$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa File: 45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa (raw, json) Hash identifier: 4kVbsPSsfpIzFMKFB/ompS7l2mkjwSP1h6WGZIa+2YQ= Subject key identifier: BE:03:42:57:94:EF:2A:80:25:94:9F:40:AF:B2:CC:A2:EF:D9:90:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1D22BBF249324EE6081E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 173.191.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:d2:2b:bf:24:93:24:ee:60:81:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=cd0d336c-40cd-4470-9ca8-4c49a7baced1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:79:f5:55:80:63:06:34:9e:05:72:9b:a2: 48:e5:c4:22:3e:b2:57:b2:f7:2f:c9:f2:6a:b2:55: e2:0c:95:b3:a5:f0:f1:c4:65:e7:7c:7e:e8:8e:a8: 2b:27:57:af:3e:21:fc:f9:ff:94:c2:0e:2a:77:8c: 91:4f:29:82:dc:0c:cc:74:73:bd:c9:83:c1:71:9c: cb:06:dd:f0:92:dc:dd:01:15:55:27:9a:df:e5:21: 27:a8:47:8e:4a:84:c7:20:7a:ed:75:1a:20:fa:63: 5a:c5:25:c9:91:67:61:30:c6:32:7b:62:f9:73:c0: 76:35:da:1d:c0:4d:4e:ab:d8:ae:da:4d:0b:2f:2c: dc:08:1b:2b:ee:61:30:f0:e5:58:41:fd:af:f6:c2: d1:f2:fb:e2:17:d5:fd:48:6f:62:fe:8a:10:2d:4b: 42:84:8f:f6:2d:1d:8f:97:12:05:04:6f:40:2a:1f: b9:2b:42:62:18:d4:0b:9e:dd:7b:20:5c:b0:0a:d9: 1b:f2:23:61:4e:a7:7d:c2:99:d1:4d:24:e2:99:1d: 09:56:68:b9:95:bc:7e:fe:62:77:70:25:b1:32:c0: 14:08:f1:ba:9e:10:58:5c:1a:26:45:6f:03:45:08: e6:fa:cc:95:31:65:7a:60:ac:d7:4c:74:b1:47:27: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:03:42:57:94:EF:2A:80:25:94:9F:40:AF:B2:CC:A2:EF:D9:90:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:aa:a2:b3:f4:2f:da:1e:14:00:c2:7e:83:cb:f8:56:c8:f4: ca:2c:b9:a5:04:ee:01:9a:60:45:60:cc:ce:9a:4a:8c:18:9a: 0b:05:b2:6b:4c:88:78:e8:20:da:56:82:e7:09:f5:15:32:25: 2a:ec:82:31:3f:cb:39:91:69:0a:d1:98:b5:f9:78:95:7e:48: d1:d8:a6:23:2f:1f:3b:96:42:d7:99:4f:9d:17:23:0e:e4:9c: 45:d4:e8:c4:4e:74:9f:85:e3:67:2b:9c:28:7b:2b:5a:03:18: 7a:be:25:02:96:ad:6d:09:f4:ae:c1:9b:f7:ec:37:16:a8:f2: 45:58:10:99:24:52:79:97:b8:ca:7a:a7:36:f1:12:14:11:3b: 53:f0:65:f9:0f:1e:a8:a8:31:95:20:61:32:74:1f:91:67:88: 32:83:ce:c6:a2:b4:80:66:e2:81:5a:c2:4d:a9:a0:35:5e:9b: 26:70:2c:bf:aa:c5:c5:ef:c4:e2:97:5a:26:af:5a:7c:f7:a4: 89:8f:21:f8:a7:0c:76:fc:25:44:a4:85:3f:93:ff:2b:00:91: 92:0d:a9:3c:0f:ea:9b:30:ab:e0:f3:f4:c5:76:99:bf:fb:11: 96:b5:90:a7:e0:e9:72:9a:9d:93:3f:0a:27:b9:39:77:78:e4: fd:1b:5a:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysdIrvySTJO5ggeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk Y2QwZDMzNmMtNDBjZC00NDcwLTljYTgtNGM0OWE3YmFjZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlZ59VWAYwY0ngVym6JI5cQiPrJXsvcvyfJq slXiDJWzpfDxxGXnfH7ojqgrJ1evPiH8+f+Uwg4qd4yRTymC3AzMdHO9yYPBcZzL Bt3wktzdARVVJ5rf5SEnqEeOSoTHIHrtdRog+mNaxSXJkWdhMMYye2L5c8B2Ndod wE1Oq9iu2k0LLyzcCBsr7mEw8OVYQf2v9sLR8vviF9X9SG9i/ooQLUtChI/2LR2P lxIFBG9AKh+5K0JiGNQLnt17IFywCtkb8iNhTqd9wpnRTSTimR0JVmi5lbx+/mJ3 cCWxMsAUCPG6nhBYXBomRW8DRQjm+syVMWV6YKzXTHSxRyf9NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4DQleU7yqAJZSfQK+yzKLv2ZBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlMWZjMGYtZjllNC0z MjQzLTgzYTgtNTMwYmE0YTE4ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyqorP0L9oeFADCfoPL+FbI9MosuaUE7gGaYEVgzM6aSowYmgsFsmtM iHjoINpWgucJ9RUyJSrsgjE/yzmRaQrRmLX5eJV+SNHYpiMvHzuWQteZT50XIw7k nEXU6MROdJ+F42crnCh7K1oDGHq+JQKWrW0J9K7Bm/fsNxao8kVYEJkkUnmXuMp6 pzbxEhQRO1PwZfkPHqioMZUgYTJ0H5FniDKDzsaitIBm4oFawk2poDVemyZwLL+q xcXvxOKXWiavWnz3pImPIfinDHb8JUSkhT+T/ysAkZINqTwP6pswq+Dz9MV2mb/7 EZa1kKfg6XKanZM/Cie5OXd45P0bWpU= -----END CERTIFICATE-----Generated at Thu Aug 27 09:50:30 2026 by rpki-client