$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a32451-9a04-30e0-93d2-78eeb318af4d.roa File: 39a32451-9a04-30e0-93d2-78eeb318af4d.roa (raw, json) Hash identifier: akh0AUDur19bpf+3AC/EkBh/LIuKqoARmnisfXiOquo= Subject key identifier: 74:A8:85:1F:F9:48:5B:41:D6:00:35:E8:3D:BF:5D:A5:31:B1:1D:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E241902D9C91DA5F7000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a32451-9a04-30e0-93d2-78eeb318af4d.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 65.23.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e2:41:90:2d:9c:91:da:5f:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=72bf8171-b9ae-4353-b1f0-e51afcc6c45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:14:4d:04:c8:04:5d:e2:19:6f:d6:89:f9:e0: 58:64:21:73:82:be:9d:6c:85:e2:00:e0:9a:16:4b: 66:ee:0e:71:c0:ab:20:8c:52:25:85:da:74:d7:b8: 37:fd:32:1b:09:96:3b:4e:a5:52:f6:07:97:e2:ad: 99:b3:bc:db:40:fd:07:a0:b9:78:04:5a:17:59:c5: 24:f7:f5:72:77:e1:f4:4e:2f:e3:11:2c:a2:1c:94: 72:b2:9f:e0:ac:fc:51:e2:0c:82:ab:bf:2e:48:45: 37:4a:e6:29:c0:02:31:ec:84:e2:67:2b:6a:fb:7f: 01:1d:fd:6f:69:43:d9:b1:9e:76:ef:39:ae:7f:d1: 44:31:ae:6e:20:5a:4b:58:25:0c:ff:61:21:89:2e: ac:f0:c6:f3:63:36:9d:ee:80:da:9a:75:7c:16:23: 2c:46:d1:ba:07:26:27:f4:e1:f2:77:13:02:49:4a: af:04:5d:90:cb:21:36:56:6a:79:3a:da:2d:63:82: 06:5e:57:df:da:95:fc:d2:8f:b6:ab:97:48:d5:6a: d2:0e:46:a8:23:8e:1a:d2:11:c2:62:c0:70:d7:02: 56:0c:86:7c:99:cb:7d:69:5f:9d:a6:b2:8b:71:51: e1:40:54:68:a7:8e:37:26:1f:9c:14:51:46:a8:79: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A8:85:1F:F9:48:5B:41:D6:00:35:E8:3D:BF:5D:A5:31:B1:1D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a32451-9a04-30e0-93d2-78eeb318af4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 65.23.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f2:1b:db:75:9e:cc:7c:fe:bd:88:ff:ce:4d:de:be:de:8c: c5:84:42:82:44:25:fd:94:36:47:74:7c:13:db:8e:e2:16:b6: d2:b1:3b:53:c6:16:10:24:e5:c8:78:11:18:23:29:64:a6:c6: 02:3b:01:3a:14:59:b8:34:70:c6:85:a7:d0:10:3d:db:a3:cb: 96:18:ec:6b:1f:61:f3:9f:82:ca:11:24:5b:a8:2d:5a:69:cd: ac:2b:ca:97:07:d6:c2:ec:64:9f:16:e1:9d:2c:2a:c3:31:70: aa:6e:04:ba:84:c1:79:8c:f6:f4:c2:41:7f:17:9f:2e:62:57: da:1f:8e:d1:20:31:18:c9:23:fb:04:94:20:bc:4a:2e:bf:ab: fb:60:a9:6c:7b:cb:86:c0:39:0a:ce:aa:e0:34:04:8d:66:d7: 66:ed:29:bf:16:bb:d6:73:00:f5:fd:a0:f9:ac:b8:7d:4e:e6: 2d:7f:c5:da:05:06:c5:85:b6:ab:bb:9a:b9:b0:c0:e9:1a:d9: b8:74:f3:b1:56:13:25:e8:c0:01:15:df:ec:9f:1d:99:d1:e2: c7:dd:7f:b6:ca:f4:72:c1:5b:7b:bf:f9:88:91:d4:55:5e:9c: f0:6b:6d:4e:a2:48:b6:79:e4:26:73:4d:52:02:a9:76:5a:b1: d1:a7:18:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseJBkC2ckdpfcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NzJiZjgxNzEtYjlhZS00MzUzLWIxZjAtZTUxYWZjYzZjNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghRNBMgEXeIZb9aJ+eBYZCFzgr6dbIXiAOCa Fktm7g5xwKsgjFIlhdp017g3/TIbCZY7TqVS9geX4q2Zs7zbQP0HoLl4BFoXWcUk 9/Vyd+H0Ti/jESyiHJRysp/grPxR4gyCq78uSEU3SuYpwAIx7ITiZytq+38BHf1v aUPZsZ527zmuf9FEMa5uIFpLWCUM/2EhiS6s8MbzYzad7oDamnV8FiMsRtG6ByYn 9OHydxMCSUqvBF2QyyE2Vmp5OtotY4IGXlff2pX80o+2q5dI1WrSDkaoI44a0hHC YsBw1wJWDIZ8mct9aV+dprKLcVHhQFRop443Jh+cFFFGqHknqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSohR/5SFtB1gA16D2/XaUxsR1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzlhMzI0NTEtOWEwNC0z MGUwLTkzZDItNzhlZWIzMThhZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQRcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3yG9t1nsx8/r2I/85N3r7ejMWEQoJEJf2UNkd0fBPbjuIWttKxO1PG FhAk5ch4ERgjKWSmxgI7AToUWbg0cMaFp9AQPdujy5YY7GsfYfOfgsoRJFuoLVpp zawrypcH1sLsZJ8W4Z0sKsMxcKpuBLqEwXmM9vTCQX8Xny5iV9ofjtEgMRjJI/sE lCC8Si6/q/tgqWx7y4bAOQrOquA0BI1m12btKb8Wu9ZzAPX9oPmsuH1O5i1/xdoF BsWFtqu7mrmwwOka2bh087FWEyXowAEV3+yfHZnR4sfdf7bK9HLBW3u/+YiR1FVe nPBrbU6iSLZ55CZzTVICqXZasdGnGI0= -----END CERTIFICATE-----Generated at Thu Aug 27 16:09:47 2026 by rpki-client