$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30be80cd-76ff-3e1a-89fb-4e857b55299b.roa File: 30be80cd-76ff-3e1a-89fb-4e857b55299b.roa (raw, json) Hash identifier: n2oDGZTQns8Cwnve/Vag3GM6YkGETlRvB1Drd1AC6zc= Subject key identifier: 28:19:1C:C4:85:42:F5:A3:F8:6C:8E:EC:4B:64:6A:DC:B4:85:FC:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C9A994F03D4F08871300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30be80cd-76ff-3e1a-89fb-4e857b55299b.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 151.213.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c9:a9:94:f0:3d:4f:08:87:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=97efb089-7c22-4ff9-bb4b-cb0cf75fedf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:07:1c:a9:bb:5b:10:d7:ec:0f:7f:cc:9f:02: 9a:7e:1f:ff:95:b3:67:0c:26:a8:64:d3:99:06:c5: 33:fb:a3:b3:6f:8a:77:0a:18:8e:73:90:0f:2e:38: 24:43:07:dc:3f:26:60:62:37:a1:37:00:74:a6:64: c7:8e:f1:16:26:eb:9a:6f:60:ef:53:e1:57:8c:2f: ac:15:61:8c:d4:52:60:27:70:ab:f1:21:3b:31:e5: 2f:23:e4:2c:b3:fa:f1:0e:83:0e:63:d1:84:69:8e: 29:d6:1a:77:a0:1c:b2:d6:d7:6b:a0:d1:b3:18:2e: 48:d0:5a:f8:7d:42:c9:42:7e:56:d3:4e:f1:c9:39: b1:d4:f4:c1:31:ea:62:7a:cd:a8:98:cd:90:f3:1d: a7:94:24:6a:26:ec:ca:0a:b4:7c:bc:72:62:09:9a: ab:be:3b:79:0d:90:b2:08:16:f7:3d:f8:98:ec:23: 4e:4c:3c:7e:a8:9c:43:d0:a7:fc:10:dc:1f:90:3b: 3a:65:e5:2a:66:a2:91:c6:38:7a:36:d1:eb:f8:43: 3a:1a:17:5e:78:cf:67:54:91:c2:e2:86:6a:7b:98: ee:fa:1e:ea:f6:9f:78:68:c2:bb:22:f3:52:16:98: 1f:ea:4c:c3:8b:b8:a2:60:5b:7d:ea:70:6c:3f:eb: 95:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:19:1C:C4:85:42:F5:A3:F8:6C:8E:EC:4B:64:6A:DC:B4:85:FC:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30be80cd-76ff-3e1a-89fb-4e857b55299b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:76:61:ba:41:2a:81:05:7e:28:b7:e9:0b:32:eb:88:d5:a9: 12:47:09:3f:f4:ee:ef:8e:7e:d8:fb:74:18:a4:1f:d3:a0:78: f2:ab:bc:e3:f7:a1:6e:64:c8:f3:12:f9:b7:b4:80:58:04:f2: 10:bd:7b:e4:62:a7:4a:5a:1f:81:e8:6d:5f:16:49:49:89:15: da:40:73:f0:c6:51:8b:48:23:d3:57:d7:a0:53:42:76:02:71: 95:0c:da:46:6d:3b:d4:63:f0:ed:6a:e0:1c:8e:93:4b:4b:93: a0:23:fa:b2:7f:c4:5e:13:b6:4b:67:ca:6b:ed:4e:4a:46:d0: 71:df:5a:7d:a6:dc:96:eb:db:75:9e:c8:b5:43:a7:27:5b:ea: 56:33:d4:93:99:2f:d1:75:5b:04:5d:d3:ce:7e:3d:ce:83:0e: ff:8b:98:08:64:c2:aa:5b:31:58:d3:a0:36:dd:02:9a:2f:8e: 5c:d8:9f:22:e5:00:8e:fc:73:5f:48:6b:86:e5:40:5e:f6:65: f0:86:56:60:41:2a:9e:22:89:fe:84:d7:48:27:fe:23:44:1d: 81:cd:cd:4f:4a:cb:9d:d1:53:a5:a9:11:df:46:b2:64:03:bc: bd:07:29:ad:f4:81:ab:9f:12:78:97:3d:d0:95:d6:35:f2:fd: ba:32:56:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscmplPA9TwiHEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk OTdlZmIwODktN2MyMi00ZmY5LWJiNGItY2IwY2Y3NWZlZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAccqbtbENfsD3/MnwKafh//lbNnDCaoZNOZ BsUz+6Ozb4p3ChiOc5APLjgkQwfcPyZgYjehNwB0pmTHjvEWJuuab2DvU+FXjC+s FWGM1FJgJ3Cr8SE7MeUvI+Qss/rxDoMOY9GEaY4p1hp3oByy1tdroNGzGC5I0Fr4 fULJQn5W007xyTmx1PTBMepies2omM2Q8x2nlCRqJuzKCrR8vHJiCZqrvjt5DZCy CBb3PfiY7CNOTDx+qJxD0Kf8ENwfkDs6ZeUqZqKRxjh6NtHr+EM6GhdeeM9nVJHC 4oZqe5ju+h7q9p94aMK7IvNSFpgf6kzDi7iiYFt96nBsP+uVWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgZHMSFQvWj+GyO7Etkaty0hfyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzBiZTgwY2QtNzZmZi0z ZTFhLTg5ZmItNGU4NTdiNTUyOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp2YbpBKoEFfii36Qsy64jVqRJHCT/07u+Oftj7dBikH9OgePKrvOP3 oW5kyPMS+be0gFgE8hC9e+Rip0paH4HobV8WSUmJFdpAc/DGUYtII9NX16BTQnYC cZUM2kZtO9Rj8O1q4ByOk0tLk6Aj+rJ/xF4TtktnymvtTkpG0HHfWn2m3Jbr23We yLVDpydb6lYz1JOZL9F1WwRd085+Pc6DDv+LmAhkwqpbMVjToDbdApovjlzYnyLl AI78c19Ia4blQF72ZfCGVmBBKp4iif6E10gn/iNEHYHNzU9Ky53RU6WpEd9GsmQD vL0HKa30gaufEniXPdCV1jXy/boyVvY= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:58 2026 by rpki-client