$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e310e4-dd84-33c1-8eef-18aa2ead7fe9.roa File: 17e310e4-dd84-33c1-8eef-18aa2ead7fe9.roa (raw, json) Hash identifier: rDlfZgaLt5+03hQFezjf2wUvkz+upOaz7euvEaxQZnQ= Subject key identifier: 53:A8:5A:B8:F9:3F:56:02:DA:A1:AA:E3:76:19:10:FE:76:64:BC:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CC0A644F29E551656580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e310e4-dd84-33c1-8eef-18aa2ead7fe9.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 209.165.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cc:0a:64:4f:29:e5:51:65:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=f08f662e-b8a7-4943-a411-06144af50bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d0:db:f1:60:d0:d1:dc:8b:fb:19:9c:d0:02: 0e:0f:9b:fa:08:59:63:77:d3:a8:db:16:fd:2f:d2: a2:b5:81:df:3f:17:71:ab:12:c5:db:b1:e7:43:af: 64:3c:6a:a1:bf:27:76:3a:c5:5c:33:06:5a:da:95: 18:02:56:82:16:62:7a:9a:7c:7a:f3:6b:3d:c6:64: 8f:80:62:ec:ab:79:1e:de:97:88:55:54:4e:4d:c6: ee:8f:b4:96:9f:3c:63:bf:63:48:43:87:78:74:6b: 91:24:45:12:26:57:27:8c:d5:44:3e:a5:27:02:c5: b4:d4:ce:7c:af:a9:c4:d6:f1:d0:06:f7:04:92:21: 22:36:40:ff:c0:f8:89:de:aa:66:93:d0:de:49:2b: 0f:96:bb:8b:d5:ca:68:0c:6e:b3:18:93:8a:29:eb: f1:61:b3:b7:e4:9d:6e:59:e0:ca:e5:88:56:5e:a7: 2b:d4:ce:d0:6e:eb:d4:75:2b:21:0b:24:59:f2:66: d8:db:a2:02:7e:92:53:f4:61:4f:90:d6:eb:f8:2f: 50:a2:d1:9c:48:54:0e:1e:95:3e:26:63:a2:12:03: b6:a8:a8:26:dd:97:1d:8a:aa:db:4d:d6:e8:fc:b6: d5:61:f7:cf:26:b1:f8:86:63:59:0c:18:9b:71:19: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A8:5A:B8:F9:3F:56:02:DA:A1:AA:E3:76:19:10:FE:76:64:BC:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e310e4-dd84-33c1-8eef-18aa2ead7fe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:99:b8:de:57:66:9c:aa:58:5b:8b:51:7d:96:35:b6:d5:84: 10:cb:c0:8f:3e:8e:78:94:57:87:48:2f:36:69:74:c7:42:7f: ed:f8:86:d1:c5:a5:cf:e8:11:38:15:c3:11:fd:87:f5:91:8f: 31:5f:3f:51:26:21:6a:c4:8a:76:44:84:12:5e:5a:eb:83:fd: 78:ef:e6:ca:0d:06:5a:f1:14:2e:46:3c:32:7a:48:ac:66:63: 78:a5:da:ff:ed:f6:93:e5:46:e2:c7:ee:4a:98:0e:8a:32:df: f7:3f:1b:ac:4a:f0:28:8b:76:af:fc:32:80:6e:53:48:36:88: f5:94:df:d9:20:16:2a:e5:ed:77:32:0f:44:49:ad:b2:af:b2: 74:ca:67:e1:8b:ec:63:4b:2a:69:4a:a7:9a:fd:bc:06:c3:18: 7a:8a:bd:11:e7:d5:b6:2b:ec:f0:a3:a5:0e:40:e0:f9:22:ad: 1e:21:e0:f9:b0:2b:e0:48:14:7a:bc:73:50:40:5d:45:b9:c4: 4e:53:6a:98:2e:e6:fd:08:0c:23:3a:95:69:1a:21:ca:79:1b: c7:31:dc:e6:9c:cf:c4:76:f9:66:d4:7c:02:20:1a:1b:f1:d4: c6:67:4b:b0:21:61:2c:41:a4:49:6e:96:97:e8:d2:7c:ab:4f: 88:6e:a0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscwKZE8p5VFlZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZjA4ZjY2MmUtYjhhNy00OTQzLWE0MTEtMDYxNDRhZjUwYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9Db8WDQ0dyL+xmc0AIOD5v6CFljd9Oo2xb9 L9KitYHfPxdxqxLF27HnQ69kPGqhvyd2OsVcMwZa2pUYAlaCFmJ6mnx682s9xmSP gGLsq3ke3peIVVROTcbuj7SWnzxjv2NIQ4d4dGuRJEUSJlcnjNVEPqUnAsW01M58 r6nE1vHQBvcEkiEiNkD/wPiJ3qpmk9DeSSsPlruL1cpoDG6zGJOKKevxYbO35J1u WeDK5YhWXqcr1M7QbuvUdSshCyRZ8mbY26ICfpJT9GFPkNbr+C9QotGcSFQOHpU+ JmOiEgO2qKgm3ZcdiqrbTdbo/LbVYffPJrH4hmNZDBibcRmi0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOoWrj5P1YC2qGq43YZEP52ZLzOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdlMzEwZTQtZGQ4NC0z M2MxLThlZWYtMThhYTJlYWQ3ZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiZuN5XZpyqWFuLUX2WNbbVhBDLwI8+jniUV4dILzZpdMdCf+34htHF pc/oETgVwxH9h/WRjzFfP1EmIWrEinZEhBJeWuuD/Xjv5soNBlrxFC5GPDJ6SKxm Y3il2v/t9pPlRuLH7kqYDooy3/c/G6xK8CiLdq/8MoBuU0g2iPWU39kgFirl7Xcy D0RJrbKvsnTKZ+GL7GNLKmlKp5r9vAbDGHqKvRHn1bYr7PCjpQ5A4PkirR4h4Pmw K+BIFHq8c1BAXUW5xE5Tapgu5v0IDCM6lWkaIcp5G8cx3Oacz8R2+WbUfAIgGhvx 1MZnS7AhYSxBpElulpfo0nyrT4huoP0= -----END CERTIFICATE-----Generated at Thu Aug 27 15:16:40 2026 by rpki-client