$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0330cd88-8666-38d7-8200-fa0d7a7e8929.roa File: 0330cd88-8666-38d7-8200-fa0d7a7e8929.roa (raw, json) Hash identifier: k2kLMscVLI9cAxme18Kmpf0GKIZFXp2JfOs0W42FTe4= Subject key identifier: 05:5D:AD:A4:43:34:4C:DD:BB:89:10:1E:AF:2A:F3:52:E6:51:A0:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAA52081B7E6A6360D8527B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0330cd88-8666-38d7-8200-fa0d7a7e8929.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.188.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:52:08:1b:7e:6a:63:60:d8:52:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=d6c706b5-53ed-49b1-b098-cafc734bb81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:38:2d:b8:c6:c7:5c:06:2f:28:ff:5a:df: 05:bd:ca:4c:b9:03:2c:b2:ad:db:81:ab:c6:c1:7a: c3:13:b9:c3:8d:1c:3e:ba:91:69:4e:b1:56:7e:a0: 97:54:89:61:8a:50:b2:be:a1:3d:33:de:81:c2:a3: 47:94:75:75:7e:08:24:bb:8b:0a:90:d3:56:98:00: 93:4f:28:b3:95:db:18:e1:95:6d:52:79:dd:87:72: a1:21:83:8d:2e:99:4b:e8:28:ee:54:5b:e4:4d:36: 63:ab:48:fb:0e:c8:ca:9f:1a:a3:3a:0f:8b:93:48: 6a:ea:c3:f2:d9:ab:04:11:c7:e3:b4:69:f8:40:5a: 75:e1:e3:da:19:e6:a7:fd:af:0f:92:4b:d0:de:0d: c2:dc:43:83:d9:02:0a:fd:56:aa:7b:01:7e:6e:9e: 92:74:42:7d:e7:ab:68:a4:26:cc:c3:fc:da:96:20: ad:ee:d8:09:48:18:17:b7:f4:d2:cc:19:63:a5:09: e2:dd:90:6c:22:46:2e:c0:aa:5a:bf:01:8c:fe:d8: 9b:3d:ef:dd:e7:22:c0:f4:75:b4:e2:41:0d:90:d3: 4a:5d:e0:6d:c4:91:97:b7:58:91:da:8a:89:c9:27: f4:89:be:f8:5b:99:33:ea:2f:1d:07:12:04:14:19: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5D:AD:A4:43:34:4C:DD:BB:89:10:1E:AF:2A:F3:52:E6:51:A0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0330cd88-8666-38d7-8200-fa0d7a7e8929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d4:74:17:c6:52:ee:54:4a:69:aa:8a:b6:7b:b4:26:2e:bf: 80:07:91:d7:ae:32:fd:fd:ee:be:43:9f:ba:9d:e4:8f:90:5c: 91:98:11:2b:88:27:20:1d:af:1d:25:8b:e7:66:7c:41:05:c4: 5e:51:8f:f9:3f:a8:70:22:b9:49:2c:1f:1a:45:12:01:49:eb: be:c2:b5:cd:dd:d1:03:cf:5e:e4:bd:26:5f:b6:90:e0:af:33: 30:6f:34:68:3f:63:65:f2:20:5c:63:d7:ca:55:61:69:cd:5f: e5:3b:20:1f:4c:fd:b8:67:6e:3c:a6:9b:05:ba:34:a4:ac:3b: 53:88:95:60:6d:de:30:79:a7:b3:30:cc:b8:ab:f1:5e:54:33: 20:d7:49:a6:be:38:6c:5e:74:6b:62:95:19:f3:dd:8a:b1:29: ad:80:38:ad:2e:32:21:4a:32:2a:d0:dd:f6:83:ee:09:08:b3: 9c:de:0f:ad:5a:05:55:c6:fb:13:49:53:f7:48:41:8b:7c:8a: 5f:78:1d:d2:23:a8:df:cb:51:d4:7f:03:fa:f7:72:f5:7e:16: a8:f5:c3:55:58:82:25:40:a8:55:25:59:12:77:af:18:04:f5: d1:33:5a:d0:23:52:6e:a2:66:3b:9a:f2:4a:73:7c:41:e8:e7: a5:f5:af:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUggbfmpjYNhSewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk ZDZjNzA2YjUtNTNlZC00OWIxLWIwOTgtY2FmYzczNGJiODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0Y4LbjGx1wGLyj/Wt8FvcpMuQMssq3bgavG wXrDE7nDjRw+upFpTrFWfqCXVIlhilCyvqE9M96BwqNHlHV1fggku4sKkNNWmACT TyizldsY4ZVtUnndh3KhIYONLplL6CjuVFvkTTZjq0j7DsjKnxqjOg+Lk0hq6sPy 2asEEcfjtGn4QFp14ePaGean/a8PkkvQ3g3C3EOD2QIK/VaqewF+bp6SdEJ956to pCbMw/zaliCt7tgJSBgXt/TSzBljpQni3ZBsIkYuwKpavwGM/tibPe/d5yLA9HW0 4kENkNNKXeBtxJGXt1iR2oqJySf0ib74W5kz6i8dBxIEFBnxLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVdraRDNEzdu4kQHq8q81LmUaBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDMzMGNkODgtODY2Ni0z OGQ3LTgyMDAtZmEwZDdhN2U4OTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXUdBfGUu5USmmqirZ7tCYuv4AHkdeuMv397r5Dn7qd5I+QXJGYESuI JyAdrx0li+dmfEEFxF5Rj/k/qHAiuUksHxpFEgFJ677Ctc3d0QPPXuS9Jl+2kOCv MzBvNGg/Y2XyIFxj18pVYWnNX+U7IB9M/bhnbjymmwW6NKSsO1OIlWBt3jB5p7Mw zLir8V5UMyDXSaa+OGxedGtilRnz3YqxKa2AOK0uMiFKMirQ3faD7gkIs5zeD61a BVXG+xNJU/dIQYt8il94HdIjqN/LUdR/A/r3cvV+Fqj1w1VYgiVAqFUlWRJ3rxgE 9dEzWtAjUm6iZjua8kpzfEHo56X1r7c= -----END CERTIFICATE-----Generated at Thu Aug 27 16:07:34 2026 by rpki-client