$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa File: 3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa (raw, json) Hash identifier: bNqrmbx+j57ytnbOsRABEVgE3sqIQe+zN0uZUCuWG8Q= Subject key identifier: 42:46:35:60:44:6D:A7:34:C3:AA:5B:B5:7C:F4:9C:1E:C8:E7:F7:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E736A36066AF201A7A3E0E300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 209.255.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:36:06:6a:f2:01:a7:a3:e0:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=f2d49531-de4d-4026-818f-fa61e5fdb31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:89:7a:69:0c:76:3a:c3:ef:a1:61:62:fb: 2c:0e:2b:1f:de:cb:1c:5c:8d:13:05:0b:a6:36:52: 2e:ba:74:9d:24:a7:60:aa:68:07:17:45:03:36:21: 9d:73:1f:af:62:12:6a:8a:f8:58:9c:23:22:6f:28: b2:c3:2e:5e:3c:d8:be:f5:8f:f1:53:1f:a2:c8:75: 4d:46:5e:60:f8:6e:80:c9:64:39:c1:a7:34:60:11: 3c:98:08:60:70:ac:bf:b8:44:7c:54:6c:bc:e2:b9: 82:04:3a:45:20:aa:80:c1:5f:9a:01:8d:2e:e9:8d: 3b:8c:3a:f4:23:18:40:aa:47:85:29:e8:35:f5:b3: 5f:f9:cd:f0:74:b6:d2:08:0f:b7:e0:f1:46:06:b6: 37:61:2b:77:37:4e:c7:19:85:19:c6:bd:bb:80:58: dc:ce:78:0e:95:d9:80:9e:b0:e4:7e:94:bb:a9:c0: 0b:7f:c3:7c:87:88:be:e4:bf:64:30:62:64:63:c0: dd:c5:65:d0:8a:b0:af:ae:ed:c9:5a:99:57:10:0f: 5b:e5:50:8b:12:00:4b:7d:13:3c:86:93:e8:2f:8b: 95:2d:b3:8e:51:8a:56:ba:65:4f:fe:fb:18:19:83: 5b:8d:a1:00:f7:7e:bf:4d:60:be:07:d2:5e:6b:76: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:46:35:60:44:6D:A7:34:C3:AA:5B:B5:7C:F4:9C:1E:C8:E7:F7:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b4:c5:ad:4b:37:cb:52:b3:7c:a4:19:fc:34:bf:e5:0e:a5: 7f:0f:74:f6:c1:f0:38:dc:b2:14:7c:cf:e5:c0:c3:10:01:a7: cc:e6:fe:28:7e:3d:96:05:b0:a6:65:a2:47:e8:c9:78:35:f5: ed:7d:6d:88:6d:31:78:e9:ff:f2:c8:9b:f9:6a:14:43:b2:58: 77:5c:e4:78:33:68:48:9f:61:a9:45:a1:5a:cf:3f:a6:ac:07: 8f:33:1e:a4:77:13:e4:1a:85:ef:a8:17:e3:2b:21:48:b9:84: 2a:2b:60:6a:15:d5:ff:f6:20:51:79:16:83:75:82:aa:1e:83: a1:00:14:22:a9:42:65:da:63:29:a5:48:5a:97:7c:5e:5d:43: 37:99:bb:3b:8e:03:66:52:7e:7f:5b:e8:8f:a0:05:80:5c:07: 9d:77:22:5c:4b:20:1e:2d:79:fa:79:8a:f9:95:15:ee:0b:c1: c0:d0:b6:73:92:06:4e:1c:82:e2:85:ee:30:66:45:07:40:fa: ca:d8:60:f7:50:2f:e3:f1:f9:8c:46:a4:09:89:4c:bc:73:48: 74:d9:1f:a2:74:f0:e1:4f:92:7a:fd:0d:49:78:fe:16:65:55: 2e:08:0c:f4:27:81:20:8a:7a:05:96:fc:21:cd:4f:2c:e2:12: c9:4e:77:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajYGavIBp6Pg4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk ZjJkNDk1MzEtZGU0ZC00MDI2LTgxOGYtZmE2MWU1ZmRiMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTaJemkMdjrD76FhYvssDisf3sscXI0TBQum NlIuunSdJKdgqmgHF0UDNiGdcx+vYhJqivhYnCMibyiywy5ePNi+9Y/xUx+iyHVN Rl5g+G6AyWQ5wac0YBE8mAhgcKy/uER8VGy84rmCBDpFIKqAwV+aAY0u6Y07jDr0 IxhAqkeFKeg19bNf+c3wdLbSCA+34PFGBrY3YSt3N07HGYUZxr27gFjczngOldmA nrDkfpS7qcALf8N8h4i+5L9kMGJkY8DdxWXQirCvru3JWplXEA9b5VCLEgBLfRM8 hpPoL4uVLbOOUYpWumVP/vsYGYNbjaEA936/TWC+B9Jea3aWmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJGNWBEbac0w6pbtXz0nB7I5/fmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2ExNTZlZDYtZGNkZi0z MjU4LWE3ZjMtZGQ1OWEwMGIxYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG0xa1LN8tSs3ykGfw0v+UOpX8PdPbB8DjcshR8z+XAwxABp8zm/ih+ PZYFsKZlokfoyXg19e19bYhtMXjp//LIm/lqFEOyWHdc5HgzaEifYalFoVrPP6as B48zHqR3E+Qahe+oF+MrIUi5hCorYGoV1f/2IFF5FoN1gqoeg6EAFCKpQmXaYyml SFqXfF5dQzeZuzuOA2ZSfn9b6I+gBYBcB513IlxLIB4tefp5ivmVFe4LwcDQtnOS Bk4cguKF7jBmRQdA+srYYPdQL+Px+YxGpAmJTLxzSHTZH6J08OFPknr9DUl4/hZl VS4IDPQngSCKegWW/CHNTyziEslOd/0= -----END CERTIFICATE-----Generated at Mon Jul 13 05:50:59 2026 by rpki-client