$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/537d6821-dd9a-3630-9408-c17915ca949b.roa File: 537d6821-dd9a-3630-9408-c17915ca949b.roa (raw, json) Hash identifier: xm/mvcqf+AdFewFu0aemiRLgvPxtmdV9/FhWVkc7FDg= Subject key identifier: EE:70:FC:EE:3F:6C:2E:63:F1:61:90:97:38:8D:4B:70:8C:88:2C:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F655D6F2F4516F53C1F2BE8D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/537d6821-dd9a-3630-9408-c17915ca949b.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 173.189.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:6f:2f:45:16:f5:3c:1f:2b:e8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=2ab047f8-52a4-486a-b2f7-d4067dd7dc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:a6:74:af:17:59:9a:ea:8b:95:a7:20:d4: d7:2b:16:df:7c:aa:29:04:9d:b8:89:fe:d4:aa:63: 08:00:0d:e8:e1:07:8a:30:84:62:57:57:ba:6e:0f: e2:80:9d:4f:bf:fc:8b:b7:46:d7:86:9a:a0:3f:4e: ce:82:5a:2c:3a:3c:6f:fb:bf:0f:3e:67:93:ab:43: a4:d6:c2:78:05:7e:db:d3:eb:4b:d2:ff:17:89:3a: f5:5d:62:ad:95:9a:76:fe:eb:3e:77:4c:88:20:40: af:e9:69:a4:42:6f:0b:16:bc:d7:27:03:68:8d:c4: c3:6f:4e:48:78:c8:33:63:82:4a:33:26:62:5a:dd: b5:8a:48:82:1c:5d:ce:de:78:22:66:cb:c7:72:3b: 40:77:c6:4f:8d:97:49:c9:45:3b:d8:2c:d6:76:1a: 10:c9:f7:89:db:d7:85:6e:19:ba:c0:f0:62:79:e6: ce:b0:55:5b:ab:1a:78:60:00:d7:ab:82:e0:a2:bb: 70:3a:17:d3:e5:5d:a9:c1:6b:69:26:77:60:1d:91: fd:97:b7:27:ae:ec:e9:86:02:d9:fa:43:40:58:b0: 26:1c:1d:00:9a:4d:fc:b8:44:60:93:d2:5a:82:59: 39:f6:c3:66:1c:a3:09:22:c2:be:38:fe:d5:e5:65: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:70:FC:EE:3F:6C:2E:63:F1:61:90:97:38:8D:4B:70:8C:88:2C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/537d6821-dd9a-3630-9408-c17915ca949b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:65:43:20:ee:7b:7d:4f:0f:e1:69:e3:77:70:1a:58:30:c9: 27:45:f0:b6:ac:1b:16:11:b8:c8:12:e2:31:36:5a:2c:3c:d1: 46:94:a3:c1:83:7f:02:1c:b0:09:d4:d5:95:ac:5f:9a:7b:a6: c3:ae:bc:76:b4:f8:2c:41:8c:8c:cb:7e:40:13:f3:48:c7:60: c7:8b:aa:09:82:51:a7:a9:2f:45:5d:23:6c:3c:94:e8:89:ba: 5d:4b:72:2f:2a:57:c2:89:66:33:b8:e1:a8:53:f6:c6:22:d7: 82:fc:1e:1a:75:e6:22:3a:1a:fa:c2:9e:7d:ac:bd:0d:c1:21: 0e:a8:8d:36:0b:2a:f4:3c:bc:ee:9b:f1:a6:54:f8:6c:f9:22: d9:17:5e:6d:c1:8c:3f:55:e6:93:93:4c:51:5a:19:f1:9a:b6: 92:79:42:aa:2a:e6:7d:34:4f:bf:c9:14:5f:2a:24:43:e7:24: 56:e9:8a:d1:07:e0:7d:d6:07:57:7e:bc:4b:cd:15:d1:90:c1: 5c:4d:43:78:8b:c4:c3:af:24:1f:91:9e:19:da:0b:23:da:9e: c9:a7:68:fc:0a:98:a1:ef:0d:09:dd:20:9e:db:ff:8d:16:4c: 35:44:90:31:da:b7:43:cc:f8:1a:79:3f:76:e0:64:0c:d0:ae: 47:d5:54:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXW8vRRb1PB8r6NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MmFiMDQ3ZjgtNTJhNC00ODZhLWIyZjctZDQwNjdkZDdkYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgSmdK8XWZrqi5WnINTXKxbffKopBJ24if7U qmMIAA3o4QeKMIRiV1e6bg/igJ1Pv/yLt0bXhpqgP07OglosOjxv+78PPmeTq0Ok 1sJ4BX7b0+tL0v8XiTr1XWKtlZp2/us+d0yIIECv6WmkQm8LFrzXJwNojcTDb05I eMgzY4JKMyZiWt21ikiCHF3O3ngiZsvHcjtAd8ZPjZdJyUU72CzWdhoQyfeJ29eF bhm6wPBieebOsFVbqxp4YADXq4LgortwOhfT5V2pwWtpJndgHZH9l7cnruzphgLZ +kNAWLAmHB0Amk38uERgk9Jaglk59sNmHKMJIsK+OP7V5WXHxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5w/O4/bC5j8WGQlziNS3CMiCxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTM3ZDY4MjEtZGQ5YS0z NjMwLTk0MDgtYzE3OTE1Y2E5NDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb2hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVlQyDue31PD+Fp43dwGlgwySdF8LasGxYRuMgS4jE2Wiw80UaUo8GD fwIcsAnU1ZWsX5p7psOuvHa0+CxBjIzLfkAT80jHYMeLqgmCUaepL0VdI2w8lOiJ ul1Lci8qV8KJZjO44ahT9sYi14L8Hhp15iI6GvrCnn2svQ3BIQ6ojTYLKvQ8vO6b 8aZU+Gz5ItkXXm3BjD9V5pOTTFFaGfGatpJ5Qqoq5n00T7/JFF8qJEPnJFbpitEH 4H3WB1d+vEvNFdGQwVxNQ3iLxMOvJB+RnhnaCyPansmnaPwKmKHvDQndIJ7b/40W TDVEkDHat0PM+Bp5P3bgZAzQrkfVVMo= -----END CERTIFICATE-----Generated at Thu Oct 8 17:13:18 2026 by rpki-client