$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa File: 39a5344c-552c-36c7-a942-272e3d77ba5d.roa (raw, json) Hash identifier: h7MeTGkALg2MPa2wIzdru6WDoPn3+6/9AmWFeHwM1Lo= Subject key identifier: 2D:3B:E6:7D:0C:6F:29:C0:EE:D6:13:74:51:F5:13:61:C0:27:2E:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FE0F6DD44403C2D30A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.189.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fe:0f:6d:d4:44:03:c2:d3:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=c38f8e6d-0284-4295-b424-60ae10d34316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:19:fb:65:76:16:0d:bb:a1:79:2d:9d:54:1a: ad:7d:7c:ae:e3:e0:cc:0a:2f:25:cf:9a:3a:99:03: 97:86:fd:85:b5:9a:29:d8:55:8e:9f:ec:17:d3:37: 85:eb:c2:fb:e0:d2:98:3e:d0:b8:64:69:dd:e0:ae: e5:d5:31:2b:5a:1e:17:0c:8c:06:bd:c2:20:2b:97: b7:4f:7b:8c:98:c8:f6:0f:63:3d:b0:0d:a1:75:cd: fb:b3:04:b5:85:b9:44:de:20:15:af:da:44:96:81: bc:e6:3d:f0:14:b6:ba:2d:20:19:4e:86:58:0d:1f: 39:52:a3:9d:f3:41:e1:0d:5f:56:ef:64:87:64:43: 0f:92:45:11:9f:36:88:2b:06:f9:7b:ff:ab:19:9f: 77:e6:1c:90:45:f9:17:75:d6:4a:c3:84:8f:f7:03: d6:dd:93:8e:c0:d1:cd:95:9a:7f:37:60:24:7d:29: f6:8b:4d:1c:74:61:f2:d6:1d:09:29:9d:8e:98:fe: 28:75:d8:4b:06:04:91:47:c0:e4:a4:e8:25:51:55: 17:89:d2:a5:ff:fc:38:4c:85:b9:7b:4f:6e:91:1d: 82:48:14:4e:7f:3d:d3:45:a2:e8:38:60:bc:bd:75: 9b:95:94:3f:b1:80:2f:68:29:fe:9f:8e:78:11:57: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3B:E6:7D:0C:6F:29:C0:EE:D6:13:74:51:F5:13:61:C0:27:2E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:87:80:16:a3:de:2c:a0:c2:33:9b:17:9a:1d:28:04:9c:6f: 17:d9:c0:18:46:29:59:a3:27:04:da:e8:1b:ae:41:41:46:2c: c4:01:25:20:8f:40:2f:87:5d:af:a8:f2:a4:06:aa:93:24:c4: e4:f2:1a:f4:57:69:67:77:81:7e:b2:9a:40:03:f4:b2:a0:07: b9:68:8b:39:72:84:94:bf:61:1e:06:69:60:39:ce:ca:30:16: ae:6d:11:44:10:00:7e:93:fb:c2:2c:5e:2a:aa:86:37:0e:68: 09:d6:69:b0:91:42:8a:d4:7c:9d:e9:c8:e5:2e:e1:a3:bb:f6: 48:07:00:c8:e7:b5:a5:84:08:71:8c:9f:5d:5c:c0:e0:31:80: 76:20:25:dd:42:83:eb:84:f1:40:c6:38:5a:b9:86:cc:68:58: d1:4e:b0:ae:0b:a8:3c:e3:62:bc:ac:15:40:ce:34:ee:30:d6: ea:db:df:87:d0:79:79:a8:39:91:3c:39:9a:33:eb:06:b0:af: ab:31:24:75:46:bf:02:55:6b:2f:19:cb:32:15:c9:86:53:f2: b0:98:6e:52:4f:ca:b6:e7:ef:13:35:b8:cf:d9:f1:e7:d0:0d: 35:0a:90:e5:60:f3:05:07:c8:70:6b:41:b1:03:05:33:13:90: 03:2d:76:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5v4PbdREA8LTCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YzM4ZjhlNmQtMDI4NC00Mjk1LWI0MjQtNjBhZTEwZDM0MzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhn7ZXYWDbuheS2dVBqtfXyu4+DMCi8lz5o6 mQOXhv2FtZop2FWOn+wX0zeF68L74NKYPtC4ZGnd4K7l1TErWh4XDIwGvcIgK5e3 T3uMmMj2D2M9sA2hdc37swS1hblE3iAVr9pEloG85j3wFLa6LSAZToZYDR85UqOd 80HhDV9W72SHZEMPkkURnzaIKwb5e/+rGZ935hyQRfkXddZKw4SP9wPW3ZOOwNHN lZp/N2AkfSn2i00cdGHy1h0JKZ2OmP4oddhLBgSRR8DkpOglUVUXidKl//w4TIW5 e09ukR2CSBROfz3TRaLoOGC8vXWblZQ/sYAvaCn+n454EVcb4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC075n0MbynA7tYTdFH1E2HAJy5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzlhNTM0NGMtNTUyYy0z NmM3LWE5NDItMjcyZTNkNzdiYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiHgBaj3iygwjObF5odKAScbxfZwBhGKVmjJwTa6BuuQUFGLMQBJSCP QC+HXa+o8qQGqpMkxOTyGvRXaWd3gX6ymkAD9LKgB7loizlyhJS/YR4GaWA5zsow Fq5tEUQQAH6T+8IsXiqqhjcOaAnWabCRQorUfJ3pyOUu4aO79kgHAMjntaWECHGM n11cwOAxgHYgJd1Cg+uE8UDGOFq5hsxoWNFOsK4LqDzjYrysFUDONO4w1urb34fQ eXmoOZE8OZoz6wawr6sxJHVGvwJVay8ZyzIVyYZT8rCYblJPyrbn7xM1uM/Z8efQ DTUKkOVg8wUHyHBrQbEDBTMTkAMtdh8= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:08 2026 by rpki-client