$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab2ff41-368d-30f9-a16d-be1479704501.roa File: 1ab2ff41-368d-30f9-a16d-be1479704501.roa (raw, json) Hash identifier: 1Nn8odNx6Luz+ifVC9ZHCgieb6md5qhR+x7oGrXy5Wk= Subject key identifier: D0:6E:21:B4:C2:8F:01:65:8B:21:FA:23:D0:81:11:09:1B:04:D3:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C53ECB456D8997CC7A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab2ff41-368d-30f9-a16d-be1479704501.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 6983 IP address blocks: 209.165.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c5:3e:cb:45:6d:89:97:cc:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=5bc27eea-8aa3-4fbf-84cd-4d39599d99fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:39:4c:11:17:7a:31:5a:c0:63:91:16:8b: 4f:86:93:53:1b:9b:0d:80:3e:ff:f3:ac:cf:bf:f6: 0b:d4:72:6d:0a:d3:7a:41:a7:05:91:ae:12:5d:a9: 64:b7:57:48:97:1e:08:0e:52:b4:22:f5:27:7a:04: 22:af:12:c6:a4:2f:9c:be:b6:43:82:2a:55:2b:c8: ff:07:ca:e2:79:15:d9:29:74:3e:9a:1b:9f:c6:07: f4:41:77:4b:3d:e6:c9:28:65:66:05:8e:4d:27:c0: 4f:25:5b:57:31:7b:65:18:ee:ef:dd:72:b8:4e:84: 6d:3f:92:21:c1:be:05:f6:3d:9f:d6:69:36:8c:c0: 50:b3:ec:94:ab:2e:44:69:5d:2f:51:59:25:18:5f: 7e:41:6f:d2:10:a8:5b:78:37:67:12:e5:25:2c:6d: 50:b6:b5:9f:b2:7b:7b:a9:81:ba:eb:c4:b6:0d:dc: 79:1e:42:99:c8:be:ff:e9:3e:59:31:6e:9c:f4:3f: 4d:73:8d:c9:3b:55:1b:45:b3:ba:95:2a:9a:25:6d: 42:6a:fd:53:23:60:9e:1c:72:f4:25:75:ff:d4:a2: da:01:78:e3:68:99:b3:fa:8e:0a:02:47:e7:8a:f8: 30:68:49:d8:79:49:94:31:5b:79:af:52:ab:0c:1a: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6E:21:B4:C2:8F:01:65:8B:21:FA:23:D0:81:11:09:1B:04:D3:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab2ff41-368d-30f9-a16d-be1479704501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f5:72:28:16:f2:8d:8c:b6:8a:22:2a:88:65:31:a4:29:45: 41:5e:97:c4:1c:f9:6d:9f:46:f7:29:bf:c1:5a:d8:c9:8c:04: bb:d7:7a:1b:df:1f:a6:11:59:db:f2:da:ee:24:51:75:42:20: 0d:c1:67:e8:84:5e:5e:8a:77:b7:59:a2:ea:66:7e:99:76:34: 00:c5:3d:c6:e4:92:d6:8f:03:2e:89:61:48:c8:a9:7b:b6:e1: d7:13:cc:31:4e:e9:65:42:11:e0:b2:b6:a3:f9:09:51:dc:95: 51:8c:0a:bb:c4:ce:a3:30:82:a0:a0:87:e5:c4:70:e0:4d:0c: db:ba:a2:09:c1:b1:c9:60:0a:3d:08:78:f7:12:6c:dc:d7:8f: bc:56:66:cc:1f:9f:8f:82:7e:b4:20:78:b5:2b:db:bd:1d:73: f6:00:1a:f2:23:73:65:4f:ca:38:f0:84:d2:cb:85:58:bf:3f: f1:60:58:3a:2a:59:be:90:72:0b:68:3d:5c:f1:c8:a0:6b:09: 33:50:ca:81:2d:c0:eb:2b:3a:4d:5d:6f:ca:4f:ff:d6:11:8a: 43:ac:1c:f6:71:60:f3:79:b4:7d:9c:2a:91:84:31:8c:a2:38: 96:e6:bf:41:19:10:dc:e0:2c:c6:fb:12:23:df:d0:cb:d0:a9: d2:24:0e:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscU+y0VtiZfMeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NWJjMjdlZWEtOGFhMy00ZmJmLTg0Y2QtNGQzOTU5OWQ5OWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtQ5TBEXejFawGORFotPhpNTG5sNgD7/86zP v/YL1HJtCtN6QacFka4SXalkt1dIlx4IDlK0IvUnegQirxLGpC+cvrZDgipVK8j/ B8rieRXZKXQ+mhufxgf0QXdLPebJKGVmBY5NJ8BPJVtXMXtlGO7v3XK4ToRtP5Ih wb4F9j2f1mk2jMBQs+yUqy5EaV0vUVklGF9+QW/SEKhbeDdnEuUlLG1QtrWfsnt7 qYG668S2Ddx5HkKZyL7/6T5ZMW6c9D9Nc43JO1UbRbO6lSqaJW1Cav1TI2CeHHL0 JXX/1KLaAXjjaJmz+o4KAkfnivgwaEnYeUmUMVt5r1KrDBqa5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBuIbTCjwFliyH6I9CBEQkbBNNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFiMmZmNDEtMzY4ZC0z MGY5LWExNmQtYmUxNDc5NzA0NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD1cigW8o2MtooiKohlMaQpRUFel8Qc+W2fRvcpv8Fa2MmMBLvXehvf H6YRWdvy2u4kUXVCIA3BZ+iEXl6Kd7dZoupmfpl2NADFPcbkktaPAy6JYUjIqXu2 4dcTzDFO6WVCEeCytqP5CVHclVGMCrvEzqMwgqCgh+XEcOBNDNu6ognBsclgCj0I ePcSbNzXj7xWZswfn4+CfrQgeLUr270dc/YAGvIjc2VPyjjwhNLLhVi/P/FgWDoq Wb6QcgtoPVzxyKBrCTNQyoEtwOsrOk1db8pP/9YRikOsHPZxYPN5tH2cKpGEMYyi OJbmv0EZENzgLMb7EiPf0MvQqdIkDno= -----END CERTIFICATE-----Generated at Thu Aug 27 16:09:59 2026 by rpki-client