$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25529f76-35a6-33d9-9c98-24966702a60d.roa File: 25529f76-35a6-33d9-9c98-24966702a60d.roa (raw, json) Hash identifier: 90jbwk6AA/f8zfgW648iKD8yCTdDZ7ykE9D1toe9NWQ= Subject key identifier: 47:AD:55:92:64:C9:4A:57:9C:76:A6:7E:E5:0C:67:89:93:4F:DA:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6F9A8EA3750CEFD494F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25529f76-35a6-33d9-9c98-24966702a60d.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 67.141.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f9:a8:ea:37:50:ce:fd:49:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=72cce548-b0b4-4c91-a3f9-7c3b8cbdabd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4e:ba:20:88:a5:8f:a4:6d:68:a2:bc:eb:d6: 7e:f8:65:f0:6f:2e:74:54:9b:4e:3a:72:eb:f3:ef: 20:6f:c8:d0:b3:21:bc:2b:75:b5:56:b0:ba:f7:ab: 51:82:74:42:2f:d2:b9:e7:1a:79:38:3b:5f:87:3e: 75:75:67:30:f5:5b:d0:23:c7:33:30:8f:7d:d0:88: 55:81:0a:02:af:24:89:c4:8f:d6:d8:01:c5:22:76: 50:41:c4:3f:2b:63:e7:35:6c:80:7b:79:46:7f:c3: c6:1a:fb:25:42:95:1b:c6:b5:f8:85:df:74:43:14: a2:bf:34:d9:77:32:7e:0e:5b:dc:51:e3:64:d1:5a: a6:2d:12:33:ba:5a:34:a3:b1:c0:9d:52:62:e5:18: ed:ce:c9:8a:c0:20:ee:2d:b8:11:62:16:58:54:92: 3c:b7:fe:07:e2:f2:60:a8:82:4f:bc:f5:01:57:7b: 2b:8a:a8:aa:47:3b:97:60:2b:7b:fd:a9:56:e3:9b: 94:99:5a:cc:be:e6:dc:f1:8a:75:f8:e2:46:a4:34: 90:e3:4d:94:1a:89:f1:23:94:f2:0a:da:26:aa:50: 37:27:f3:19:df:10:c1:6f:aa:b5:20:2f:c0:06:eb: 41:a9:8e:83:26:53:46:ee:c1:e9:27:b6:24:42:66: 7a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AD:55:92:64:C9:4A:57:9C:76:A6:7E:E5:0C:67:89:93:4F:DA:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25529f76-35a6-33d9-9c98-24966702a60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:10:c4:4c:24:65:d5:a3:40:75:82:81:88:b1:41:0c:69:14: d0:3a:6f:27:d8:54:16:74:cb:4b:18:16:d8:ce:d2:ed:61:97: 87:83:a2:b0:62:b2:c0:57:78:b3:de:d9:74:59:db:31:96:d8: d7:2d:57:b5:60:5f:d1:ee:0a:ea:4a:9a:bd:73:a6:34:7f:a8: c6:7d:c0:d8:0d:4e:c2:7c:ee:79:31:a1:b1:17:0e:4f:ee:bc: cd:0f:6e:0c:86:b2:dc:0f:4c:08:14:47:0f:80:04:75:0e:6a: de:fd:bb:aa:ef:b8:cc:30:e8:d6:5d:25:8c:da:35:fa:f2:29: 00:5e:b6:6f:40:5e:94:3b:26:c9:82:71:ba:b6:63:54:f0:e4: 5c:49:6a:90:04:86:a7:ca:49:81:99:6a:4f:d3:0c:e2:51:f8: 20:85:8f:89:b4:be:eb:89:d3:c7:ce:53:59:62:37:43:7e:15: 8f:16:77:4d:73:c9:34:36:03:20:8a:6a:93:3a:3a:d2:01:82: bf:14:2a:b6:5a:3d:5d:23:bb:4c:a5:d3:7a:09:df:bf:23:30: f0:01:e9:e5:99:7d:ef:51:43:07:91:23:8c:39:ab:93:f6:6c: f0:df:e2:3c:e6:5e:5d:80:8f:7c:d3:e8:a8:e9:16:99:6a:7b: 7a:1c:6f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vmo6jdQzv1JT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NzJjY2U1NDgtYjBiNC00YzkxLWEzZjktN2MzYjhjYmRhYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE66IIilj6RtaKK869Z++GXwby50VJtOOnLr 8+8gb8jQsyG8K3W1VrC696tRgnRCL9K55xp5ODtfhz51dWcw9VvQI8czMI990IhV gQoCrySJxI/W2AHFInZQQcQ/K2PnNWyAe3lGf8PGGvslQpUbxrX4hd90QxSivzTZ dzJ+DlvcUeNk0VqmLRIzulo0o7HAnVJi5RjtzsmKwCDuLbgRYhZYVJI8t/4H4vJg qIJPvPUBV3sriqiqRzuXYCt7/alW45uUmVrMvubc8Yp1+OJGpDSQ402UGonxI5Ty CtomqlA3J/MZ3xDBb6q1IC/AButBqY6DJlNG7sHpJ7YkQmZ60QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEetVZJkyUpXnHamfuUMZ4mTT9oyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjU1MjlmNzYtMzVhNi0z M2Q5LTljOTgtMjQ5NjY3MDJhNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ42QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEQxEwkZdWjQHWCgYixQQxpFNA6byfYVBZ0y0sYFtjO0u1hl4eDorBi ssBXeLPe2XRZ2zGW2NctV7VgX9HuCupKmr1zpjR/qMZ9wNgNTsJ87nkxobEXDk/u vM0PbgyGstwPTAgURw+ABHUOat79u6rvuMww6NZdJYzaNfryKQBetm9AXpQ7JsmC cbq2Y1Tw5FxJapAEhqfKSYGZak/TDOJR+CCFj4m0vuuJ08fOU1liN0N+FY8Wd01z yTQ2AyCKapM6OtIBgr8UKrZaPV0ju0yl03oJ378jMPAB6eWZfe9RQweRI4w5q5P2 bPDf4jzmXl2Aj3zT6KjpFplqe3ocb50= -----END CERTIFICATE-----Generated at Thu Aug 27 11:39:36 2026 by rpki-client