$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa File: 23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa (raw, json) Hash identifier: yN9I9ed1mubOrLJItD/jviGxasZkBb13cFToNT35tSM= Subject key identifier: 6C:EF:9A:C0:17:D4:39:C2:E0:DF:0E:59:E9:35:BE:5F:5D:4F:9C:AD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FB44ECBDA8D5A439AA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.185.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fb:44:ec:bd:a8:d5:a4:39:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=d57589ff-7d26-4ea7-b8c2-4e85e45c2a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:e2:80:f8:95:0d:b8:d7:3e:73:1c:7a:2f: 94:9b:56:47:0f:02:5a:e4:f9:47:99:51:0b:be:42: 11:a6:08:00:3d:75:98:35:a1:d2:0f:fc:3d:f6:04: b8:ca:02:e3:ff:62:a1:57:f4:b1:65:bb:9a:a9:50: 13:21:c0:0d:a0:c9:c4:4c:af:e5:2e:10:10:5c:90: d6:e2:65:9b:cb:b2:f4:2f:ae:7c:ca:0d:d4:1d:95: f8:ba:24:7a:64:c7:47:9a:f2:d7:52:d0:25:45:5d: a2:14:8f:82:0b:06:7a:e0:2a:55:03:c0:de:cb:53: fa:57:73:0e:41:73:98:b2:1c:f8:e6:d9:ff:ad:14: 1e:aa:c8:92:cb:45:29:f2:7d:95:bc:94:14:99:a9: cf:2a:4b:79:7c:1a:b1:38:93:47:86:0d:8d:7a:ad: 10:35:43:c6:2f:c6:83:94:3f:99:23:35:c2:02:95: 48:9c:47:60:8d:5c:cf:74:66:6d:d5:dd:1b:60:00: 82:d2:7f:26:10:5d:3e:03:20:7c:15:24:bf:7d:82: ef:93:54:da:51:67:86:53:bb:1d:60:3e:9b:c3:ac: c5:b2:ad:e5:fe:70:fd:35:59:db:37:1d:2d:5a:90: 4c:6b:ac:e9:81:53:b7:a5:ab:69:5c:b4:bc:de:87: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EF:9A:C0:17:D4:39:C2:E0:DF:0E:59:E9:35:BE:5F:5D:4F:9C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fc:34:ed:fd:82:07:ad:fe:ec:d8:6c:5e:1d:c9:d1:04:79: 87:5a:1c:0e:6c:b7:91:fc:6a:d5:6e:f0:19:60:ae:15:a3:81: 27:9d:bf:48:30:d5:5d:cf:38:59:6b:ea:82:a6:ae:c3:bb:2d: 61:3a:c5:63:fc:f2:95:b5:43:e3:38:97:0c:7b:99:d2:91:52: 57:8b:51:80:f5:1a:d9:4f:bc:b0:ea:cf:d8:44:09:f0:4a:98: 2e:51:5e:2e:d7:00:ab:11:8d:bd:51:8e:10:4a:d9:5e:11:95: 75:69:11:c8:27:09:31:02:98:29:86:2c:0d:ee:b1:a6:9e:7f: 8a:2e:73:47:fe:f3:ff:25:a1:6c:6c:cc:dd:57:f1:cf:49:15: b2:12:e7:2c:7e:0a:74:41:fb:ff:9e:9c:53:fd:be:b5:23:1d: ad:c7:64:e2:ba:fe:a4:0b:ca:32:e4:13:d1:45:dd:d6:23:da: 15:5c:fd:f3:40:59:1b:01:4c:a3:06:0b:8a:4e:ab:80:34:2c: 9e:91:19:62:16:d3:58:62:21:e0:d9:dc:98:58:f9:48:94:42: 6f:04:5e:74:8d:6a:b1:51:b9:46:2b:bd:41:49:ac:dd:75:77: ea:84:6b:dd:93:70:39:e3:57:1e:ea:90:74:db:d7:cc:fa:1f: 1b:9a:8a:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vtE7L2o1aQ5qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZDU3NTg5ZmYtN2QyNi00ZWE3LWI4YzItNGU4NWU0NWMyYTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYHigPiVDbjXPnMcei+Um1ZHDwJa5PlHmVEL vkIRpggAPXWYNaHSD/w99gS4ygLj/2KhV/SxZbuaqVATIcANoMnETK/lLhAQXJDW 4mWby7L0L658yg3UHZX4uiR6ZMdHmvLXUtAlRV2iFI+CCwZ64CpVA8Dey1P6V3MO QXOYshz45tn/rRQeqsiSy0Up8n2VvJQUmanPKkt5fBqxOJNHhg2Neq0QNUPGL8aD lD+ZIzXCApVInEdgjVzPdGZt1d0bYACC0n8mEF0+AyB8FSS/fYLvk1TaUWeGU7sd YD6bw6zFsq3l/nD9NVnbNx0tWpBMa6zpgVO3patpXLS83oeHqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzvmsAX1DnC4N8OWek1vl9dT5ytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNhN2Y2N2UtMjBlYy0z MTZiLWE3ZjItYjE0YzhhNmIwMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj8NO39gget/uzYbF4dydEEeYdaHA5st5H8atVu8BlgrhWjgSedv0gw 1V3POFlr6oKmrsO7LWE6xWP88pW1Q+M4lwx7mdKRUleLUYD1GtlPvLDqz9hECfBK mC5RXi7XAKsRjb1RjhBK2V4RlXVpEcgnCTECmCmGLA3usaaef4ouc0f+8/8loWxs zN1X8c9JFbIS5yx+CnRB+/+enFP9vrUjHa3HZOK6/qQLyjLkE9FF3dYj2hVc/fNA WRsBTKMGC4pOq4A0LJ6RGWIW01hiIeDZ3JhY+UiUQm8EXnSNarFRuUYrvUFJrN11 d+qEa92TcDnjVx7qkHTb18z6Hxuainw= -----END CERTIFICATE-----Generated at Thu Aug 27 09:47:40 2026 by rpki-client