$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cda663b3-8e52-372d-af57-6e3f7757d199.roa File: cda663b3-8e52-372d-af57-6e3f7757d199.roa (raw, json) Hash identifier: py0+Y6N6eAT67OGveMJMgHp5aYQgHL8jD/qZvZF1Iaw= Subject key identifier: EF:DD:CA:75:E1:E2:D8:4E:75:BD:21:8D:33:C3:7F:37:16:14:14:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5A3316F3B053910CCE950A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cda663b3-8e52-372d-af57-6e3f7757d199.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.189.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:16:f3:b0:53:91:0c:ce:95:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9676da8b-87e2-4f83-8a6f-d5617a1d379a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cf:12:81:67:bc:e4:4e:68:a2:eb:af:15:6b: e1:29:39:c2:ad:dd:90:82:d6:f8:8f:c6:a2:cd:12: 86:d4:b5:a1:5a:fa:41:ed:31:1b:a9:74:83:a9:4f: 3e:d7:3a:58:b7:89:aa:ae:5e:25:8d:19:85:05:72: ac:91:37:05:c3:03:c5:9a:b9:8a:73:c3:d9:7f:76: 3d:7f:cd:70:c7:5d:24:c7:ba:4b:be:98:c0:6b:c4: 63:9a:ba:42:6f:90:21:e1:20:e6:8e:ca:a0:9b:c7: fb:38:f7:93:63:d5:28:22:a4:04:82:18:2e:6d:0a: 85:d2:b6:af:e1:90:30:c2:c2:e1:81:7c:93:03:bd: f3:e9:93:43:49:ad:89:c9:4d:a1:4a:1d:c8:5e:a7: c6:a3:26:63:98:1a:27:5b:99:b8:68:f2:d3:c7:06: 29:32:ea:99:db:f4:02:a0:7a:f3:68:c0:f0:d7:d9: ac:f3:9d:c7:85:38:c5:64:58:b5:5a:02:b5:89:86: d0:10:80:4e:f1:81:fa:6a:85:2e:c7:dc:12:89:cb: a3:79:e5:93:22:46:04:1f:48:08:d2:ba:ff:70:ff: 0d:37:63:40:8e:95:21:5f:75:57:81:01:75:e8:ba: cb:23:d8:31:92:a9:53:a6:d8:c9:3a:85:71:76:2f: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DD:CA:75:E1:E2:D8:4E:75:BD:21:8D:33:C3:7F:37:16:14:14:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cda663b3-8e52-372d-af57-6e3f7757d199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:84:89:9f:e0:31:62:25:eb:16:97:3f:06:1e:0d:74:fa:79: 3c:37:a4:89:da:7e:c8:0a:44:96:fa:a3:b6:4e:85:73:0c:b3: e5:17:3d:50:57:82:bf:05:10:4a:a1:11:20:0f:28:11:d7:06: c5:6c:a1:59:8d:94:af:d8:fc:da:53:2a:aa:f3:ba:fa:6e:be: e0:de:34:0a:3b:e9:d3:da:2d:ae:95:1b:bc:8c:78:97:d3:c7: 6b:10:2b:cc:0f:23:ed:fd:62:d2:b1:70:ec:dd:0d:73:df:19: a5:6b:c5:90:31:c7:f6:75:30:73:68:88:4e:e4:bd:55:a8:20: a4:2d:33:e6:3d:72:56:68:0a:c4:3d:13:95:7a:8b:1d:95:09: 49:12:85:92:20:c3:36:de:89:3e:ed:fa:48:89:8b:15:ad:4b: f5:13:6e:18:1c:48:fc:43:8d:fd:ca:d7:38:1a:26:1d:3e:5b: 2c:01:ab:a6:d1:88:a9:34:ab:26:90:76:27:6d:08:96:eb:9e: 86:f9:ed:3a:89:bd:15:ce:46:f7:b6:3a:f3:f9:2e:d2:ab:d8: 2e:a3:c1:b7:ab:97:f1:57:0f:c5:ff:9d:93:d3:11:73:4d:61: 6b:67:c1:17:97:1b:fb:44:17:3e:4d:9e:e5:4e:f1:bf:30:53: 70:60:66:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxbzsFORDM6VCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTY3NmRhOGItODdlMi00ZjgzLThhNmYtZDU2MTdhMWQzNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM8SgWe85E5oouuvFWvhKTnCrd2Qgtb4j8ai zRKG1LWhWvpB7TEbqXSDqU8+1zpYt4mqrl4ljRmFBXKskTcFwwPFmrmKc8PZf3Y9 f81wx10kx7pLvpjAa8RjmrpCb5Ah4SDmjsqgm8f7OPeTY9UoIqQEghgubQqF0rav 4ZAwwsLhgXyTA73z6ZNDSa2JyU2hSh3IXqfGoyZjmBonW5m4aPLTxwYpMuqZ2/QC oHrzaMDw19ms853HhTjFZFi1WgK1iYbQEIBO8YH6aoUux9wSicujeeWTIkYEH0gI 0rr/cP8NN2NAjpUhX3VXgQF16LrLI9gxkqlTptjJOoVxdi9byQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/dynXh4thOdb0hjTPDfzcWFBReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2RhNjYzYjMtOGU1Mi0z NzJkLWFmNTctNmUzZjc3NTdkMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb3KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmEiZ/gMWIl6xaXPwYeDXT6eTw3pInafsgKRJb6o7ZOhXMMs+UXPVBX gr8FEEqhESAPKBHXBsVsoVmNlK/Y/NpTKqrzuvpuvuDeNAo76dPaLa6VG7yMeJfT x2sQK8wPI+39YtKxcOzdDXPfGaVrxZAxx/Z1MHNoiE7kvVWoIKQtM+Y9clZoCsQ9 E5V6ix2VCUkShZIgwzbeiT7t+kiJixWtS/UTbhgcSPxDjf3K1zgaJh0+WywBq6bR iKk0qyaQdidtCJbrnob57TqJvRXORve2OvP5LtKr2C6jwberl/FXD8X/nZPTEXNN YWtnwReXG/tEFz5NnuVO8b8wU3BgZpg= -----END CERTIFICATE-----Generated at Tue Oct 13 18:40:06 2026 by rpki-client