$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa File: 2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa (raw, json) Hash identifier: yyH8y1WZe5OVHEcCFnCe1vdPSp85JE5BIl4yqiXFGPE= Subject key identifier: E4:4E:5F:AE:14:E1:70:6B:BB:DF:65:6A:47:40:A4:50:FB:8B:F5:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FE4B8DC25E973ED87C70 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.191.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fe:4b:8d:c2:5e:97:3e:d8:7c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=34b4861a-6bbf-4344-a08e-9aecb7ca7f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:6f:b2:5b:7d:68:41:9e:16:c1:d6:79:f9: 99:0f:78:70:b9:a9:92:8c:08:f9:a6:39:45:ec:fc: 1a:b9:90:30:04:d3:ce:21:95:99:7c:19:1f:bc:3c: 52:39:60:89:88:a8:1c:aa:51:79:a8:26:e4:58:4b: bf:ed:63:1a:20:a8:f5:8a:39:d9:53:a0:ed:cb:37: 82:a5:46:5c:60:f5:c8:0c:df:d9:31:fa:dd:a4:d3: 59:26:86:90:9e:68:28:15:1a:88:d1:ec:45:6a:2c: 92:32:ac:eb:0a:76:12:ce:7c:be:0a:88:99:54:99: 46:26:e9:1d:3d:84:41:8f:05:f4:05:8a:40:f1:0e: 30:6e:58:27:72:38:e0:34:1b:44:2e:c0:a8:08:e1: db:8e:88:37:25:61:eb:36:b6:cc:c9:7d:07:4d:bf: 18:bf:57:d2:e9:d4:52:a2:72:0c:32:9c:24:c9:04: 49:ab:8e:24:b1:f5:c0:07:72:fc:02:e0:7b:df:4f: 5c:c4:22:3c:b0:ad:34:0b:d6:09:03:79:9f:6f:e7: a2:40:85:5e:85:f8:31:fc:45:ef:3f:17:80:e3:5e: 19:31:18:cf:5a:fe:83:c2:8d:16:1c:5d:69:a5:d2: 79:ec:1c:da:cc:eb:e5:ac:50:ad:de:64:8f:af:d0: 41:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4E:5F:AE:14:E1:70:6B:BB:DF:65:6A:47:40:A4:50:FB:8B:F5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c8:e3:14:6c:c5:80:f3:01:a7:07:55:34:3e:6a:e7:47:1e: 3c:83:5e:9f:80:eb:7c:2c:87:aa:47:66:d5:00:6c:7a:36:65: 59:18:23:b9:a2:d9:18:29:db:a5:00:40:7e:33:6c:b6:a1:23: 85:c3:3a:49:17:16:cc:bd:38:65:8e:02:96:6e:6d:d2:af:cc: c6:a3:6e:99:c9:01:25:29:b1:21:5a:48:bd:b1:00:27:5f:d3: 7b:35:f1:a3:0f:4b:d0:1c:65:59:47:13:76:74:4d:0c:8f:5a: 9f:ae:b0:33:bd:65:d7:e1:27:f1:01:97:5c:be:39:77:67:b0: fd:d4:fc:32:19:dd:94:04:99:f6:4f:12:f4:38:95:d8:1d:11: 44:39:f2:4c:d0:a9:12:4b:58:50:86:b6:71:77:2a:dc:5d:c8: a0:98:28:76:1e:98:6d:37:ef:b0:0d:89:3d:16:89:93:45:f8: 00:7d:16:d8:f6:89:bf:c7:af:28:dc:e5:3d:0f:67:ca:fe:f1: b0:c0:5c:8e:4b:d9:94:cd:91:0b:9d:11:e6:64:73:81:9e:a5: 8b:f7:25:f4:a8:4f:a4:c6:80:8a:5c:e4:bd:2f:88:63:d8:1a: 4d:3b:84:9b:a1:23:fd:13:02:66:e5:45:74:35:38:4b:17:53: d2:99:c4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5v5LjcJelz7YfHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MzRiNDg2MWEtNmJiZi00MzQ0LWEwOGUtOWFlY2I3Y2E3ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD9vslt9aEGeFsHWefmZD3hwuamSjAj5pjlF 7PwauZAwBNPOIZWZfBkfvDxSOWCJiKgcqlF5qCbkWEu/7WMaIKj1ijnZU6DtyzeC pUZcYPXIDN/ZMfrdpNNZJoaQnmgoFRqI0exFaiySMqzrCnYSzny+CoiZVJlGJukd PYRBjwX0BYpA8Q4wblgncjjgNBtELsCoCOHbjog3JWHrNrbMyX0HTb8Yv1fS6dRS onIMMpwkyQRJq44ksfXAB3L8AuB7309cxCI8sK00C9YJA3mfb+eiQIVehfgx/EXv PxeA414ZMRjPWv6Dwo0WHF1ppdJ57BzazOvlrFCt3mSPr9BBKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOROX64U4XBru99lakdApFD7i/VbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE3YzMzN2UtOTIxMy0z Y2Q0LWI5NzItYmJmOWI0MTgxNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLI4xRsxYDzAacHVTQ+audHHjyDXp+A63wsh6pHZtUAbHo2ZVkYI7mi 2Rgp26UAQH4zbLahI4XDOkkXFsy9OGWOApZubdKvzMajbpnJASUpsSFaSL2xACdf 03s18aMPS9AcZVlHE3Z0TQyPWp+usDO9ZdfhJ/EBl1y+OXdnsP3U/DIZ3ZQEmfZP EvQ4ldgdEUQ58kzQqRJLWFCGtnF3KtxdyKCYKHYemG0377ANiT0WiZNF+AB9Ftj2 ib/Hryjc5T0PZ8r+8bDAXI5L2ZTNkQudEeZkc4GepYv3JfSoT6TGgIpc5L0viGPY Gk07hJuhI/0TAmblRXQ1OEsXU9KZxJg= -----END CERTIFICATE-----Generated at Thu Aug 27 12:31:39 2026 by rpki-client