$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa File: 22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa (raw, json) Hash identifier: mPAa9ybZoUfGxs8mkiU3Ks9cB4fFXx6SuNm4MyZVXnE= Subject key identifier: 99:F9:EA:50:6D:F3:E1:42:F9:66:5F:42:7D:93:3D:75:8B:55:68:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C7CFCCBC3CB85F628600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 70.43.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c7:cf:cc:bc:3c:b8:5f:62:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=c2a7db75-20c0-4236-9690-f9496d1ef4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:bf:8d:2c:c9:f3:cd:e8:92:c5:42:d5:ce: ff:f4:06:6d:a4:39:10:4a:55:19:17:38:f1:2c:5d: c0:59:35:3f:7b:c5:c7:d2:c0:8d:65:b5:00:6a:aa: 5a:07:98:8d:10:57:3e:f4:34:fc:dc:06:c2:01:74: df:db:0b:44:f8:3a:5c:ba:c4:a8:6e:3e:5d:07:c8: 96:8b:31:9d:c2:d1:9a:bc:c2:dd:26:68:41:56:f7: dd:21:8f:33:30:30:2e:2d:41:be:4c:35:46:51:65: bf:97:3a:fe:34:ce:b7:ae:7a:15:18:ab:ad:9d:10: ef:46:5a:f8:83:cd:a4:76:1a:a1:de:27:cc:d7:4c: 0d:fe:d6:3d:67:d4:9f:9e:d4:07:1e:82:68:c3:92: 9c:9a:02:8b:db:d2:1e:7c:97:d5:bc:6d:43:4e:98: 4a:bc:c5:57:64:49:44:28:83:46:59:b0:02:3b:90: 50:0e:30:0a:84:50:91:32:15:57:da:fc:be:73:c3: d7:53:58:c4:f5:04:0a:e5:85:da:4a:d7:1d:39:64: 95:7f:5e:fe:a6:10:60:d8:c2:7e:2a:1e:7c:84:82: b6:af:42:b8:61:dc:94:7e:80:53:3d:60:e9:53:0f: 23:9f:e4:a0:63:22:d4:ab:0e:b0:a2:00:b5:03:61: 59:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F9:EA:50:6D:F3:E1:42:F9:66:5F:42:7D:93:3D:75:8B:55:68:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 70.43.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fe:97:53:24:9a:43:c1:b3:0d:de:b7:00:9f:eb:be:96:cc: 18:f5:ec:01:35:5e:fe:81:b7:66:e2:06:a2:30:47:ed:21:ef: f6:7a:83:77:eb:a9:a5:5a:f1:41:dc:f3:f0:4d:09:3c:4f:a8: 30:aa:1a:dd:6b:f8:94:9d:38:0b:71:e6:ca:d5:36:b0:7b:43: 7f:d6:02:95:c5:d7:b1:d5:62:c7:4c:12:10:77:33:5f:4e:64: 27:d4:a3:20:76:70:71:5c:b2:ce:53:ac:77:4a:55:ac:fd:d6: c1:bb:44:5d:bc:67:44:25:b5:bc:1e:75:b4:1c:8f:c4:41:9a: 22:ed:e3:a7:c8:e3:6f:d5:dd:bc:40:3e:31:b6:b4:37:20:ba: bc:1e:20:d7:dc:c4:5b:ae:af:0d:4a:4b:8e:98:be:e6:7c:aa: b9:74:a3:a4:94:e0:38:19:32:01:c7:36:cb:4b:b4:aa:2a:3a: 08:e1:ab:ab:ff:a0:b4:8e:da:8e:14:c0:f3:35:86:d6:f1:fc: 67:b1:f6:e5:b0:e2:53:f7:fb:50:ab:42:6c:08:52:3a:02:d8: 82:87:e6:0d:60:1f:89:74:1c:40:34:68:44:e1:24:e4:35:55: 10:b6:ae:de:93:c6:01:92:97:59:08:b8:19:a4:77:e7:4f:b0: cc:53:ae:20 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6yscfPzLw8uF9ihgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk YzJhN2RiNzUtMjBjMC00MjM2LTk2OTAtZjk0OTZkMWVmNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliS/jSzJ883oksVC1c7/9AZtpDkQSlUZFzjx LF3AWTU/e8XH0sCNZbUAaqpaB5iNEFc+9DT83AbCAXTf2wtE+DpcusSobj5dB8iW izGdwtGavMLdJmhBVvfdIY8zMDAuLUG+TDVGUWW/lzr+NM63rnoVGKutnRDvRlr4 g82kdhqh3ifM10wN/tY9Z9SfntQHHoJow5KcmgKL29IefJfVvG1DTphKvMVXZElE KINGWbACO5BQDjAKhFCRMhVX2vy+c8PXU1jE9QQK5YXaStcdOWSVf17+phBg2MJ+ Kh58hIK2r0K4YdyUfoBTPWDpUw8jn+SgYyLUqw6wogC1A2FZVwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJn56lBt8+FC+WZfQn2TPXWLVWjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjJmYjIzZDktN2Q3OS0z YTUxLTg2Y2QtNWQwM2U3ZTZhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARiswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcP6XUySaQ8GzDd63AJ/rvpbMGPXsATVe/oG3ZuIGojBH7SHv9nqDd+up pVrxQdzz8E0JPE+oMKoa3Wv4lJ04C3HmytU2sHtDf9YClcXXsdVix0wSEHczX05k J9SjIHZwcVyyzlOsd0pVrP3WwbtEXbxnRCW1vB51tByPxEGaIu3jp8jjb9XdvEA+ Mba0NyC6vB4g19zEW66vDUpLjpi+5nyquXSjpJTgOBkyAcc2y0u0qio6COGrq/+g tI7ajhTA8zWG1vH8Z7H25bDiU/f7UKtCbAhSOgLYgofmDWAfiXQcQDRoROEk5DVV ELau3pPGAZKXWQi4GaR350+wzFOuIA== -----END CERTIFICATE-----Generated at Thu Aug 27 14:18:59 2026 by rpki-client