$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa File: 0cf861e2-8e53-3780-9bf9-e068445ce518.roa (raw, json) Hash identifier: Ayzpx1NfZxVP9dYG5amivfeopxHTkXmRGttyJkWqaSY= Subject key identifier: 56:F8:1F:49:6F:7C:C3:04:3B:EE:9E:3E:BF:E9:49:A0:18:3D:10:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EF2E763D08EC31E86D192DD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 216.96.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:63:d0:8e:c3:1e:86:d1:92:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=bb12dc63-5561-4e94-bcaf-392f80becd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:e5:e8:81:b6:be:b5:f2:11:d2:33:49:34: 8b:b6:65:71:13:36:ad:60:2b:7e:fe:e5:8d:e4:fe: d5:b5:68:dd:e6:34:c2:5a:52:13:0f:fd:87:ac:e9: 0d:fb:40:ef:47:7d:8a:6c:8c:25:06:de:03:29:5a: 97:2c:4d:ac:3b:99:25:1e:7f:dc:78:3b:bb:e9:9e: 9c:27:c1:a8:e9:33:c2:ec:a3:e3:16:c0:7d:d2:a8: 80:6e:11:cb:28:e1:fe:a5:48:a1:f4:16:a7:47:50: 69:91:17:19:5e:62:96:6f:7a:8c:e9:1d:d7:09:f9: bd:23:ce:2f:c7:8d:76:da:3a:dc:20:9c:f0:7c:4e: 1a:32:88:f0:ba:bf:00:e5:95:47:33:0a:7a:b7:94: 04:b9:d8:09:25:ee:88:b9:8e:53:ab:1e:b0:45:1c: a2:27:b4:58:97:d5:8c:34:55:3c:22:a0:42:b7:7c: 5d:d5:6d:5e:ff:63:a5:12:a9:07:ce:93:60:1a:4a: da:aa:3f:05:42:3e:d7:cb:b7:e6:a3:c6:3a:51:33: 14:a7:d5:ac:24:40:1d:97:7d:08:be:d1:4c:8f:ac: 12:b4:19:8f:d3:4e:55:ec:12:24:f8:79:b4:7a:df: 62:da:55:b9:e8:8e:7a:1f:fa:98:9a:ac:ab:4c:5b: d4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F8:1F:49:6F:7C:C3:04:3B:EE:9E:3E:BF:E9:49:A0:18:3D:10:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0cf861e2-8e53-3780-9bf9-e068445ce518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:89:c3:1d:50:39:b7:5c:02:01:3d:96:a4:31:ab:d8:b7:d1: 6c:4a:cc:3e:e6:c5:f1:89:ce:44:91:34:54:0d:dc:c1:05:da: 57:11:ac:b5:eb:31:1b:0f:10:1e:86:0b:1f:3f:90:f4:55:f6: 12:ce:58:14:e3:9a:34:9a:ff:1f:82:ed:1a:39:68:bd:91:ee: 5c:7a:3d:6d:0a:99:25:c3:2f:1d:6f:b7:ec:03:c3:2e:56:85: f8:97:d2:1a:5b:95:94:62:97:04:9c:5f:3a:82:e5:25:5e:0a: c4:49:fb:96:37:66:60:ea:f1:b8:d3:db:35:ca:d3:aa:43:35: 8a:37:56:48:26:ac:2a:07:f6:53:bd:07:ab:1b:c4:1f:60:f9: f0:3a:59:ab:ed:80:f4:38:ff:ea:e7:cd:50:f7:ec:ff:05:56: 4c:a0:cd:8c:bc:85:97:55:3c:4a:e9:50:8d:6a:4b:d2:78:7f: 5f:6f:01:a2:7f:e2:c0:29:59:41:eb:e0:72:f2:02:68:27:25: 4d:b5:c6:41:1b:7c:c3:23:e6:6b:f9:66:b8:98:13:2e:3b:ef: 7c:c8:75:dc:3f:5b:69:b8:7b:ac:54:d4:06:f9:54:2d:79:95: 2b:54:f7:1c:5f:10:0d:79:13:ea:77:58:05:29:25:3c:ca:b2: 76:fc:a3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52PQjsMehtGS3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YmIxMmRjNjMtNTU2MS00ZTk0LWJjYWYtMzkyZjgwYmVjZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCXl6IG2vrXyEdIzSTSLtmVxEzatYCt+/uWN 5P7VtWjd5jTCWlITD/2HrOkN+0DvR32KbIwlBt4DKVqXLE2sO5klHn/ceDu76Z6c J8Go6TPC7KPjFsB90qiAbhHLKOH+pUih9BanR1BpkRcZXmKWb3qM6R3XCfm9I84v x4122jrcIJzwfE4aMojwur8A5ZVHMwp6t5QEudgJJe6IuY5Tqx6wRRyiJ7RYl9WM NFU8IqBCt3xd1W1e/2OlEqkHzpNgGkraqj8FQj7Xy7fmo8Y6UTMUp9WsJEAdl30I vtFMj6wStBmP005V7BIk+Hm0et9i2lW56I56H/qYmqyrTFvU/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb4H0lvfMMEO+6ePr/pSaAYPRCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGNmODYxZTItOGU1My0z NzgwLTliZjktZTA2ODQ0NWNlNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqJwx1QObdcAgE9lqQxq9i30WxKzD7mxfGJzkSRNFQN3MEF2lcRrLXr MRsPEB6GCx8/kPRV9hLOWBTjmjSa/x+C7Ro5aL2R7lx6PW0KmSXDLx1vt+wDwy5W hfiX0hpblZRilwScXzqC5SVeCsRJ+5Y3ZmDq8bjT2zXK06pDNYo3VkgmrCoH9lO9 B6sbxB9g+fA6WavtgPQ4/+rnzVD37P8FVkygzYy8hZdVPErpUI1qS9J4f19vAaJ/ 4sApWUHr4HLyAmgnJU21xkEbfMMj5mv5ZriYEy4773zIddw/W2m4e6xU1Ab5VC15 lStU9xxfEA15E+p3WAUpJTzKsnb8o+c= -----END CERTIFICATE-----Generated at Thu Aug 27 12:30:01 2026 by rpki-client