$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fc4d1ec-de46-3054-ba42-4041c28a4bbd.roa File: 2fc4d1ec-de46-3054-ba42-4041c28a4bbd.roa (raw, json) Hash identifier: 4f1FWXL3pIOYE9ATA20JNZ7hP/jFDoT0la8pHvIGUTg= Subject key identifier: C8:3C:4C:37:E8:AE:54:41:67:EF:8D:67:1F:B8:43:74:03:63:5A:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED255642F1E103524A75F0E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fc4d1ec-de46-3054-ba42-4041c28a4bbd.roa Signing time: Thu 13 Aug 2026 09:00:19 +0000 ROA not before: Thu 13 Aug 2026 09:00:19 +0000 ROA not after: Wed 11 Nov 2026 10:00:19 +0000 asID: 7029 IP address blocks: 174.131.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:55:64:2f:1e:10:35:24:a7:5f:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 13 09:00:19 2026 GMT Not After : Nov 11 10:00:19 2026 GMT Subject: CN=78273a40-dce8-44a2-8b16-86c227f70da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b6:71:e5:95:ec:cc:bd:22:d8:5e:c9:49:fe: 73:2a:70:17:a0:bb:16:12:34:08:3a:53:1d:07:53: 11:4c:fc:99:1e:46:a0:f8:c7:72:bf:4a:56:31:c1: f8:11:df:34:7a:ad:c3:ff:cd:bf:e2:19:f1:96:07: 80:57:03:7f:a7:81:45:fc:23:8b:34:01:7f:df:29: 67:99:83:db:0e:00:2f:5d:09:25:43:6a:07:d8:df: ee:63:bc:5e:cc:fe:e3:aa:93:08:7a:29:0c:da:87: c9:21:7f:76:94:6c:be:10:e0:95:c5:35:3e:de:01: 6f:1d:fc:6d:0a:85:b3:42:c2:8e:85:33:fd:f1:0e: ac:ea:01:12:5d:a6:59:a2:df:4b:53:26:ac:7b:09: 4b:a9:a9:22:45:31:80:6f:3c:d7:87:90:38:93:36: b8:ca:47:13:1d:6a:2a:db:c7:41:f1:3e:31:b7:2e: 27:9b:66:88:7d:7f:55:4f:f3:a6:0e:b4:31:ad:8b: 73:39:71:e6:e7:07:b1:ab:2f:36:98:41:ae:25:d8: a6:e0:cc:3d:43:b4:5d:9b:08:46:b8:31:53:bb:e3: f9:6c:a6:81:42:76:e0:d9:20:e7:70:8b:0f:80:bd: 05:3f:de:ed:ae:21:70:4c:c8:9b:91:fd:fa:e2:74: 50:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3C:4C:37:E8:AE:54:41:67:EF:8D:67:1F:B8:43:74:03:63:5A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fc4d1ec-de46-3054-ba42-4041c28a4bbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:91:e7:f9:d8:f1:19:f0:78:29:96:7b:bf:ca:e3:6d:fe:3a: b6:4e:de:17:7f:bf:44:f8:fb:96:4d:fc:a7:ea:e4:dd:4c:a8: 14:39:12:ef:b0:40:a2:13:ee:a1:19:f7:80:bf:b8:ec:80:e3: 28:45:36:c7:5f:ab:bc:bc:0d:98:d1:0b:2d:59:b2:21:3a:6f: 0e:da:e0:b2:4f:fb:9c:fa:b3:5f:66:e8:cc:02:2f:27:aa:e4: d7:05:09:f9:86:b8:5b:52:09:91:ae:8e:78:eb:07:ea:12:5b: c1:3f:c8:5c:f8:5e:78:cf:42:35:a0:dc:07:21:3d:f7:8b:76: 9d:60:43:e6:e0:c9:7b:a0:ee:53:df:d9:1a:0d:d5:34:23:07: 57:9c:89:eb:43:91:90:a4:47:df:f0:22:9c:3b:b0:1a:e2:98: 2b:e5:bf:09:28:2d:48:07:99:63:72:d5:44:66:1b:54:7e:3d: a3:04:34:5a:59:5d:58:24:7e:5a:69:c0:40:69:cb:6e:5b:17: d8:de:51:7b:af:38:06:c8:22:53:94:e8:86:c5:75:9d:7d:89: 27:40:bc:ab:9f:b7:f5:13:83:76:d0:7b:c9:b0:ae:3d:90:07: f4:03:3b:5a:53:a2:c7:ea:39:13:e4:ee:ec:f6:ca:97:21:8e: 1d:27:11:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SVWQvHhA1JKdfDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxMzA5MDAxOVoXDTI2MTExMTEwMDAxOVowLzEtMCsGA1UEAxMk NzgyNzNhNDAtZGNlOC00NGEyLThiMTYtODZjMjI3ZjcwZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rZx5ZXszL0i2F7JSf5zKnAXoLsWEjQIOlMd B1MRTPyZHkag+Mdyv0pWMcH4Ed80eq3D/82/4hnxlgeAVwN/p4FF/COLNAF/3yln mYPbDgAvXQklQ2oH2N/uY7xezP7jqpMIeikM2ofJIX92lGy+EOCVxTU+3gFvHfxt CoWzQsKOhTP98Q6s6gESXaZZot9LUyasewlLqakiRTGAbzzXh5A4kza4ykcTHWoq 28dB8T4xty4nm2aIfX9VT/OmDrQxrYtzOXHm5wexqy82mEGuJdim4Mw9Q7RdmwhG uDFTu+P5bKaBQnbg2SDncIsPgL0FP97triFwTMibkf364nRQuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg8TDforlRBZ++NZx+4Q3QDY1rxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmZjNGQxZWMtZGU0Ni0z MDU0LWJhNDItNDA0MWMyOGE0YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeR5/nY8RnweCmWe7/K423+OrZO3hd/v0T4+5ZN/Kfq5N1MqBQ5Eu+w QKIT7qEZ94C/uOyA4yhFNsdfq7y8DZjRCy1ZsiE6bw7a4LJP+5z6s19m6MwCLyeq 5NcFCfmGuFtSCZGujnjrB+oSW8E/yFz4XnjPQjWg3AchPfeLdp1gQ+bgyXug7lPf 2RoN1TQjB1ecietDkZCkR9/wIpw7sBrimCvlvwkoLUgHmWNy1URmG1R+PaMENFpZ XVgkflppwEBpy25bF9jeUXuvOAbIIlOU6IbFdZ19iSdAvKuft/UTg3bQe8mwrj2Q B/QDO1pTosfqORPk7uz2ypchjh0nEZs= -----END CERTIFICATE-----Generated at Thu Aug 27 09:46:55 2026 by rpki-client