$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa File: 158142d2-a6b7-34ca-be4a-89fc8257488f.roa (raw, json) Hash identifier: a5upPudZkD/y0V3X+PutMPDo89qtb6t1zuZxb4xO1us= Subject key identifier: E7:AE:C3:4F:05:36:B1:25:F9:7E:D2:49:59:86:E7:64:E7:08:16:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78F279945B0A0C7B9F16B18 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 66.32.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:27:99:45:b0:a0:c7:b9:f1:6b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d7d851b4-6394-4271-a702-ff28ad28b5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:27:11:4f:4d:de:0d:db:cd:5e:b3:74:39:3f: 6b:a6:ca:d4:11:d8:6c:c7:58:e0:9e:ed:e5:8d:1e: 84:4b:2b:19:8c:1c:58:1a:74:3e:3c:79:28:3f:58: 52:70:01:06:a3:67:3b:92:b2:75:2c:5c:ae:ca:73: 3d:2b:a2:b7:c1:97:92:ca:7c:d6:cc:0f:b9:c2:14: d8:dc:40:b5:0a:98:1c:72:31:a4:60:9b:c4:06:5f: e8:9f:6e:36:82:54:db:6d:ce:71:24:df:e1:62:bd: 81:73:7b:9f:78:ba:a5:de:77:b2:0a:b3:ed:63:1f: e6:8f:cc:cc:bd:94:a2:37:28:b5:23:02:19:90:86: d9:7b:83:bd:00:d9:78:ef:29:c3:05:46:d4:5f:d4: f4:e3:9b:bb:40:3e:2a:8c:5b:30:06:e4:23:67:60: 84:f7:80:aa:9a:54:af:f7:fd:af:96:b3:f1:ed:90: ed:bf:c7:0d:8e:6c:82:94:c8:ff:5b:fc:a0:63:ba: af:bb:58:88:c2:76:a0:66:e1:8e:16:b0:68:91:a0: 88:c9:51:48:85:c6:f9:1e:2c:d0:e5:d0:22:70:4b: 46:e9:64:9c:b4:fb:15:fd:24:07:12:d4:bf:be:29: 58:e0:1d:dc:b3:dc:84:c9:67:69:46:d2:67:12:c6: 6b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AE:C3:4F:05:36:B1:25:F9:7E:D2:49:59:86:E7:64:E7:08:16:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:34:10:10:e1:77:2c:9d:0c:7d:de:1c:f7:8c:21:fe:c4:1b: ec:1e:9c:29:4f:fe:c9:1a:3c:8a:17:f0:e2:8f:67:e5:b1:62: ab:4a:c2:28:e6:7b:d2:77:4b:23:1d:09:07:f0:8c:35:ad:4d: 44:75:16:66:59:94:2c:9b:d5:99:68:d9:1f:7f:8e:47:92:d4: 0f:39:4c:2a:a1:70:94:e4:83:8d:02:f0:70:2f:c6:fa:c2:4a: 19:52:be:e1:b3:3a:73:89:ed:1a:d0:d1:e2:da:d5:9e:b7:80: 19:20:9e:39:a5:5b:c1:93:f3:b3:13:26:ba:58:b2:6e:bd:cf: c8:5d:43:9c:8b:b8:75:bd:8e:f4:26:e7:10:d9:7d:e8:bf:21: d2:a9:df:14:03:e7:7b:f4:a8:bc:8e:93:c6:b1:19:e4:5f:e4: 30:1a:1d:4a:d2:6f:af:b9:c5:c6:80:3e:91:09:8f:c8:be:5a: fa:20:a0:5b:9f:45:c9:0d:78:86:d7:75:61:df:3e:e5:0d:bc: 5b:b0:25:af:a4:0f:66:6a:47:bc:fc:3d:1a:52:02:65:ed:27: 02:69:ec:4d:87:52:54:d4:07:fb:8f:76:1d:cb:6d:ab:e3:83: 56:3c:28:53:e0:fa:28:c4:56:49:7f:2b:05:2e:42:c0:74:ac: 9a:c6:97:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njyeZRbCgx7nxaxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDdkODUxYjQtNjM5NC00MjcxLWE3MDItZmYyOGFkMjhiNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgycRT03eDdvNXrN0OT9rpsrUEdhsx1jgnu3l jR6ESysZjBxYGnQ+PHkoP1hScAEGo2c7krJ1LFyuynM9K6K3wZeSynzWzA+5whTY 3EC1CpgccjGkYJvEBl/on242glTbbc5xJN/hYr2Bc3ufeLql3neyCrPtYx/mj8zM vZSiNyi1IwIZkIbZe4O9ANl47ynDBUbUX9T045u7QD4qjFswBuQjZ2CE94CqmlSv 9/2vlrPx7ZDtv8cNjmyClMj/W/ygY7qvu1iIwnagZuGOFrBokaCIyVFIhcb5HizQ 5dAicEtG6WSctPsV/SQHEtS/vilY4B3cs9yEyWdpRtJnEsZrYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeuw08FNrEl+X7SSVmG52TnCBYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU4MTQyZDItYTZiNy0z NGNhLWJlNGEtODlmYzgyNTc0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg0EBDhdyydDH3eHPeMIf7EG+wenClP/skaPIoX8OKPZ+WxYqtKwijm e9J3SyMdCQfwjDWtTUR1FmZZlCyb1Zlo2R9/jkeS1A85TCqhcJTkg40C8HAvxvrC ShlSvuGzOnOJ7RrQ0eLa1Z63gBkgnjmlW8GT87MTJrpYsm69z8hdQ5yLuHW9jvQm 5xDZfei/IdKp3xQD53v0qLyOk8axGeRf5DAaHUrSb6+5xcaAPpEJj8i+WvogoFuf RckNeIbXdWHfPuUNvFuwJa+kD2ZqR7z8PRpSAmXtJwJp7E2HUlTUB/uPdh3Lbavj g1Y8KFPg+ijEVkl/KwUuQsB0rJrGl10= -----END CERTIFICATE-----Generated at Thu Aug 27 14:20:25 2026 by rpki-client