$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c930b9d-7bf1-371f-b5fd-ffcada2b8d8d.roa File: 9c930b9d-7bf1-371f-b5fd-ffcada2b8d8d.roa (raw, json) Hash identifier: DgkJ+fZpmVBlZq/AAll9iFLxQuDy3tOjzuf0h1GiGPA= Subject key identifier: 75:06:8C:1B:1D:34:46:C2:8C:80:0C:0D:74:BC:0C:E9:97:3A:21:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584FA1633AD90F01A3A817833380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c930b9d-7bf1-371f-b5fd-ffcada2b8d8d.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 7029 IP address blocks: 173.187.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:3a:d9:0f:01:a3:a8:17:83:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=dac947cf-8744-43b5-ae43-6656f8398c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ee:08:0d:fa:73:9d:5c:0c:10:f0:9d:a6:e8: bb:67:61:35:81:84:3d:b5:64:70:a2:14:20:2e:de: 37:c8:7d:1c:97:cd:da:1e:44:cd:52:4f:d4:26:fe: 5c:da:1b:50:ee:f8:40:dd:e5:b1:51:4d:2e:16:60: ee:fe:51:e8:51:88:ef:58:36:c9:ab:46:88:08:e9: 1c:6c:7a:6d:f6:d2:1f:f0:64:c3:4f:48:e8:37:35: 3c:b3:36:4c:cb:47:8a:d7:b8:6a:b8:b9:2c:0f:23: dc:63:29:e4:51:a8:10:52:90:e8:ae:3b:e9:22:fc: d4:85:93:6d:5d:37:eb:31:a4:09:61:c8:4e:82:01: f0:25:21:aa:3c:df:df:de:88:f6:3d:69:fb:94:a0: 94:38:af:a8:9b:a5:6b:75:5a:ec:a7:40:d8:b4:96: 66:8c:b3:ef:99:f6:fb:cc:f0:32:90:08:26:ff:d5: 68:2b:d2:1c:65:7b:50:09:c8:8c:40:f9:6d:3e:84: 69:3b:5c:fc:ea:a4:da:33:24:28:aa:06:56:54:fa: 1e:cb:3a:92:e0:08:31:db:4f:d2:85:e7:7f:f5:5c: ee:12:99:ba:67:02:d9:4e:c0:fc:d7:8a:86:be:27: bc:5a:c9:5f:03:97:0c:33:3d:8f:39:f2:28:e5:c6: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:06:8C:1B:1D:34:46:C2:8C:80:0C:0D:74:BC:0C:E9:97:3A:21:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c930b9d-7bf1-371f-b5fd-ffcada2b8d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:74:59:fc:48:6c:a5:f7:1f:87:1e:2e:ff:cd:7a:29:5e:25: 63:c3:d4:db:43:78:5f:ea:28:62:71:ae:a9:75:78:e2:58:fe: f2:3f:c3:79:6b:26:3d:a1:f9:ff:05:34:47:7c:3d:64:09:4a: 39:85:61:41:91:35:4a:7c:ae:f0:f4:8d:a2:2a:d0:36:4e:22: 9f:6f:73:fd:25:01:ea:f4:b9:a9:95:d3:f9:da:25:6c:18:15: f8:48:43:44:60:17:63:89:9b:b6:0e:d2:57:82:45:f6:f8:f1: 92:a9:ef:82:4c:2a:3e:41:f5:e7:7d:e2:6e:de:29:2e:75:96: e4:31:1b:cb:b4:a3:87:4c:5f:49:dd:52:83:7c:14:27:61:c0: c8:d4:b3:5f:0c:7b:47:d6:0d:c6:06:55:d2:3b:a5:80:f8:37: 46:8b:e3:f6:9d:44:f5:9c:b5:e1:0e:bf:69:fb:15:21:26:53: 9d:45:d2:21:1a:e0:ee:18:86:30:76:a6:ce:08:7b:b6:a0:27: ab:5e:45:9d:a9:2f:48:61:d2:61:4a:29:83:c0:05:9f:d3:e3: c7:67:9c:31:16:35:11:9c:9d:d5:d8:4f:57:55:24:cf:e5:30: 04:dc:2a:87:d0:91:dc:72:15:2e:96:15:c6:8d:1f:d7:0a:0b: d6:fe:5e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYzrZDwGjqBeDM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk ZGFjOTQ3Y2YtODc0NC00M2I1LWFlNDMtNjY1NmY4Mzk4YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO4IDfpznVwMEPCdpui7Z2E1gYQ9tWRwohQg Lt43yH0cl83aHkTNUk/UJv5c2htQ7vhA3eWxUU0uFmDu/lHoUYjvWDbJq0aICOkc bHpt9tIf8GTDT0joNzU8szZMy0eK17hquLksDyPcYynkUagQUpDorjvpIvzUhZNt XTfrMaQJYchOggHwJSGqPN/f3oj2PWn7lKCUOK+om6VrdVrsp0DYtJZmjLPvmfb7 zPAykAgm/9VoK9IcZXtQCciMQPltPoRpO1z86qTaMyQoqgZWVPoeyzqS4Agx20/S hed/9VzuEpm6ZwLZTsD814qGvie8WslfA5cMMz2POfIo5cb8wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUGjBsdNEbCjIAMDXS8DOmXOiG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWM5MzBiOWQtN2JmMS0z NzFmLWI1ZmQtZmZjYWRhMmI4ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ0WfxIbKX3H4ceLv/NeileJWPD1NtDeF/qKGJxrql1eOJY/vI/w3lr Jj2h+f8FNEd8PWQJSjmFYUGRNUp8rvD0jaIq0DZOIp9vc/0lAer0uamV0/naJWwY FfhIQ0RgF2OJm7YO0leCRfb48ZKp74JMKj5B9ed94m7eKS51luQxG8u0o4dMX0nd UoN8FCdhwMjUs18Me0fWDcYGVdI7pYD4N0aL4/adRPWcteEOv2n7FSEmU51F0iEa 4O4YhjB2ps4Ie7agJ6teRZ2pL0hh0mFKKYPABZ/T48dnnDEWNRGcndXYT1dVJM/l MATcKofQkdxyFS6WFcaNH9cKC9b+XjE= -----END CERTIFICATE-----Generated at Sun Nov 15 21:44:34 2026 by rpki-client