$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20455f62-3832-3132-8950-2d4d84f4cf4f.roa File: 20455f62-3832-3132-8950-2d4d84f4cf4f.roa (raw, json) Hash identifier: emeugxa/EIbOe66zOOblMsfeXwZohnqnqfcc4EDmZlk= Subject key identifier: AE:1C:BA:55:93:15:DD:54:C7:5F:55:CB:23:F0:51:FC:3E:76:B4:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78F2B67FE842432435D0F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20455f62-3832-3132-8950-2d4d84f4cf4f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 216.96.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:2b:67:fe:84:24:32:43:5d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8d2e3747-bbc1-480a-b686-4c2cbcce05ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d1:96:66:af:e9:ce:3c:53:10:c1:08:bf:1b: be:fd:16:1b:12:ea:b0:07:e7:64:4f:e2:1e:8f:58: 03:24:ca:c4:99:dc:65:8d:ea:d2:d7:77:e3:69:3c: 79:c0:6f:a5:26:3f:9c:23:b4:88:26:81:15:f8:20: ec:7b:c0:d8:e7:0f:91:4c:c5:88:58:23:57:76:6e: 20:8f:5b:f3:49:0a:70:dd:d6:01:de:a9:52:64:82: 42:cb:06:87:17:58:e7:bb:b2:d2:00:d6:91:62:d9: 93:8b:e6:72:0f:aa:e1:1e:4f:df:c3:fd:6f:15:f4: 5d:26:96:74:d8:a9:d3:45:3e:52:54:63:b9:f5:b9: 41:65:c4:b3:1e:4e:83:b0:b5:bd:d2:cb:1e:f1:e2: f6:bb:b8:04:79:0f:3b:0a:a9:74:b1:39:79:4d:de: bf:21:55:32:af:dd:fb:34:59:6c:d9:87:96:b8:6b: e7:5c:3e:09:a5:27:d1:be:cf:7d:9c:96:38:51:bf: 05:fa:e8:69:a2:56:e5:bf:1f:d0:ff:9d:12:c6:20: 65:07:58:14:ac:ba:46:1e:42:ee:2c:68:96:de:50: 56:e4:f5:1d:97:44:b9:d8:f6:7f:a3:d6:b9:fd:62: df:26:58:7d:18:f8:c2:4e:c8:40:49:09:1c:29:36: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1C:BA:55:93:15:DD:54:C7:5F:55:CB:23:F0:51:FC:3E:76:B4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20455f62-3832-3132-8950-2d4d84f4cf4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b1:a4:f0:e2:14:9c:42:b0:80:14:be:26:d7:01:1f:2c:d3: 22:a0:59:c5:14:e4:f2:b6:7f:b2:77:60:c5:24:04:03:fa:5b: e4:d5:e2:f1:d9:13:1c:ce:09:c5:90:92:7c:eb:0a:e1:6b:1e: 22:2e:42:81:7a:f9:1d:94:d8:d9:24:e9:55:77:cc:64:8b:66: 47:86:bd:37:13:00:71:32:47:c4:b6:a0:ed:63:18:ac:7a:68: 9f:05:ef:d7:f5:8c:ef:fc:f3:1d:e9:e6:f7:1a:61:06:d9:20: c1:4e:f4:98:cf:c7:dc:c8:ab:5f:ce:25:7f:4a:91:1d:e2:13: fc:75:15:98:0f:a4:d6:8d:65:16:c6:34:82:4e:d4:8d:f4:7c: 15:8c:17:50:d9:84:b0:dc:ac:50:ad:12:f5:3c:68:0d:df:9a: 12:5f:64:e8:d1:f4:69:1c:d8:8f:f3:d1:bf:61:14:72:ef:1c: 2b:06:e6:88:fd:de:70:4d:ee:f6:9c:70:22:cc:58:04:5b:bd: bf:c9:4a:a1:4e:5a:d3:ae:45:45:c6:02:3a:78:51:11:73:b1: 8e:9f:34:3e:e0:89:4b:33:c3:dc:3a:a0:73:c7:62:d9:82:8a: a2:84:81:ba:08:ed:3d:d2:19:21:16:da:c0:76:d7:3b:47:50: a2:69:07:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njytn/oQkMkNdDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGQyZTM3NDctYmJjMS00ODBhLWI2ODYtNGMyY2JjY2UwNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitGWZq/pzjxTEMEIvxu+/RYbEuqwB+dkT+Ie j1gDJMrEmdxljerS13fjaTx5wG+lJj+cI7SIJoEV+CDse8DY5w+RTMWIWCNXdm4g j1vzSQpw3dYB3qlSZIJCywaHF1jnu7LSANaRYtmTi+ZyD6rhHk/fw/1vFfRdJpZ0 2KnTRT5SVGO59blBZcSzHk6DsLW90sse8eL2u7gEeQ87Cql0sTl5Td6/IVUyr937 NFls2YeWuGvnXD4JpSfRvs99nJY4Ub8F+uhpolblvx/Q/50SxiBlB1gUrLpGHkLu LGiW3lBW5PUdl0S52PZ/o9a5/WLfJlh9GPjCTshASQkcKTYHrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4culWTFd1Ux19VyyPwUfw+drTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjA0NTVmNjItMzgzMi0z MTMyLTg5NTAtMmQ0ZDg0ZjRjZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWxpPDiFJxCsIAUvibXAR8s0yKgWcUU5PK2f7J3YMUkBAP6W+TV4vHZ ExzOCcWQknzrCuFrHiIuQoF6+R2U2Nkk6VV3zGSLZkeGvTcTAHEyR8S2oO1jGKx6 aJ8F79f1jO/88x3p5vcaYQbZIMFO9JjPx9zIq1/OJX9KkR3iE/x1FZgPpNaNZRbG NIJO1I30fBWMF1DZhLDcrFCtEvU8aA3fmhJfZOjR9Gkc2I/z0b9hFHLvHCsG5oj9 3nBN7vaccCLMWARbvb/JSqFOWtOuRUXGAjp4URFzsY6fND7giUszw9w6oHPHYtmC iqKEgboI7T3SGSEW2sB21ztHUKJpBws= -----END CERTIFICATE-----Generated at Thu Aug 27 16:09:55 2026 by rpki-client