$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc591ba8-70c5-3874-aed2-1a2e13b76126.roa File: cc591ba8-70c5-3874-aed2-1a2e13b76126.roa (raw, json) Hash identifier: Tc9Kc8XIzFYSCryRd6JnaxpxXvIisiQhNTixnRt2eng= Subject key identifier: C4:D4:6B:F1:5F:D6:CB:8C:95:10:B1:07:6F:F0:E8:4B:1B:12:D0:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6F22C6516341725713B9F000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc591ba8-70c5-3874-aed2-1a2e13b76126.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 173.190.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:c6:51:63:41:72:57:13:b9:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=cd3526a3-c79b-4f30-ac4b-cbe5ee15f046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:dc:31:e7:58:d7:f7:53:2c:ea:be:6d:c2: ff:25:c2:72:a7:56:3e:af:0f:8e:b9:42:3b:50:d8: 4a:8e:90:71:40:9d:16:a1:51:fb:c0:f7:af:79:0b: aa:10:8d:46:2d:55:c7:86:2a:74:1b:18:27:d9:8c: 10:c0:58:8f:32:11:b0:6d:97:48:cb:f4:8d:5c:5e: 13:9d:fc:b8:43:9c:6d:b8:e9:da:52:0e:4d:b7:32: 2b:10:b5:5c:47:4c:0b:71:1f:78:07:93:22:11:e5: b1:bf:6d:a8:0d:be:73:54:09:3f:20:d9:d6:3d:bd: 36:81:b2:26:18:da:90:03:c9:e4:8c:60:4d:89:be: d6:92:4f:b1:f5:fe:3a:c3:b9:66:84:57:db:0e:b0: 45:0e:34:ae:4e:9e:50:cd:d9:ca:e8:4b:18:f9:9c: c2:bc:e0:d8:8a:08:e8:c1:c3:94:97:d6:ff:09:3f: 5a:16:7a:16:f7:54:e0:59:ec:01:92:bf:bd:58:e5: c4:cf:5f:83:a0:73:0f:bf:d3:ea:ff:40:25:15:1e: ea:a5:3d:c3:45:ff:80:8f:f0:41:38:69:57:b3:12: 1d:e7:29:c5:e2:a5:dc:d0:5a:3f:35:9c:be:1a:e4: 21:41:1d:1a:67:ec:d7:1d:f1:88:b8:d0:6f:d2:4c: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D4:6B:F1:5F:D6:CB:8C:95:10:B1:07:6F:F0:E8:4B:1B:12:D0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc591ba8-70c5-3874-aed2-1a2e13b76126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ec:36:0e:a9:d9:ed:24:87:4e:0a:a6:36:77:e0:3c:5d:49: 81:d4:65:4a:95:3c:b8:7b:03:d0:a9:4e:d7:a4:58:03:37:be: 80:6b:36:4f:0d:79:86:cb:54:86:92:de:71:a6:bb:28:3f:e3: a8:ef:6b:de:19:89:7d:07:46:2d:f9:06:74:c3:e6:99:b2:10: 0a:88:d3:71:12:48:2e:37:f2:a9:fb:0f:59:67:96:2a:3c:02: 67:c2:91:f2:22:75:2f:05:c8:1f:1e:26:8c:54:54:95:2e:fc: 0c:df:1e:10:1f:88:39:a4:fc:05:f0:24:08:97:65:b1:b5:44: 1c:c2:27:58:1c:8a:28:99:90:85:77:8b:1f:87:7b:f2:23:83: d7:bf:34:1a:29:aa:a7:6b:95:b2:6b:06:63:d1:f2:90:e9:47: 67:73:a2:73:87:4c:db:3d:94:e5:da:9b:f0:20:3c:13:a0:9d: 35:5d:a3:dd:67:18:5c:c6:2c:8b:2a:e9:32:80:fe:1b:32:d1: 79:ca:aa:f0:65:8d:f2:5b:df:d4:aa:f3:12:78:da:19:62:90: cd:3f:d2:a9:1f:f3:37:f3:ad:63:4c:a1:5b:09:1e:d0:45:2d: 25:3e:5c:3f:f1:4f:ff:c4:e5:f9:52:2d:7f:f1:87:51:8b:ae: 18:c1:92:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIsZRY0FyVxO58AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2QzNTI2YTMtYzc5Yi00ZjMwLWFjNGItY2JlNWVlMTVmMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOfcMedY1/dTLOq+bcL/JcJyp1Y+rw+OuUI7 UNhKjpBxQJ0WoVH7wPeveQuqEI1GLVXHhip0Gxgn2YwQwFiPMhGwbZdIy/SNXF4T nfy4Q5xtuOnaUg5NtzIrELVcR0wLcR94B5MiEeWxv22oDb5zVAk/INnWPb02gbIm GNqQA8nkjGBNib7Wkk+x9f46w7lmhFfbDrBFDjSuTp5QzdnK6EsY+ZzCvODYigjo wcOUl9b/CT9aFnoW91TgWewBkr+9WOXEz1+DoHMPv9Pq/0AlFR7qpT3DRf+Aj/BB OGlXsxId5ynF4qXc0Fo/NZy+GuQhQR0aZ+zXHfGIuNBv0kyLiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTUa/Ff1suMlRCxB2/w6EsbEtC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2M1OTFiYTgtNzBjNS0z ODc0LWFlZDItMWEyZTEzYjc2MTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfsNg6p2e0kh04KpjZ34DxdSYHUZUqVPLh7A9CpTtekWAM3voBrNk8N eYbLVIaS3nGmuyg/46jva94ZiX0HRi35BnTD5pmyEAqI03ESSC438qn7D1lnlio8 AmfCkfIidS8FyB8eJoxUVJUu/AzfHhAfiDmk/AXwJAiXZbG1RBzCJ1gciiiZkIV3 ix+He/Ijg9e/NBopqqdrlbJrBmPR8pDpR2dzonOHTNs9lOXam/AgPBOgnTVdo91n GFzGLIsq6TKA/hsy0XnKqvBljfJb39Sq8xJ42hlikM0/0qkf8zfzrWNMoVsJHtBF LSU+XD/xT//E5flSLX/xh1GLrhjBkp4= -----END CERTIFICATE-----Generated at Tue Oct 13 16:05:04 2026 by rpki-client