$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa File: 3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa (raw, json) Hash identifier: NjP+cPO4Yjc7isALCgHq4gwhs/w/SnwNOGxgX2DVWT8= Subject key identifier: 0C:23:BD:B1:5F:13:60:B8:92:0A:CC:07:37:78:D0:FE:A5:C6:2B:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA79AB67CF7FC64DEDEFCD8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.188.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:b6:7c:f7:fc:64:de:de:fc:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=507a3118-4e6e-4810-9b21-1fe80b8eda97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:0f:54:00:d5:b6:db:c5:64:ab:c5:58:aa: 41:e9:4e:31:9b:a6:39:3a:87:52:ea:ba:fe:7a:34: 81:a2:ce:4e:74:c6:4b:30:d4:21:17:30:06:05:9c: 7c:25:95:a3:b8:d7:1c:46:b4:5d:4c:4d:af:bd:9a: 3f:92:fd:d7:de:2f:c4:0a:31:f8:f2:c3:89:c9:e0: b0:7a:30:04:44:21:cf:eb:5a:a0:f0:f3:f0:75:6c: 71:45:e6:0a:04:03:fb:96:af:96:df:aa:07:67:1b: 89:a7:75:43:f3:8e:73:81:fe:e2:84:8c:61:7c:c1: 4d:34:33:f7:1a:e4:a0:88:c1:19:5b:40:dc:60:3e: b7:38:84:ca:3e:7d:93:b7:18:65:01:16:36:44:96: d5:e7:41:0e:0c:63:ac:c6:66:d9:5c:80:75:e8:3b: f1:c1:8e:5a:68:27:ae:df:6a:e0:93:49:89:a3:ad: 39:ea:4f:1a:be:3d:cf:6e:7a:68:00:94:f4:9b:ff: cd:94:03:18:4d:38:5a:8e:5d:dc:7c:c4:5d:c3:85: 79:9a:d6:14:72:62:c6:ec:bc:f9:60:f9:76:10:63: 40:c9:8f:90:0e:eb:38:d3:01:c2:46:7b:42:41:bb: 92:da:d7:f4:b4:b8:49:04:65:09:b2:0b:cf:91:9f: b1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:23:BD:B1:5F:13:60:B8:92:0A:CC:07:37:78:D0:FE:A5:C6:2B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e4:27:78:6f:5c:eb:5c:cf:2c:39:27:9e:86:b7:af:92:1d: 30:32:d4:a8:66:43:b5:10:17:17:7c:b0:36:92:eb:be:ca:ff: 3c:bf:bd:5d:e2:cb:92:c8:60:21:d2:0e:b6:6a:9f:24:50:51: 54:c4:7a:e0:ea:76:29:ab:be:2a:74:b1:d0:7e:3e:11:ab:f1: 3a:8d:f7:02:22:6c:de:7e:14:7d:a8:98:6c:e0:f1:ec:7b:3e: c5:5f:f6:65:23:8f:4c:12:9c:ac:7b:ff:fd:62:86:36:b5:49: a0:db:0c:d7:46:17:c0:c5:f4:1c:18:d3:35:2a:f9:7c:a8:7d: 38:d2:68:71:35:e6:1b:0a:cb:4c:8c:59:85:23:b7:bd:99:b9: c2:e2:51:43:43:84:87:1c:de:54:0a:d9:1d:bd:29:27:13:99: 07:e5:cd:de:5a:53:6a:4c:7d:78:05:e7:6f:71:4a:31:10:f5: 16:fa:33:c0:f1:c7:ed:4f:30:f4:d5:26:a8:63:d5:73:6c:2b: c9:9d:2b:17:b5:39:f4:4c:e5:7a:10:37:24:af:21:35:4c:68: 94:9e:ed:ab:30:d8:e9:0d:2d:56:58:13:9e:b9:60:85:d9:c6: 69:a2:ba:af:ca:bf:fb:54:67:20:52:08:8a:00:e8:e2:e5:6a: 23:b5:23:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmrZ89/xk3t782MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTA3YTMxMTgtNGU2ZS00ODEwLTliMjEtMWZlODBiOGVkYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnkPVADVttvFZKvFWKpB6U4xm6Y5OodS6rr+ ejSBos5OdMZLMNQhFzAGBZx8JZWjuNccRrRdTE2vvZo/kv3X3i/ECjH48sOJyeCw ejAERCHP61qg8PPwdWxxReYKBAP7lq+W36oHZxuJp3VD845zgf7ihIxhfMFNNDP3 GuSgiMEZW0DcYD63OITKPn2TtxhlARY2RJbV50EODGOsxmbZXIB16DvxwY5aaCeu 32rgk0mJo6056k8avj3PbnpoAJT0m//NlAMYTThajl3cfMRdw4V5mtYUcmLG7Lz5 YPl2EGNAyY+QDus40wHCRntCQbuS2tf0tLhJBGUJsgvPkZ+x5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwjvbFfE2C4kgrMBzd40P6lxiuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2RhODI0ZWItYzQ4YS0z YjU4LThlMjUtYzFlNWYwNjRhMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXkJ3hvXOtczyw5J56Gt6+SHTAy1KhmQ7UQFxd8sDaS677K/zy/vV3i y5LIYCHSDrZqnyRQUVTEeuDqdimrvip0sdB+PhGr8TqN9wIibN5+FH2omGzg8ex7 PsVf9mUjj0wSnKx7//1ihja1SaDbDNdGF8DF9BwY0zUq+XyofTjSaHE15hsKy0yM WYUjt72ZucLiUUNDhIcc3lQK2R29KScTmQflzd5aU2pMfXgF529xSjEQ9Rb6M8Dx x+1PMPTVJqhj1XNsK8mdKxe1OfRM5XoQNySvITVMaJSe7asw2OkNLVZYE565YIXZ xmmiuq/Kv/tUZyBSCIoA6OLlaiO1I+c= -----END CERTIFICATE-----Generated at Thu Aug 27 12:29:06 2026 by rpki-client