$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa File: 43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa (raw, json) Hash identifier: vqcj4EzrcQnxfNCdQDbqgtXuwjVx4TCArxjLaTjSpik= Subject key identifier: AE:1F:8F:BE:3C:12:60:85:19:BD:7A:5C:60:F2:68:3B:5D:8A:AC:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C67C73CA4F8816CCBE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 64.206.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c6:7c:73:ca:4f:88:16:cc:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=54720364-fb13-4c68-b361-86f5bb8d172b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:a7:8c:69:c6:2f:f5:51:23:ea:aa:62:68: 98:d5:a0:c2:cc:63:72:50:77:e2:72:2e:86:d7:c9: 13:73:50:61:93:82:97:fb:4d:2d:be:e6:14:10:d6: 24:52:f1:65:10:1f:d7:ed:33:00:08:67:ef:4b:b2: ad:20:cd:92:c1:66:5e:48:79:96:ca:85:ec:27:15: 5b:0d:49:28:5a:60:1c:d3:bd:42:c5:5c:75:42:3c: ec:08:70:5e:bd:d0:e7:c4:07:be:ad:87:6c:55:07: b6:15:19:5f:40:16:ad:9f:03:ee:81:ad:95:fb:d7: f8:84:0e:9f:1f:f5:89:cf:b5:da:14:55:18:0a:b1: f5:10:91:64:f0:a9:a8:61:39:14:1b:d5:95:f9:b2: af:3f:05:30:f2:24:97:5c:a0:7f:dd:94:77:e8:84: ec:67:ff:e9:81:7a:01:61:d5:ce:e7:ca:9d:68:cf: 2b:e5:f5:fd:0c:af:06:92:b8:a4:6f:7c:ec:64:ec: f6:4f:0e:79:fa:c3:a1:10:6c:4d:18:0c:76:01:e0: 0e:6a:8f:7e:d2:01:b3:d0:9e:14:b3:37:bb:ca:95: dd:2a:b6:37:6d:f8:87:c1:57:af:2c:8b:43:1c:a8: 8d:f4:96:c8:49:48:43:36:46:51:f9:94:a0:0b:69: e7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1F:8F:BE:3C:12:60:85:19:BD:7A:5C:60:F2:68:3B:5D:8A:AC:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:99:07:47:f9:fa:1e:ff:ba:55:98:47:bd:7f:60:83:79:cb: 64:43:e0:e3:75:a1:70:83:dc:dc:f6:d7:a8:18:30:1c:ba:b6: 3d:b2:da:39:a7:32:78:4c:ab:8c:a4:61:b8:0d:4c:e8:75:40: 46:dc:fa:da:81:a7:7b:94:13:a8:07:87:e5:24:a0:58:ac:f2: b1:d5:d5:c0:d9:1c:dc:0c:55:99:d5:16:18:42:b8:40:8b:cc: a3:38:cb:62:a3:48:83:f5:bd:2d:06:d6:cd:a4:32:f3:26:c0: 28:0a:fd:c5:b7:88:c4:2d:71:a8:bd:f3:f4:1a:26:4c:67:b5: 40:f5:40:de:15:9f:b2:12:65:c3:24:aa:e3:b4:b4:a7:73:95: 50:2f:87:2b:89:49:8d:6c:db:7a:77:ca:24:6e:1e:9b:fe:ac: f0:be:47:6b:c4:10:f8:06:5d:30:45:3e:19:3c:bf:17:40:ec: a9:b4:9e:08:80:d0:10:7c:a8:20:f0:5d:24:12:f3:7e:43:bb: e0:ce:ed:d1:3a:b9:93:45:0a:2a:aa:02:b7:ce:13:38:5e:29: 93:e9:61:fa:b2:8c:f0:97:09:c3:7c:9a:bf:27:ea:fd:f2:eb: 22:e8:dd:e5:44:e3:6b:46:be:cc:6f:48:40:02:b4:35:be:d6: 44:82:1b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscZ8c8pPiBbMvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NTQ3MjAzNjQtZmIxMy00YzY4LWIzNjEtODZmNWJiOGQxNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq56njGnGL/VRI+qqYmiY1aDCzGNyUHfici6G 18kTc1Bhk4KX+00tvuYUENYkUvFlEB/X7TMACGfvS7KtIM2SwWZeSHmWyoXsJxVb DUkoWmAc071CxVx1QjzsCHBevdDnxAe+rYdsVQe2FRlfQBatnwPuga2V+9f4hA6f H/WJz7XaFFUYCrH1EJFk8KmoYTkUG9WV+bKvPwUw8iSXXKB/3ZR36ITsZ//pgXoB YdXO58qdaM8r5fX9DK8Gkrikb3zsZOz2Tw55+sOhEGxNGAx2AeAOao9+0gGz0J4U sze7ypXdKrY3bfiHwVevLItDHKiN9JbISUhDNkZR+ZSgC2nn5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4fj748EmCFGb16XGDyaDtdiqyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNmOGNiM2YtNjJlMC0z Mjk4LTg3NWUtZWI5NWQ3YmU0ZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGZB0f5+h7/ulWYR71/YIN5y2RD4ON1oXCD3Nz216gYMBy6tj2y2jmn MnhMq4ykYbgNTOh1QEbc+tqBp3uUE6gHh+UkoFis8rHV1cDZHNwMVZnVFhhCuECL zKM4y2KjSIP1vS0G1s2kMvMmwCgK/cW3iMQtcai98/QaJkxntUD1QN4Vn7ISZcMk quO0tKdzlVAvhyuJSY1s23p3yiRuHpv+rPC+R2vEEPgGXTBFPhk8vxdA7Km0ngiA 0BB8qCDwXSQS835Du+DO7dE6uZNFCiqqArfOEzheKZPpYfqyjPCXCcN8mr8n6v3y 6yLo3eVE42tGvsxvSEACtDW+1kSCG2Y= -----END CERTIFICATE-----Generated at Thu Aug 27 11:32:12 2026 by rpki-client