$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3275fb34-b71c-3a20-bf7f-7e5042160434.roa File: 3275fb34-b71c-3a20-bf7f-7e5042160434.roa (raw, json) Hash identifier: 81oAEsNNjNnPYL0lV/BA64C2PrgL8oECfQdB6VtCUCA= Subject key identifier: 69:AC:2A:D1:66:D1:7A:B3:03:26:2B:C5:85:D6:E5:40:AA:A6:9B:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1D2439D52C975618EE3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3275fb34-b71c-3a20-bf7f-7e5042160434.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 173.213.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:d2:43:9d:52:c9:75:61:8e:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=e7981696-7e05-4f4d-aa9c-c0a8e8e1fc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:64:9f:a5:d0:a8:cb:30:a9:68:2e:d9:49:f9: 65:a6:b1:b3:98:a9:f0:15:55:06:50:e4:0c:46:77: b0:8b:c0:13:4f:dc:65:d4:9b:d8:71:c7:f8:30:7f: 66:cb:b7:0b:3d:5c:63:58:e0:90:cb:25:c9:51:de: 87:42:12:ca:71:51:a6:cf:1c:c1:93:59:6b:cd:95: be:f2:c5:8a:bd:28:32:8d:ea:45:95:c1:0d:10:9b: 44:3b:81:bd:d3:c7:15:ef:fa:e2:b0:2a:1c:d3:07: 0e:c1:11:2c:ed:b4:41:70:b4:b8:4d:c3:1d:5a:a3: 0d:f4:6b:fa:fc:0f:33:79:2c:c5:35:f1:5b:70:83: 94:34:bf:b0:dd:dd:35:23:c7:2f:59:ec:c3:f4:af: 66:7b:85:78:82:21:54:6e:80:2b:80:60:a3:bf:27: 4d:7c:45:de:ab:ba:b2:d8:13:09:8d:8e:a5:82:60: 8c:7f:01:fa:69:88:f3:6c:f9:3e:2c:06:5d:e9:9e: 85:ab:69:fe:8d:f3:9d:86:55:cf:9a:53:2e:f0:9d: 57:bd:e2:20:97:84:42:98:48:96:bf:85:c0:76:50: 63:01:89:7f:e2:35:b1:f7:6d:29:2b:46:5e:2f:e8: 2f:5a:78:9f:cf:a7:1e:70:6f:80:ec:89:c4:bf:a0: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AC:2A:D1:66:D1:7A:B3:03:26:2B:C5:85:D6:E5:40:AA:A6:9B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3275fb34-b71c-3a20-bf7f-7e5042160434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:86:c5:9b:d7:e7:7e:82:4c:8c:6b:cb:1c:60:91:9a:ca:bb: 07:26:82:dc:73:9d:4b:a8:58:c9:8b:4c:2e:4f:3e:de:74:ea: d3:c4:e8:b1:82:35:be:81:cd:bd:cc:84:d4:87:4b:36:ea:45: ad:ee:6f:c3:a1:c0:20:95:10:f8:02:aa:02:14:c4:f3:11:cb: 33:e0:6e:62:0f:a4:88:69:57:cb:5d:92:7a:0a:82:64:5a:01: b2:2a:5c:f9:0e:e0:48:2d:74:f6:09:9d:42:ce:f3:08:0a:d1: d7:1e:33:14:8d:70:94:e5:4d:fe:ee:4c:66:27:e3:8a:d3:87: 65:d3:71:d9:2e:f3:73:45:5c:91:37:52:b5:41:84:a8:d5:9c: 7e:14:9d:72:0e:ae:5d:06:22:ac:af:5b:c6:87:42:69:e3:77: 64:69:40:5c:32:14:44:36:4e:e0:e1:7f:92:81:05:4f:4d:3c: c3:89:81:16:6c:b5:57:17:fe:9a:e3:00:84:57:8b:c6:e3:3d: 58:1c:b4:82:1e:9d:b4:c6:30:d4:5f:68:9c:a4:14:aa:58:43: 66:ed:32:a7:7f:fb:ab:ad:32:c6:99:a8:1d:69:d4:fe:81:51: c5:67:e8:08:f6:30:2c:9f:33:ca:90:48:3f:dc:8b:bf:6c:ed: 4b:b7:4c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysdJDnVLJdWGO48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZTc5ODE2OTYtN2UwNS00ZjRkLWFhOWMtYzBhOGU4ZTFmYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGSfpdCoyzCpaC7ZSfllprGzmKnwFVUGUOQM Rnewi8ATT9xl1JvYccf4MH9my7cLPVxjWOCQyyXJUd6HQhLKcVGmzxzBk1lrzZW+ 8sWKvSgyjepFlcENEJtEO4G908cV7/risCoc0wcOwREs7bRBcLS4TcMdWqMN9Gv6 /A8zeSzFNfFbcIOUNL+w3d01I8cvWezD9K9me4V4giFUboArgGCjvydNfEXeq7qy 2BMJjY6lgmCMfwH6aYjzbPk+LAZd6Z6Fq2n+jfOdhlXPmlMu8J1XveIgl4RCmEiW v4XAdlBjAYl/4jWx920pK0ZeL+gvWnifz6cecG+A7InEv6BIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmsKtFm0XqzAyYrxYXW5UCqpptrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI3NWZiMzQtYjcxYy0z YTIwLWJmN2YtN2U1MDQyMTYwNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErdWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyGxZvX536CTIxryxxgkZrKuwcmgtxznUuoWMmLTC5PPt506tPE6LGC Nb6Bzb3MhNSHSzbqRa3ub8OhwCCVEPgCqgIUxPMRyzPgbmIPpIhpV8tdknoKgmRa AbIqXPkO4EgtdPYJnULO8wgK0dceMxSNcJTlTf7uTGYn44rTh2XTcdku83NFXJE3 UrVBhKjVnH4UnXIOrl0GIqyvW8aHQmnjd2RpQFwyFEQ2TuDhf5KBBU9NPMOJgRZs tVcX/prjAIRXi8bjPVgctIIenbTGMNRfaJykFKpYQ2btMqd/+6utMsaZqB1p1P6B UcVn6Aj2MCyfM8qQSD/ci79s7Uu3TBg= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:22 2026 by rpki-client