$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8a85306-f4fc-3d37-aaf6-cba528be5f0c.roa File: e8a85306-f4fc-3d37-aaf6-cba528be5f0c.roa (raw, json) Hash identifier: AfVN4RGf9qLrWX1CW7p1pqIYDN3nOlqJnNgAwc8rZL0= Subject key identifier: 07:4D:E9:D7:BC:00:B8:61:D3:4F:1D:50:62:6E:18:27:26:E6:2E:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62CABF2E89BFC5CA964BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8a85306-f4fc-3d37-aaf6-cba528be5f0c.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 173.185.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ca:bf:2e:89:bf:c5:ca:96:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=ec25a9ba-49c6-4d89-8e6a-71ee8092c5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:1b:7c:90:ac:3f:4c:cc:58:aa:95:82:9b: 4b:b5:30:3a:58:ca:7f:f0:91:1a:52:35:4f:5b:59: 67:99:dc:04:76:c9:de:1b:d4:50:e4:46:04:83:09: 11:51:a3:19:72:04:86:36:3b:3d:24:4c:74:35:9b: 83:8c:1f:af:ed:33:29:53:2e:0b:10:f1:c8:dd:23: 02:fb:5d:a3:86:4f:b0:b6:88:85:86:50:b0:96:4a: eb:f0:12:2d:a1:e2:e8:89:a7:a1:03:30:c5:e6:0a: 27:b9:e9:45:a3:a7:a6:53:43:8d:35:e9:94:38:f4: e5:b1:08:26:64:b0:5b:4e:1e:75:ae:1a:f3:18:68: fd:bf:a4:f7:87:74:b3:f8:0e:84:11:d3:15:31:02: d5:df:89:41:25:9a:45:96:fd:8c:02:d8:2b:5e:62: 00:6d:9e:72:cc:7d:2a:89:87:de:4a:87:5e:ff:d3: a6:bf:ab:36:68:60:c8:f0:56:56:59:ee:0c:b6:5a: 0f:81:06:05:13:c2:01:c8:bb:43:ab:86:0a:10:1b: 6e:8e:69:68:90:cb:0d:13:b7:ae:6f:02:c9:fe:1b: cc:4a:1f:be:34:23:35:4f:9c:6c:14:c7:ce:06:61: 10:d3:d9:a7:e3:f0:d6:73:b2:c5:6a:02:7c:d5:30: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:E9:D7:BC:00:B8:61:D3:4F:1D:50:62:6E:18:27:26:E6:2E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8a85306-f4fc-3d37-aaf6-cba528be5f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:75:6b:d8:ca:e5:d3:54:56:88:ea:69:cf:f1:ea:9f:a6:4f: bb:fd:a0:f1:79:cd:80:35:fe:40:f6:e8:87:f3:c6:c6:12:06: 98:94:59:a8:13:fb:c9:21:4a:41:d0:13:7d:86:94:f3:0a:b4: fc:32:04:e3:d0:ac:5d:30:2f:94:54:8a:d8:63:43:1d:0d:1d: 15:5b:9f:33:15:64:45:f8:d3:80:aa:10:7e:15:32:6a:d5:4f: 82:08:d1:14:7f:9e:fa:5a:0f:2c:2f:9b:da:da:7d:bd:1c:d8: c1:38:09:57:c7:52:6a:8a:ef:0d:20:c9:01:a7:3e:16:d6:20: 0b:34:71:2c:db:7e:35:2c:27:26:39:0e:0e:46:80:3d:2d:6d: 9b:09:8c:2e:8c:c2:fd:73:a0:1f:1e:a2:8c:99:bd:e8:bc:d9: ad:27:b1:24:a0:0f:b2:96:8c:d6:b5:dd:02:91:1a:f0:ed:91: b1:5a:16:48:0c:07:01:5c:a1:91:c9:2b:95:ca:ad:5b:2c:54: 39:2f:4e:b5:50:99:0c:35:e1:25:2c:1b:33:0d:83:c3:f4:aa: 86:08:1e:ca:a5:a9:85:ec:4b:b5:82:ba:4d:97:49:c7:83:24: ca:a6:c5:cc:0c:0e:16:fc:a6:f7:73:0b:b7:51:e2:c9:b0:f4: 01:e4:2e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsq/Lom/xcqWS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZWMyNWE5YmEtNDljNi00ZDg5LThlNmEtNzFlZTgwOTJjNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB4bfJCsP0zMWKqVgptLtTA6WMp/8JEaUjVP W1lnmdwEdsneG9RQ5EYEgwkRUaMZcgSGNjs9JEx0NZuDjB+v7TMpUy4LEPHI3SMC +12jhk+wtoiFhlCwlkrr8BItoeLoiaehAzDF5gonuelFo6emU0ONNemUOPTlsQgm ZLBbTh51rhrzGGj9v6T3h3Sz+A6EEdMVMQLV34lBJZpFlv2MAtgrXmIAbZ5yzH0q iYfeSode/9Omv6s2aGDI8FZWWe4MtloPgQYFE8IByLtDq4YKEBtujmlokMsNE7eu bwLJ/hvMSh++NCM1T5xsFMfOBmEQ09mn4/DWc7LFagJ81TC3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdN6de8ALhh008dUGJuGCcm5i7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZThhODUzMDYtZjRmYy0z ZDM3LWFhZjYtY2JhNTI4YmU1ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrblwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx1a9jK5dNUVojqac/x6p+mT7v9oPF5zYA1/kD26IfzxsYSBpiUWagT +8khSkHQE32GlPMKtPwyBOPQrF0wL5RUithjQx0NHRVbnzMVZEX404CqEH4VMmrV T4II0RR/nvpaDywvm9rafb0c2ME4CVfHUmqK7w0gyQGnPhbWIAs0cSzbfjUsJyY5 Dg5GgD0tbZsJjC6Mwv1zoB8eooyZvei82a0nsSSgD7KWjNa13QKRGvDtkbFaFkgM BwFcoZHJK5XKrVssVDkvTrVQmQw14SUsGzMNg8P0qoYIHsqlqYXsS7WCuk2XSceD JMqmxcwMDhb8pvdzC7dR4smw9AHkLvk= -----END CERTIFICATE-----Generated at Tue Oct 13 06:23:34 2026 by rpki-client