$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa File: 2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa (raw, json) Hash identifier: /i8D1lezfjCdANjaNZ134p6nLoid8yPyffZgEdWL3so= Subject key identifier: 18:4A:F5:69:61:5B:6B:D2:45:68:DD:8B:BB:5C:81:1A:12:38:71:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EC4D707A809CFB601A4B84780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa Signing time: Sat 08 Aug 2026 13:00:11 +0000 ROA not before: Sat 08 Aug 2026 13:00:11 +0000 ROA not after: Fri 06 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 174.131.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c4:d7:07:a8:09:cf:b6:01:a4:b8:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 8 13:00:11 2026 GMT Not After : Nov 6 14:00:11 2026 GMT Subject: CN=b13c4eb8-ddbd-4da9-9f50-5ede36f78eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:71:e6:34:4f:02:2f:4c:24:41:bb:49:1b:02: e4:13:06:ff:3b:46:4a:f0:dd:de:d1:bb:28:1e:df: 76:2c:d4:fe:5b:e1:1c:97:b2:20:3a:34:e0:b1:26: 2c:90:3a:0e:d1:d2:a0:ec:d3:cb:b8:61:df:6a:c8: fe:1b:7a:a6:86:db:60:64:f9:c8:28:45:c0:ec:9e: 18:ea:a1:1d:7d:1c:08:c6:85:f1:92:1e:35:7d:fe: 6f:ef:49:df:67:39:64:cf:2a:c5:2f:ef:91:30:c0: 0f:1a:4a:c8:39:e1:4d:40:1d:53:75:03:22:9c:81: 2a:28:a4:67:c9:e9:5a:81:cc:75:28:36:11:18:cc: 24:51:2b:58:a1:60:e7:9b:c7:2a:47:df:d5:ce:37: 58:dc:b1:4e:2c:c6:5b:b2:48:11:3a:f4:4a:6d:2b: ec:6b:78:69:7c:49:16:c4:b7:b5:13:34:38:c5:13: bd:04:b6:ac:78:85:85:28:7a:e4:3a:77:ae:c2:fa: c2:f6:b3:01:0b:f2:14:53:63:b1:b0:6e:61:7c:82: 4a:3f:3a:1f:83:c7:00:9a:69:f0:05:4d:19:81:72: ab:11:d9:c5:d2:6f:78:7f:2b:c2:72:fa:6f:e2:00: 77:25:b1:03:1b:1e:28:2f:b6:fb:51:de:69:d8:a1: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4A:F5:69:61:5B:6B:D2:45:68:DD:8B:BB:5C:81:1A:12:38:71:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bf:4c:7d:6f:35:a8:d4:f6:d0:0e:29:d3:11:58:07:ba:80: f6:2e:8e:65:6f:8a:c6:1b:b7:89:fa:61:ca:2f:82:16:85:d1: 09:c1:43:8c:e4:d6:6e:e5:66:a5:68:aa:56:10:09:c2:8e:44: f0:4f:80:c6:97:b9:8a:57:b3:ed:8d:13:48:f9:56:d6:d3:72: 5d:bd:38:20:3b:26:18:b7:32:3d:51:8f:3f:32:20:b2:57:43: e2:a6:4d:8b:ce:7e:48:b3:16:af:41:47:a0:28:42:ff:9a:02: 0d:7e:5d:45:92:82:82:9c:29:e6:c1:a9:6f:45:81:09:87:bf: 94:bf:2f:85:0a:28:f2:cc:1e:a4:87:9e:f3:1d:c9:65:88:c1: 22:39:52:22:6e:65:76:ba:e9:b0:2d:05:f9:9a:07:ca:7b:7d: 26:e9:a1:32:81:c8:5c:0d:26:0d:d9:25:1e:d8:dd:bb:4b:c2: 8d:c8:46:ce:a1:a9:27:84:8d:30:9e:c8:79:4d:e8:41:25:9d: c4:3c:55:8d:d3:e6:a3:08:32:67:fe:f0:f6:b3:1f:25:4d:35: f4:73:78:eb:07:e2:68:4d:75:9f:f1:36:23:c9:71:52:b3:b1: f6:e7:05:ec:45:e8:b7:6f:85:57:86:eb:4b:55:ad:82:62:06: 06:83:09:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1weoCc+2AaS4R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk YjEzYzRlYjgtZGRiZC00ZGE5LTlmNTAtNWVkZTM2Zjc4ZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnHmNE8CL0wkQbtJGwLkEwb/O0ZK8N3e0bso Ht92LNT+W+Ecl7IgOjTgsSYskDoO0dKg7NPLuGHfasj+G3qmhttgZPnIKEXA7J4Y 6qEdfRwIxoXxkh41ff5v70nfZzlkzyrFL++RMMAPGkrIOeFNQB1TdQMinIEqKKRn yelagcx1KDYRGMwkUStYoWDnm8cqR9/VzjdY3LFOLMZbskgROvRKbSvsa3hpfEkW xLe1EzQ4xRO9BLaseIWFKHrkOneuwvrC9rMBC/IUU2OxsG5hfIJKPzofg8cAmmnw BU0ZgXKrEdnF0m94fyvCcvpv4gB3JbEDGx4oL7b7Ud5p2KGtPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhK9WlhW2vSRWjdi7tcgRoSOHHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmIxYTM3ZGEtYTZjNS0z NThmLWEwM2ItNGE5ZGE4MTRiZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+/TH1vNajU9tAOKdMRWAe6gPYujmVvisYbt4n6YcovghaF0QnBQ4zk 1m7lZqVoqlYQCcKORPBPgMaXuYpXs+2NE0j5VtbTcl29OCA7Jhi3Mj1Rjz8yILJX Q+KmTYvOfkizFq9BR6AoQv+aAg1+XUWSgoKcKebBqW9FgQmHv5S/L4UKKPLMHqSH nvMdyWWIwSI5UiJuZXa66bAtBfmaB8p7fSbpoTKByFwNJg3ZJR7Y3btLwo3IRs6h qSeEjTCeyHlN6EElncQ8VY3T5qMIMmf+8PazHyVNNfRzeOsH4mhNdZ/xNiPJcVKz sfbnBexF6LdvhVeG60tVrYJiBgaDCc0= -----END CERTIFICATE-----Generated at Thu Aug 27 13:17:32 2026 by rpki-client