$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50611b44-0c38-38f6-83d0-f8caa46c2536.roa File: 50611b44-0c38-38f6-83d0-f8caa46c2536.roa (raw, json) Hash identifier: M+V6xwB0KYgNayYczLZswyHWMkFsa5WJW+WZXYzgR68= Subject key identifier: AC:60:80:88:17:EA:36:67:0D:08:95:EE:62:4C:08:91:E7:F9:3D:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D930D134608F01F930B86 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50611b44-0c38-38f6-83d0-f8caa46c2536.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.188.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:93:0d:13:46:08:f0:1f:93:0b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=9ca083f8-cfd9-423a-aab6-3fe5a2ec5667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:31:6d:a5:69:f6:cb:0b:a1:ae:93:82:20: 38:ae:c8:33:38:e4:63:71:c2:c8:31:ea:78:8f:1e: 83:a3:37:16:8d:8c:dc:88:0d:0d:82:eb:40:c8:74: 3f:12:62:32:73:b2:3f:d5:4f:3a:84:f4:74:d7:14: 99:58:69:78:00:c8:40:cc:61:7b:eb:33:e6:bf:e6: 9a:1d:fa:d2:b7:f3:1a:e2:2f:c9:78:42:58:47:78: 9d:da:e9:3f:f0:65:23:fd:a1:2a:3e:ac:00:4c:36: a1:e3:cc:43:2f:ae:1d:88:c5:91:d7:d8:da:f4:39: 3a:d1:03:00:bd:39:9b:50:14:3c:3d:3b:f0:6c:2e: 4a:b0:db:14:aa:fe:07:2c:51:90:87:a7:91:63:4c: 2b:2d:2c:81:ba:03:2c:b1:e6:d9:f0:43:e1:6a:52: a9:be:ec:c8:7a:de:34:71:99:5c:69:03:4f:f8:3c: e5:c1:e3:b6:ad:88:e6:03:3b:18:de:d1:d9:0c:f8: 12:35:e2:55:36:b4:06:47:e9:39:95:07:d0:dd:6a: 8b:e4:d4:ce:b0:9d:22:74:80:3d:f9:b1:85:d8:fa: a3:f6:e2:1a:7e:3e:e4:68:28:58:70:b9:c0:ad:a7: 04:1f:e6:3f:17:e1:d8:59:f8:5c:81:83:17:f7:5a: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:60:80:88:17:EA:36:67:0D:08:95:EE:62:4C:08:91:E7:F9:3D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50611b44-0c38-38f6-83d0-f8caa46c2536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:62:0e:d1:d0:cc:20:98:1c:53:2c:d8:a7:89:05:4a:c7:2e: 23:70:7b:97:35:e2:19:fb:cd:d9:91:f6:09:11:60:01:63:b3: d9:bf:9c:ba:e0:aa:59:73:6b:10:96:13:4d:8c:1f:07:32:01: c2:cd:ce:6f:b9:85:86:81:d8:6b:90:5e:31:aa:90:94:94:24: 75:cf:09:0f:90:06:d0:61:f4:a9:63:33:fb:fa:cc:b6:dd:f8: d4:d9:e8:39:01:f4:e6:6c:6e:ba:2c:e9:6b:82:ad:2b:1e:09: 1c:93:30:30:97:25:b9:b3:07:74:89:c7:c5:43:17:fc:3b:7d: aa:99:33:77:1f:32:55:91:36:a6:70:41:36:e7:cf:5f:2b:fd: ba:3b:70:e8:79:35:e8:d3:46:86:1d:60:3e:a1:e4:3e:ae:0b: e8:37:25:19:b8:c2:34:a0:dc:b6:de:30:c6:db:38:1c:bb:cc: d0:67:bf:67:ea:26:bb:6a:d0:c2:af:63:ed:a8:7f:aa:a4:fb: 7a:6e:a5:15:b7:52:bb:07:21:9d:76:39:15:38:88:2c:2f:96: cd:5e:e2:e9:dd:d9:a9:ed:a4:61:fa:9e:2b:f5:2e:56:0a:36: b7:4c:ba:d3:13:95:7a:d1:42:61:34:64:b9:5c:d1:bc:66:87: 94:83:4b:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZMNE0YI8B+TC4YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OWNhMDgzZjgtY2ZkOS00MjNhLWFhYjYtM2ZlNWEyZWM1NjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfoxbaVp9ssLoa6TgiA4rsgzOORjccLIMep4 jx6DozcWjYzciA0NgutAyHQ/EmIyc7I/1U86hPR01xSZWGl4AMhAzGF76zPmv+aa HfrSt/Ma4i/JeEJYR3id2uk/8GUj/aEqPqwATDah48xDL64diMWR19ja9Dk60QMA vTmbUBQ8PTvwbC5KsNsUqv4HLFGQh6eRY0wrLSyBugMssebZ8EPhalKpvuzIet40 cZlcaQNP+DzlweO2rYjmAzsY3tHZDPgSNeJVNrQGR+k5lQfQ3WqL5NTOsJ0idIA9 +bGF2Pqj9uIafj7kaChYcLnAracEH+Y/F+HYWfhcgYMX91q6iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxggIgX6jZnDQiV7mJMCJHn+T2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA2MTFiNDQtMGMzOC0z OGY2LTgzZDAtZjhjYWE0NmMyNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADliDtHQzCCYHFMs2KeJBUrHLiNwe5c14hn7zdmR9gkRYAFjs9m/nLrg qllzaxCWE02MHwcyAcLNzm+5hYaB2GuQXjGqkJSUJHXPCQ+QBtBh9KljM/v6zLbd +NTZ6DkB9OZsbros6WuCrSseCRyTMDCXJbmzB3SJx8VDF/w7faqZM3cfMlWRNqZw QTbnz18r/bo7cOh5NejTRoYdYD6h5D6uC+g3JRm4wjSg3LbeMMbbOBy7zNBnv2fq Jrtq0MKvY+2of6qk+3pupRW3UrsHIZ12ORU4iCwvls1e4und2antpGH6niv1LlYK NrdMutMTlXrRQmE0ZLlc0bxmh5SDSzs= -----END CERTIFICATE-----Generated at Fri Oct 9 22:42:07 2026 by rpki-client