$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa File: 3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa (raw, json) Hash identifier: UTtMWmvsXVlIPJsZ92ZJZlyoImCe3Q33xhPOyMpMtSw= Subject key identifier: 3B:89:22:BE:1E:34:24:63:94:89:DC:65:DA:84:0A:CE:11:36:AA:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78FAAFC7C579BB69B31A1A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 216.96.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:aa:fc:7c:57:9b:b6:9b:31:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2c0cfdfb-26a0-41c1-8ce0-05bc0cd28278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:58:f1:96:8d:b6:84:ea:25:24:9e:93:33:d8: 1a:f3:b5:4b:11:ec:e0:d2:ff:d2:ed:48:d5:92:bf: 4c:37:a4:32:71:e3:0b:a8:ec:2a:92:04:6b:ad:6a: 4e:9f:5f:eb:1b:ec:a9:00:ec:58:ab:66:e7:c8:40: 65:87:86:0f:1d:6e:18:1c:37:00:83:2f:32:3d:82: 81:32:87:a9:a4:9a:ca:c0:c3:71:f1:8e:8b:f6:a6: 8e:8c:71:32:90:2c:30:50:37:64:08:25:41:f8:99: d6:0c:44:f8:c4:b8:c7:24:45:9d:65:6f:ad:d0:e0: 58:28:ed:c2:23:57:7f:3c:fe:9d:c1:fd:57:d3:5a: fa:d0:57:75:71:d6:7c:e2:6f:56:c0:10:d3:ef:1b: 48:1f:bc:02:d9:70:71:63:12:c0:d3:55:7a:6d:41: 47:47:c6:bc:3f:90:30:6d:87:03:be:fd:9f:e5:5d: ba:17:e8:df:3b:c1:5a:0e:14:72:fc:99:f6:12:d3: 80:dc:6e:27:89:32:bf:7c:7c:0b:95:0a:6b:7b:64: 71:e3:bf:b4:dd:9e:73:29:43:8a:2a:29:31:c2:87: 49:f4:19:96:53:98:b6:f4:2d:60:87:c7:76:61:eb: 15:30:d7:c0:61:41:36:97:e1:d9:55:b1:38:d3:53: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:89:22:BE:1E:34:24:63:94:89:DC:65:DA:84:0A:CE:11:36:AA:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7d:a2:c5:f3:3d:ab:1e:6e:6e:6a:84:ef:21:1b:b5:f6:f6: f2:a5:5d:b1:58:29:2e:a9:30:95:ae:e5:e2:56:cb:de:94:56: 25:27:56:90:d1:dd:f1:a7:ed:42:8e:f1:1d:36:5d:ef:8e:d5: 7c:a7:db:fa:1d:f7:61:44:13:65:40:55:49:7c:51:47:d0:e7: 5a:e3:94:5b:31:50:69:90:bf:74:d4:33:96:84:dc:f7:74:aa: bd:e6:e2:44:34:9f:f9:72:ec:6b:83:c0:9e:46:a1:0e:22:6c: 10:27:1a:29:8b:fc:d6:38:df:e8:bd:07:f0:0c:b4:29:ed:84: d6:d1:67:52:13:7a:6d:3c:c4:97:fa:52:8d:c0:36:d4:47:e5: 6d:9c:bf:9a:53:f6:69:67:72:5e:47:eb:63:36:83:f2:88:a6: 9a:c4:3c:53:b6:d2:ec:e3:6a:cd:5a:2f:40:3c:fe:eb:c3:e4: da:a3:af:46:a6:38:42:2c:5e:97:72:c4:9e:06:ef:25:46:4b: c5:c6:a9:82:3f:c8:47:bf:e6:01:40:c2:7c:63:b8:6f:e3:d9: ee:46:70:84:a3:2b:d1:d7:5e:d0:42:df:b0:f8:fb:fc:37:a1: 9b:44:5d:6e:c3:67:17:30:0c:d4:b5:92:76:42:3d:d3:de:15: 5e:bc:38:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj6r8fFebtpsxoaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmMwY2ZkZmItMjZhMC00MWMxLThjZTAtMDViYzBjZDI4Mjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiljxlo22hOolJJ6TM9ga87VLEezg0v/S7UjV kr9MN6QyceMLqOwqkgRrrWpOn1/rG+ypAOxYq2bnyEBlh4YPHW4YHDcAgy8yPYKB MoeppJrKwMNx8Y6L9qaOjHEykCwwUDdkCCVB+JnWDET4xLjHJEWdZW+t0OBYKO3C I1d/PP6dwf1X01r60Fd1cdZ84m9WwBDT7xtIH7wC2XBxYxLA01V6bUFHR8a8P5Aw bYcDvv2f5V26F+jfO8FaDhRy/Jn2EtOA3G4niTK/fHwLlQpre2Rx47+03Z5zKUOK KikxwodJ9BmWU5i29C1gh8d2YesVMNfAYUE2l+HZVbE401McLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuJIr4eNCRjlIncZdqECs4RNqreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2E4NWI2NmQtNWIxNC0z ZjFiLTgxYTAtMDNmODhiOWIxZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt9osXzPasebm5qhO8hG7X29vKlXbFYKS6pMJWu5eJWy96UViUnVpDR 3fGn7UKO8R02Xe+O1Xyn2/od92FEE2VAVUl8UUfQ51rjlFsxUGmQv3TUM5aE3Pd0 qr3m4kQ0n/ly7GuDwJ5GoQ4ibBAnGimL/NY43+i9B/AMtCnthNbRZ1ITem08xJf6 Uo3ANtRH5W2cv5pT9mlncl5H62M2g/KIpprEPFO20uzjas1aL0A8/uvD5Nqjr0am OEIsXpdyxJ4G7yVGS8XGqYI/yEe/5gFAwnxjuG/j2e5GcISjK9HXXtBC37D4+/w3 oZtEXW7DZxcwDNS1knZCPdPeFV68ON0= -----END CERTIFICATE-----Generated at Thu Aug 27 11:38:34 2026 by rpki-client