$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa File: 37011cf7-93bf-3f24-a66a-48d124c2519a.roa (raw, json) Hash identifier: iImZbrEEdCJfen2HSD5wKXuqFmXsk7wV6+4iVMuTuJY= Subject key identifier: 8F:70:4B:6C:A4:D5:4E:28:D3:38:41:8A:E5:AB:A4:C8:B8:D7:C2:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43223123DF9EC1B12226FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 173.187.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:23:12:3d:f9:ec:1b:12:22:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=39b65ca6-9201-4bef-99d3-ad51cd13dc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:73:2f:96:d3:9e:05:4a:bb:b2:7c:c6:cb:bd: d9:08:1c:8f:9a:4e:fa:65:0f:44:2b:98:36:5d:e1: d7:be:2b:d6:1f:b4:2c:d3:94:06:e2:50:aa:b4:d5: 0d:1a:25:5c:ba:6b:7d:55:3f:b5:ef:41:82:85:5c: e0:b9:1f:9e:4e:88:7c:3d:a4:d5:4d:10:24:d8:e9: 0a:56:16:20:ea:ef:fc:b1:b1:02:56:4c:76:a3:0f: cd:29:ae:e5:fa:dd:04:89:04:4f:ef:ff:ca:3f:1d: 59:e2:c3:13:7e:e2:e2:36:3e:29:1b:80:a8:c4:e1: 35:91:d9:85:52:75:9d:f4:23:e0:ee:d6:e3:9f:97: 42:36:75:06:fc:3b:00:ea:e5:ed:f1:cc:8f:f8:7b: e3:34:68:dd:9b:99:e4:1a:33:00:15:b7:eb:7b:9a: f6:f9:27:99:76:29:ad:42:f6:61:cc:76:08:2f:62: 62:91:8e:f9:b4:14:64:6b:f1:7f:17:a3:31:09:eb: 56:88:72:79:9b:92:2e:b6:5b:2f:ec:aa:7d:c9:f7: 02:b6:c3:39:c9:a0:f7:bd:64:f1:66:84:5f:92:64: 54:5d:c7:b1:64:f4:21:8b:d3:35:22:60:0a:9c:79: c9:6d:e9:a3:33:db:4c:84:ff:00:84:18:c6:98:01: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:70:4B:6C:A4:D5:4E:28:D3:38:41:8A:E5:AB:A4:C8:B8:D7:C2:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b5:fd:63:69:48:fe:cc:fe:19:e8:ad:79:98:cd:3a:d1:96: d2:8e:9a:ac:da:61:eb:5f:7d:b0:1d:e4:0e:1d:c4:26:7d:9b: 70:6c:ee:47:20:7c:46:13:a1:2d:0b:51:92:f6:2f:6e:2c:76: c8:5a:00:f1:e6:19:8a:4b:24:f1:fe:e0:97:32:f0:d8:f9:b5: b3:f6:75:7b:60:df:b1:0f:6e:58:91:d0:08:57:28:46:26:03: 58:a8:75:b1:34:c5:15:d1:ff:16:99:e4:62:03:fb:27:48:98: bf:b3:01:43:55:e9:ca:ce:7a:ae:11:34:bc:98:b1:61:8b:23: ac:66:25:a6:e6:e9:f9:c5:a2:fb:b7:dd:1f:77:50:b7:b5:56: 23:91:f6:d1:df:b9:37:9a:ef:b8:5c:c6:86:68:a0:df:b1:dd: 44:7a:93:90:61:a1:1a:75:9e:34:4a:dc:82:22:61:d6:71:16: cf:df:97:3a:66:5f:52:b5:d2:c9:e6:ba:57:10:f5:bc:09:bc: b7:ec:d8:4a:34:d4:dc:d4:a6:37:3b:7e:2e:e2:ad:8a:0a:12: 74:34:9e:02:19:28:8b:e1:b2:b5:67:48:10:e1:1a:b7:ae:71: 10:32:e5:c2:03:a3:fc:30:9a:7a:af:c2:cf:35:68:1b:0e:37: 76:e2:51:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMiMSPfnsGxIib8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MzliNjVjYTYtOTIwMS00YmVmLTk5ZDMtYWQ1MWNkMTNkYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HMvltOeBUq7snzGy73ZCByPmk76ZQ9EK5g2 XeHXvivWH7Qs05QG4lCqtNUNGiVcumt9VT+170GChVzguR+eToh8PaTVTRAk2OkK VhYg6u/8sbECVkx2ow/NKa7l+t0EiQRP7//KPx1Z4sMTfuLiNj4pG4CoxOE1kdmF UnWd9CPg7tbjn5dCNnUG/DsA6uXt8cyP+HvjNGjdm5nkGjMAFbfre5r2+SeZdimt QvZhzHYIL2JikY75tBRka/F/F6MxCetWiHJ5m5Iutlsv7Kp9yfcCtsM5yaD3vWTx ZoRfkmRUXcexZPQhi9M1ImAKnHnJbemjM9tMhP8AhBjGmAFWQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9wS2yk1U4o0zhBiuWrpMi418KoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcwMTFjZjctOTNiZi0z ZjI0LWE2NmEtNDhkMTI0YzI1MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC1/WNpSP7M/hnorXmYzTrRltKOmqzaYetffbAd5A4dxCZ9m3Bs7kcg fEYToS0LUZL2L24sdshaAPHmGYpLJPH+4Jcy8Nj5tbP2dXtg37EPbliR0AhXKEYm A1iodbE0xRXR/xaZ5GID+ydImL+zAUNV6crOeq4RNLyYsWGLI6xmJabm6fnFovu3 3R93ULe1ViOR9tHfuTea77hcxoZooN+x3UR6k5BhoRp1njRK3IIiYdZxFs/flzpm X1K10snmulcQ9bwJvLfs2Eo01NzUpjc7fi7irYoKEnQ0ngIZKIvhsrVnSBDhGreu cRAy5cIDo/wwmnqvws81aBsON3biUaE= -----END CERTIFICATE-----Generated at Thu Aug 27 10:33:00 2026 by rpki-client