhMFWtTXAtIgkd7qEaxkTN5Ws+qZgYcFcZBdz+Yv/7 20EQiuRtVCoDgFi6IL0ULVRT5UXO1Z5TvkMPk9/tb66TNqDFTrWBmXTD9novuOFE iWHeONcYLpL9c/lPAy02aXGY4IqZN9CiWuwCwIqznbfbSiHBXj0/nIVXiHeOL8IC 04m8BEvQmUrTuEEaYJpiKFsE0v1ZPZY= -----END CERTIFICATE-----Generated at Mon Jul 13 05:55:51 2026 by rpki-client