$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0afdc7b0-7b17-3a01-9635-57877513c11a.roa File: 0afdc7b0-7b17-3a01-9635-57877513c11a.roa (raw, json) Hash identifier: N4nJYAWKCJ2K3QeNSemp21YUDyGcDYVEOhYYUWllCmE= Subject key identifier: 50:75:F2:86:63:2D:F4:6A:37:F7:5F:04:B6:DA:40:64:9B:D1:A9:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAA51944686DEEE7B6D7395A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0afdc7b0-7b17-3a01-9635-57877513c11a.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.189.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:94:46:86:de:ee:7b:6d:73:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=4252ab99-0cee-4ce7-9a6e-882d87b5b4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:31:60:37:06:7b:08:ce:ce:3e:f5:a6:7b:ab: 18:26:a9:a4:6f:24:be:4d:5d:f3:c6:7c:a4:5b:86: 55:bb:69:e4:d9:7d:45:66:1e:5d:2c:3f:26:d8:22: 69:94:c3:f4:f9:b3:64:f2:df:7b:a7:36:66:c1:de: 63:fc:7a:4e:ff:92:1c:54:06:c7:eb:09:d9:f8:80: 38:01:98:3f:0f:db:30:2e:8e:3c:89:f0:21:b8:46: a4:38:12:6d:f6:fd:51:e2:67:d7:d4:a5:31:21:13: f2:94:81:05:4f:0e:ce:fc:cb:fb:59:a7:7a:1e:62: 8f:0f:bb:93:8d:87:d5:8e:c1:74:bc:17:37:31:90: 17:7c:82:50:bc:65:8c:f3:ed:d7:d1:1a:e3:18:a9: e9:15:ae:5c:79:85:f9:7a:32:cf:77:9d:1d:ea:a0: d0:b8:52:13:cd:8b:35:42:47:58:56:8d:d3:b4:56: a9:7c:d3:c0:7c:14:84:c1:c4:1b:9d:61:11:d0:66: 8a:d9:c6:08:26:d7:f9:a8:b7:ef:8b:66:b8:f6:bf: c5:cd:36:dc:da:b0:f8:5c:ce:33:e4:08:6c:ea:7e: 96:5e:3e:78:38:ec:67:c3:c5:1b:c0:c8:3d:51:34: 77:19:48:59:15:42:4a:ec:2d:da:a6:49:92:95:af: e1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:75:F2:86:63:2D:F4:6A:37:F7:5F:04:B6:DA:40:64:9B:D1:A9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0afdc7b0-7b17-3a01-9635-57877513c11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1f:ae:0e:64:3b:11:70:27:4d:b7:5a:ee:04:7d:d6:f8:7e: b2:18:fd:6e:1d:42:7c:aa:a1:a2:f5:bc:3d:9d:99:be:8c:ff: cb:3f:c8:e4:1a:91:e4:f4:25:50:dd:b9:28:55:5f:f4:3e:10: a2:c4:35:20:c2:37:53:4f:71:37:bb:c6:b8:8a:53:b3:5b:0f: e3:1d:1d:50:6e:96:08:81:e7:71:91:bc:f9:55:31:c4:69:6d: b1:d2:32:be:ba:34:e8:4c:e1:30:76:9f:c9:fd:9c:e0:95:04: 3b:bc:9d:dc:88:b7:df:e9:e8:ec:3e:7f:10:45:6c:b2:3c:c7: 59:f7:87:79:c5:33:17:a1:cf:6f:64:1c:82:c5:bb:e4:cb:8c: 31:a0:d6:e1:e3:20:5b:fe:c0:47:55:bd:c4:f7:45:b3:fb:a9: 53:0a:7d:1d:93:64:b1:d2:2c:c3:84:4d:80:70:a6:d4:c7:3c: 24:9c:96:0d:f8:92:b1:90:52:d9:d1:93:14:e1:55:6a:21:c0: 94:71:c0:a6:df:9e:74:4b:03:64:86:bd:f4:7c:7e:9e:b1:e9: e4:86:90:85:0d:30:4c:9c:d2:77:5d:3e:39:78:05:67:c3:6c: 44:d6:1f:c5:6b:7e:19:2c:c6:f6:e0:a8:f0:b6:b7:0e:d3:da: eb:9d:0a:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUZRGht7ue21zlaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk NDI1MmFiOTktMGNlZS00Y2U3LTlhNmUtODgyZDg3YjViNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTFgNwZ7CM7OPvWme6sYJqmkbyS+TV3zxnyk W4ZVu2nk2X1FZh5dLD8m2CJplMP0+bNk8t97pzZmwd5j/HpO/5IcVAbH6wnZ+IA4 AZg/D9swLo48ifAhuEakOBJt9v1R4mfX1KUxIRPylIEFTw7O/Mv7Wad6HmKPD7uT jYfVjsF0vBc3MZAXfIJQvGWM8+3X0RrjGKnpFa5ceYX5ejLPd50d6qDQuFITzYs1 QkdYVo3TtFapfNPAfBSEwcQbnWER0GaK2cYIJtf5qLfvi2a49r/FzTbc2rD4XM4z 5Ahs6n6WXj54OOxnw8UbwMg9UTR3GUhZFUJK7C3apkmSla/h3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB18oZjLfRqN/dfBLbaQGSb0amQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGFmZGM3YjAtN2IxNy0z YTAxLTk2MzUtNTc4Nzc1MTNjMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0frg5kOxFwJ023Wu4Efdb4frIY/W4dQnyqoaL1vD2dmb6M/8s/yOQa keT0JVDduShVX/Q+EKLENSDCN1NPcTe7xriKU7NbD+MdHVBulgiB53GRvPlVMcRp bbHSMr66NOhM4TB2n8n9nOCVBDu8ndyIt9/p6Ow+fxBFbLI8x1n3h3nFMxehz29k HILFu+TLjDGg1uHjIFv+wEdVvcT3RbP7qVMKfR2TZLHSLMOETYBwptTHPCSclg34 krGQUtnRkxThVWohwJRxwKbfnnRLA2SGvfR8fp6x6eSGkIUNMEyc0nddPjl4BWfD bETWH8VrfhksxvbgqPC2tw7T2uudCq8= -----END CERTIFICATE-----Generated at Thu Aug 27 12:33:04 2026 by rpki-client