$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa File: 0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa (raw, json) Hash identifier: 27kCEsTXZZw1FnW0SnTKbHSZOuxkFg6Mr/ytfL9yd/A= Subject key identifier: 68:17:E5:A5:3A:DC:9A:64:63:0D:5C:F7:2C:97:FE:34:C0:DA:8B:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EBB11CEFD215F5AD675F3CC40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 151.213.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:ce:fd:21:5f:5a:d6:75:f3:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=233a6ba5-b8f4-4b37-b55e-9ab9c850659c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c9:b1:8b:62:7c:1e:81:52:50:b2:d1:51:b3: 86:05:4b:a5:db:90:0f:25:52:79:9b:b6:1b:24:a7: 80:46:1b:3a:50:c1:df:0b:dc:90:17:3b:1e:53:45: 0f:6d:8d:b6:73:6e:e1:72:28:06:63:b4:db:27:57: 60:78:90:69:f9:b0:62:35:6a:20:e7:a8:b9:dc:22: 4a:75:77:96:4b:8a:f9:44:df:b7:cf:ae:c1:88:05: e1:1f:c0:7a:8c:3a:f4:21:2c:2d:20:90:68:f2:16: f3:06:db:d3:4f:7e:5a:b5:5a:fc:6f:09:d7:ae:b7: fa:20:28:fc:80:f4:5b:91:59:94:a4:17:24:da:5a: 12:75:17:53:16:99:c9:49:2a:c1:75:91:8e:a6:21: 6f:09:08:be:64:bd:6a:24:5f:00:eb:ad:89:57:1b: b0:a6:c3:29:6e:78:44:a7:64:24:c4:40:b3:54:d8: a6:4e:e9:bd:2b:08:e9:04:05:03:31:1b:f3:f9:28: 2d:88:8b:a4:1a:69:8a:2a:4c:eb:8c:a9:5a:2d:87: 09:51:1a:ec:25:1a:f6:80:00:c5:98:59:56:c2:36: 5e:8b:c8:18:cf:71:e2:c0:49:92:41:e5:87:f3:a0: 68:1c:49:5d:fd:7d:68:4d:6a:75:0a:a7:a1:e2:c6: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:17:E5:A5:3A:DC:9A:64:63:0D:5C:F7:2C:97:FE:34:C0:DA:8B:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ca4ddfa-42d5-31f7-865d-3d0860393d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:98:38:09:7c:77:6f:6a:aa:69:b9:50:cd:56:dc:15:36:42: 3f:d8:90:b3:44:f2:f6:1f:a3:aa:8f:98:34:4b:3a:e4:c5:2e: b7:31:d0:b2:96:42:3c:23:e5:62:04:08:62:6f:a9:a7:5c:28: a9:76:13:5d:72:a3:02:b6:c7:ab:25:62:c3:73:01:09:0b:b8: a7:82:1b:4a:1d:ac:b3:62:ed:1d:86:01:53:3b:04:af:b3:88: 64:9f:4b:f2:44:f8:81:7d:17:90:15:6f:8c:e2:75:81:57:dd: 79:b6:dd:11:67:1b:cd:1c:51:14:53:2a:4e:ee:ea:15:65:4a: 72:32:ab:e5:f9:fa:e1:99:bf:ce:10:a5:07:2f:aa:2d:c2:63: 57:e5:f1:31:88:ed:c5:87:a6:60:2b:60:66:c8:e2:03:86:5c: 01:45:6f:7c:13:85:8f:e1:ae:ff:55:7d:1f:8e:6a:54:bb:ca: 9c:82:89:76:94:f1:a1:da:52:54:3f:52:00:e5:72:0d:98:85: 74:ed:5d:23:dd:e3:e6:ea:94:01:99:e5:dc:c6:46:fc:4d:c4: eb:b4:c0:6f:60:b6:66:40:61:92:1c:7a:89:06:c1:1f:11:6e: 17:d7:06:9c:1d:76:17:3c:5c:2d:6f:ba:c6:85:82:52:6d:9e: 8c:c7:ea:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Ec79IV9a1nXzzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MjMzYTZiYTUtYjhmNC00YjM3LWI1NWUtOWFiOWM4NTA2NTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMmxi2J8HoFSULLRUbOGBUul25APJVJ5m7Yb JKeARhs6UMHfC9yQFzseU0UPbY22c27hcigGY7TbJ1dgeJBp+bBiNWog56i53CJK dXeWS4r5RN+3z67BiAXhH8B6jDr0ISwtIJBo8hbzBtvTT35atVr8bwnXrrf6ICj8 gPRbkVmUpBck2loSdRdTFpnJSSrBdZGOpiFvCQi+ZL1qJF8A662JVxuwpsMpbnhE p2QkxECzVNimTum9KwjpBAUDMRvz+SgtiIukGmmKKkzrjKlaLYcJURrsJRr2gADF mFlWwjZei8gYz3HiwEmSQeWH86BoHEld/X1oTWp1Cqeh4sZvdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgX5aU63JpkYw1c9yyX/jTA2ou/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGNhNGRkZmEtNDJkNS0z MWY3LTg2NWQtM2QwODYwMzkzZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl9VwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuYOAl8d29qqmm5UM1W3BU2Qj/YkLNE8vYfo6qPmDRLOuTFLrcx0LKW Qjwj5WIECGJvqadcKKl2E11yowK2x6slYsNzAQkLuKeCG0odrLNi7R2GAVM7BK+z iGSfS/JE+IF9F5AVb4zidYFX3Xm23RFnG80cURRTKk7u6hVlSnIyq+X5+uGZv84Q pQcvqi3CY1fl8TGI7cWHpmArYGbI4gOGXAFFb3wThY/hrv9VfR+OalS7ypyCiXaU 8aHaUlQ/UgDlcg2YhXTtXSPd4+bqlAGZ5dzGRvxNxOu0wG9gtmZAYZIceokGwR8R bhfXBpwddhc8XC1vusaFglJtnozH6pw= -----END CERTIFICATE-----Generated at Thu Aug 27 09:47:37 2026 by rpki-client