$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1155578-fa9e-3582-a636-4fbedf01e3c9.roa File: f1155578-fa9e-3582-a636-4fbedf01e3c9.roa (raw, json) Hash identifier: RgU3dvfVwxqq0Nn1iDKzdCS05WpNjjSs7Pr1P6QvC9I= Subject key identifier: A5:1A:03:1D:9D:68:EE:1A:B9:5D:2D:95:CF:1B:05:0C:BA:A0:23:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7783588DF7FB288F9926C8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1155578-fa9e-3582-a636-4fbedf01e3c9.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 173.189.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:58:8d:f7:fb:28:8f:99:26:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=84c08356-70cf-49e7-8d37-eea8a570af00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:f7:b1:6a:b1:41:bd:69:7a:2f:03:32:7d: 20:f5:85:ef:b6:df:81:82:08:a9:ba:51:00:f6:b2: 36:08:5c:4d:55:05:7c:e8:82:0e:26:d9:20:eb:6b: 7e:32:00:96:dd:d0:5c:ce:0c:0a:4a:56:5e:26:92: 98:d7:96:f6:f9:33:20:5f:95:84:79:0a:d6:f0:08: 4b:6f:91:be:24:a9:a1:be:7a:5a:d7:ce:5c:58:b7: e7:46:d2:68:73:4e:17:6f:fb:43:36:f3:e0:cc:f6: ce:7b:5a:da:6c:89:f8:1f:02:e6:e9:46:21:39:e1: f0:04:77:b9:e8:4c:cd:e5:c4:5c:1c:f7:7a:70:d4: ed:81:5e:0a:19:2b:b1:6b:05:38:45:d5:29:8a:4c: 0a:18:54:27:e1:5d:60:11:16:c3:97:36:bc:73:1a: 2c:d0:ba:ea:5f:e2:45:0d:35:09:70:62:02:60:9a: fe:57:31:31:a8:ed:77:90:4f:73:7c:33:8d:40:e5: 7e:ab:b1:ac:72:0b:52:45:6b:a1:51:1f:cd:79:22: ed:d2:53:d3:d1:65:4d:33:fb:32:6d:ae:64:47:87: b9:6d:73:75:d3:d1:1d:ff:26:7b:91:ff:eb:97:e0: 39:0f:39:49:68:1a:d0:79:58:d9:17:64:0a:f8:2d: fe:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1A:03:1D:9D:68:EE:1A:B9:5D:2D:95:CF:1B:05:0C:BA:A0:23:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1155578-fa9e-3582-a636-4fbedf01e3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e5:16:f7:b5:55:9d:35:b7:23:fc:0b:b4:8e:76:3a:98:e0: 1b:f6:ab:e0:6a:48:23:f4:b7:7b:6b:1b:b6:3b:23:c6:87:9d: 15:fc:87:eb:8a:67:93:dc:40:cb:70:95:f0:1b:7b:9e:17:59: 56:80:9c:97:18:63:9d:b6:c6:6f:03:f9:50:20:4d:e4:ad:24: d1:82:4f:ff:88:e3:75:da:71:db:30:bc:2b:2a:66:ca:ef:74: 98:a5:8e:31:ce:db:39:9f:67:7e:8b:8a:31:f8:5d:23:d4:73: 3c:ca:f0:4f:d9:e4:68:eb:e8:52:72:82:ff:67:c4:52:99:a0: 6c:76:1b:a3:c6:6c:ab:82:be:a8:ab:cb:74:f5:37:bc:75:c2: 5d:56:35:e1:e4:e5:fa:3c:92:b1:97:c5:48:f0:80:9a:fc:07: 17:cb:ef:8c:46:fd:dd:db:62:db:e7:26:75:57:a9:cf:5f:03: 41:6f:57:71:de:96:4b:88:12:65:fa:91:8a:c4:a1:32:71:c7: f8:34:81:57:98:dc:71:a7:99:a0:bd:13:5f:72:3a:28:1f:90: fc:57:35:67:44:a3:50:c3:f9:cb:0a:21:7c:d4:71:f2:26:3b: 68:3d:2e:cc:f5:3d:cb:af:6f:b3:c4:4f:46:82:d0:ca:0f:8c: c0:d1:5f:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1iN9/soj5kmyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODRjMDgzNTYtNzBjZi00OWU3LThkMzctZWVhOGE1NzBhZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ33sWqxQb1pei8DMn0g9YXvtt+BggipulEA 9rI2CFxNVQV86IIOJtkg62t+MgCW3dBczgwKSlZeJpKY15b2+TMgX5WEeQrW8AhL b5G+JKmhvnpa185cWLfnRtJoc04Xb/tDNvPgzPbOe1rabIn4HwLm6UYhOeHwBHe5 6EzN5cRcHPd6cNTtgV4KGSuxawU4RdUpikwKGFQn4V1gERbDlza8cxos0LrqX+JF DTUJcGICYJr+VzExqO13kE9zfDONQOV+q7GscgtSRWuhUR/NeSLt0lPT0WVNM/sy ba5kR4e5bXN109Ed/yZ7kf/rl+A5DzlJaBrQeVjZF2QK+C3+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUaAx2daO4auV0tlc8bBQy6oCN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjExNTU1NzgtZmE5ZS0z NTgyLWE2MzYtNGZiZWRmMDFlM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXlFve1VZ01tyP8C7SOdjqY4Bv2q+BqSCP0t3trG7Y7I8aHnRX8h+uK Z5PcQMtwlfAbe54XWVaAnJcYY522xm8D+VAgTeStJNGCT/+I43XacdswvCsqZsrv dJiljjHO2zmfZ36LijH4XSPUczzK8E/Z5Gjr6FJygv9nxFKZoGx2G6PGbKuCvqir y3T1N7x1wl1WNeHk5fo8krGXxUjwgJr8BxfL74xG/d3bYtvnJnVXqc9fA0FvV3He lkuIEmX6kYrEoTJxx/g0gVeY3HGnmaC9E19yOigfkPxXNWdEo1DD+csKIXzUcfIm O2g9Lsz1Pcuvb7PET0aC0MoPjMDRX5Q= -----END CERTIFICATE-----Generated at Tue Oct 13 10:24:47 2026 by rpki-client