$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa File: fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa (raw, json) Hash identifier: +tbcCoIXS9v2HkANhlz7X1sskL7wBoPuoaWU3iKmj1E= Subject key identifier: 56:45:78:DB:02:B8:61:8B:6A:89:E1:68:9D:F1:8E:7B:6F:2D:8C:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D972FCCA64FFA09258FA8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 22050 IP address blocks: 173.188.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:97:2f:cc:a6:4f:fa:09:25:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=7cf9b53f-c41a-44c4-8c2e-3df61fc980b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:e6:3c:bd:4a:c2:8e:27:00:0f:0d:6c:d1: 27:4e:6c:f5:db:bc:42:24:1a:b8:d6:40:a3:c0:1c: d1:b6:7d:4e:82:c2:9d:2b:8e:73:20:94:42:6a:2c: 7a:8b:2a:b3:b1:da:a9:c7:18:ec:a5:95:49:0b:ea: 52:71:53:f0:1f:07:1c:b8:55:35:a2:ea:9f:19:96: 58:0a:82:a7:c0:23:81:73:aa:43:55:dc:f0:40:f1: c8:48:79:2a:ce:b9:bb:8a:7f:38:67:dc:2b:51:b0: 62:f4:e8:73:aa:0c:a5:7d:3a:bd:28:68:f8:9d:70: 44:13:12:12:8a:cf:f9:2e:b2:6f:29:3d:a1:bb:51: 19:f0:47:f5:98:03:bd:f3:b2:b3:d8:76:15:cc:6d: b8:3a:4f:63:03:7a:a8:73:1a:ca:ed:59:49:ba:5f: c5:23:68:0f:c8:35:40:c8:80:16:f5:8f:ca:b0:fb: b2:30:54:c0:8e:ce:2c:72:f7:dd:d4:b2:28:e8:76: 40:75:8a:d7:71:f0:8d:4f:a4:de:82:3f:92:a6:99: e9:ef:fc:45:92:81:92:c0:30:d0:03:9c:9d:b0:7e: d1:6d:64:21:3f:12:18:8c:28:c4:e2:14:01:c1:ae: 1c:c1:de:b9:9e:fd:6d:95:c7:b7:7e:06:a8:b8:d8: e0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:78:DB:02:B8:61:8B:6A:89:E1:68:9D:F1:8E:7B:6F:2D:8C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:71:ef:67:bd:f3:ca:5c:d9:45:6a:62:2a:eb:30:2b:4e:ab: 19:f9:da:95:a5:e6:3c:22:cc:ca:1e:d5:46:ee:b7:97:c1:a1: 65:3d:e9:1b:c9:38:ea:37:2c:4e:3b:e7:f5:b3:ce:1c:bd:34: 91:b9:80:d8:e3:56:a3:12:56:53:0a:93:02:8f:32:36:3c:cc: 34:f3:0a:43:65:20:a9:cd:db:f2:18:b4:bd:eb:e0:5a:30:6a: 6b:98:89:18:08:73:95:a1:dc:e5:70:3a:2e:0e:f3:c1:51:52: 13:20:86:cf:ab:7b:c7:1b:c1:c7:99:88:43:d6:d4:45:46:3c: 57:39:3f:29:62:fd:ce:f2:05:de:6a:81:d9:9f:b4:10:36:e3: 86:8f:a7:5f:ab:28:8a:f6:13:87:fe:6f:43:4c:ef:f0:84:ad: e4:ee:39:17:0a:82:5d:f3:25:f4:09:35:1a:c4:9f:90:b5:03: 61:a5:4f:79:f1:e1:d5:44:96:c1:04:a1:66:73:85:cb:63:68: 94:f7:4b:1f:a4:a0:d2:61:71:a9:80:7b:d0:b6:a3:75:58:b7: 35:64:b1:05:2b:ca:a6:6f:03:8d:ef:96:81:4b:fd:83:56:9e: 26:a1:c9:c2:ac:6f:15:84:a9:64:9e:51:ad:2e:0e:d3:ea:1a: f6:35:2a:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZcvzKZP+gklj6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk N2NmOWI1M2YtYzQxYS00NGM0LThjMmUtM2RmNjFmYzk4MGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnTmPL1Kwo4nAA8NbNEnTmz127xCJBq41kCj wBzRtn1OgsKdK45zIJRCaix6iyqzsdqpxxjspZVJC+pScVPwHwccuFU1ouqfGZZY CoKnwCOBc6pDVdzwQPHISHkqzrm7in84Z9wrUbBi9OhzqgylfTq9KGj4nXBEExIS is/5LrJvKT2hu1EZ8Ef1mAO987Kz2HYVzG24Ok9jA3qocxrK7VlJul/FI2gPyDVA yIAW9Y/KsPuyMFTAjs4scvfd1LIo6HZAdYrXcfCNT6Tegj+Sppnp7/xFkoGSwDDQ A5ydsH7RbWQhPxIYjCjE4hQBwa4cwd65nv1tlce3fgaouNjg+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZFeNsCuGGLaonhaJ3xjntvLYw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmNiMGE1ODAtMmZiNC0z ODlmLWE2OGEtOTgzZjk3NmZhOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5x72e988pc2UVqYirrMCtOqxn52pWl5jwizMoe1Ubut5fBoWU96RvJ OOo3LE475/Wzzhy9NJG5gNjjVqMSVlMKkwKPMjY8zDTzCkNlIKnN2/IYtL3r4Fow amuYiRgIc5Wh3OVwOi4O88FRUhMghs+re8cbwceZiEPW1EVGPFc5Pyli/c7yBd5q gdmftBA244aPp1+rKIr2E4f+b0NM7/CEreTuORcKgl3zJfQJNRrEn5C1A2GlT3nx 4dVElsEEoWZzhctjaJT3Sx+koNJhcamAe9C2o3VYtzVksQUryqZvA43vloFL/YNW niahycKsbxWEqWSeUa0uDtPqGvY1KnI= -----END CERTIFICATE-----Generated at Tue Oct 13 06:18:39 2026 by rpki-client