$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa File: 173f706b-4656-32a0-91a1-5138081207a9.roa (raw, json) Hash identifier: S8UtihdR1IlBh8sVHLhaKqkEvJd2QcOWTHU1csV9Kxg= Subject key identifier: 29:0A:8A:B5:BC:56:BF:20:FF:4B:6C:81:1D:90:B6:1E:B6:31:70:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F02423343F98D08BD16FDBB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 173.189.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:33:43:f9:8d:08:bd:16:fd:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=416932b7-f7c4-46f2-9e47-152bf3217892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:86:f4:bd:8f:a1:38:c0:2c:54:53:f6:a0: 7b:5c:7a:d3:7c:37:8e:4d:77:ae:47:24:bb:83:11: 28:30:18:44:cb:a9:dc:fa:a1:70:e9:96:c9:2a:7b: 95:ec:8a:45:aa:5e:eb:c4:74:91:f0:0a:ae:ba:5e: 22:89:f5:80:52:e4:67:04:a4:b1:c2:06:bf:2c:9e: 09:57:20:cc:fd:be:aa:84:1d:01:ea:f4:ff:64:86: fa:d9:e4:54:c0:8d:47:9c:ea:25:ba:fa:ea:e8:4e: db:f1:ab:17:7b:63:66:f5:8d:0e:a2:58:ed:a0:95: e8:38:b4:42:72:f7:1c:50:e3:8d:51:17:90:30:15: 32:1c:ba:a7:c8:f4:91:55:7f:5a:06:56:33:ea:84: e0:e9:11:b0:a7:7e:e2:8c:1f:cc:66:48:a4:cd:32: 00:a2:12:81:b6:6f:5d:5a:e6:1c:d5:cb:af:ed:74: 20:33:21:9f:19:13:76:d5:c1:61:c4:7d:96:75:f6: 7e:8d:a0:15:2e:ac:ab:9b:70:0d:ce:01:df:dc:d5: a1:db:07:e7:ac:c8:48:9c:3a:d0:3c:81:57:95:c0: ab:c4:c9:db:fd:74:0e:32:86:17:a6:76:a2:26:ec: f1:2b:18:6b:51:78:a1:dd:b9:04:e8:50:a5:62:36: 31:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0A:8A:B5:BC:56:BF:20:FF:4B:6C:81:1D:90:B6:1E:B6:31:70:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4d:02:c2:76:1f:36:f8:02:8c:31:86:2c:9a:23:35:1b:db: 7f:52:cc:bd:d0:b6:42:40:78:0f:66:f2:a9:af:7e:53:d1:44: bf:32:24:79:b5:06:dc:ee:23:db:49:85:1b:78:8f:4d:6b:ac: 16:7f:10:56:4a:44:d4:63:31:b3:c8:74:50:d4:73:94:32:31: f9:0d:56:33:79:11:97:33:bb:a9:3d:61:cc:80:87:6a:e0:cd: 9a:80:7f:a8:14:d3:d8:a1:b9:61:53:2c:1b:84:7d:fb:60:2e: 61:5e:20:22:50:c6:bb:63:c4:8f:07:22:8e:51:ee:90:1e:86: a6:1e:37:24:70:a4:91:8e:79:01:5a:3b:cd:2d:26:a2:23:68: 89:59:75:f2:2d:4e:80:2c:4f:3b:c2:8d:8a:a4:cb:bf:77:f0: ca:32:23:a4:f9:45:ee:a3:c9:a1:b9:39:de:48:75:26:49:95: 3d:75:96:65:27:b7:67:7f:aa:ad:b0:18:5f:82:16:62:a0:59: bb:b5:5c:11:2d:65:62:51:bd:63:83:6d:3b:e4:19:12:64:2d: b0:5b:63:d5:3e:35:4b:7b:4f:18:91:20:eb:aa:31:cc:e8:e5: 7c:a7:cb:06:c3:b0:42:73:17:3f:8b:b8:81:9f:9a:99:e4:db: 83:4c:ce:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjND+Y0IvRb9uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NDE2OTMyYjctZjdjNC00NmYyLTllNDctMTUyYmYzMjE3ODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouOG9L2PoTjALFRT9qB7XHrTfDeOTXeuRyS7 gxEoMBhEy6nc+qFw6ZbJKnuV7IpFql7rxHSR8Aquul4iifWAUuRnBKSxwga/LJ4J VyDM/b6qhB0B6vT/ZIb62eRUwI1HnOoluvrq6E7b8asXe2Nm9Y0OoljtoJXoOLRC cvccUOONUReQMBUyHLqnyPSRVX9aBlYz6oTg6RGwp37ijB/MZkikzTIAohKBtm9d WuYc1cuv7XQgMyGfGRN21cFhxH2WdfZ+jaAVLqyrm3ANzgHf3NWh2wfnrMhInDrQ PIFXlcCrxMnb/XQOMoYXpnaiJuzxKxhrUXih3bkE6FClYjYxVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkKirW8Vr8g/0tsgR2Qth62MXBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTczZjcwNmItNDY1Ni0z MmEwLTkxYTEtNTEzODA4MTIwN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9NAsJ2Hzb4AowxhiyaIzUb239SzL3QtkJAeA9m8qmvflPRRL8yJHm1 BtzuI9tJhRt4j01rrBZ/EFZKRNRjMbPIdFDUc5QyMfkNVjN5EZczu6k9YcyAh2rg zZqAf6gU09ihuWFTLBuEfftgLmFeICJQxrtjxI8HIo5R7pAehqYeNyRwpJGOeQFa O80tJqIjaIlZdfItToAsTzvCjYqky7938MoyI6T5Re6jyaG5Od5IdSZJlT11lmUn t2d/qq2wGF+CFmKgWbu1XBEtZWJRvWODbTvkGRJkLbBbY9U+NUt7TxiRIOuqMczo 5XynywbDsEJzFz+LuIGfmpnk24NMztQ= -----END CERTIFICATE-----Generated at Sat Oct 10 21:47:27 2026 by rpki-client