$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cf3d5a6-26ab-3724-9305-ddaa6ee11815.roa File: 4cf3d5a6-26ab-3724-9305-ddaa6ee11815.roa (raw, json) Hash identifier: b5Bw9CCpi+Ffh6uXl1HJntVV3+eo560ZEjh6B8NRTBQ= Subject key identifier: 0D:C5:46:B6:2F:9B:4B:17:37:2E:87:B4:91:52:F5:B1:86:C0:50:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED861E6024D0DA0B7056CDD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cf3d5a6-26ab-3724-9305-ddaa6ee11815.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 173.186.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:e6:02:4d:0d:a0:b7:05:6c:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=109c03ca-a44c-483d-a0c9-c38eca70ccb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:c2:0e:ff:6d:4c:92:be:e9:8c:17:a4:a5: 32:16:85:73:27:db:bc:a9:cc:52:18:f8:73:c6:14: 8b:ba:9e:2c:ca:4f:bd:4d:07:64:85:f4:a8:e1:95: 23:dd:36:e6:8a:49:7f:e9:fd:a0:b3:0a:4f:1e:94: b4:f5:31:a3:a6:10:bd:a8:c0:d2:00:77:6a:ff:f5: d5:87:7a:40:fb:0e:1d:f8:69:a4:1d:45:5c:6f:cb: 52:b7:ac:ac:9f:b8:15:a2:ac:6b:79:c1:57:4a:23: 3e:0e:52:c5:89:f8:b0:f9:ca:9c:6a:94:e4:c2:35: 03:db:84:c9:e5:3d:08:8f:a1:29:41:1d:a8:b9:86: ab:ee:5d:0a:80:b4:bf:18:10:be:3f:3a:83:dd:60: 5d:a5:81:8f:53:07:2e:09:85:c1:61:50:2d:16:2b: ea:f4:15:aa:71:38:ee:95:b1:fd:17:01:83:c6:5b: 8e:8f:0a:ad:db:d5:9d:23:f6:cc:2f:4d:15:73:97: 1c:b4:a1:0c:86:f6:23:fc:3c:e4:8c:64:21:08:3f: 11:44:d9:32:ac:7b:13:78:ee:b6:fd:31:1b:33:d7: 9f:1f:cf:1e:83:50:01:2c:18:a3:d1:a8:69:56:c1: 93:26:b7:6f:bb:79:94:4c:22:b9:35:59:05:c0:03: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C5:46:B6:2F:9B:4B:17:37:2E:87:B4:91:52:F5:B1:86:C0:50:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cf3d5a6-26ab-3724-9305-ddaa6ee11815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e4:87:a3:26:34:d7:a5:b3:73:2b:ca:3e:fa:1a:1a:59:5c: 99:3a:08:4d:c6:e3:c7:7a:b5:8e:84:8d:8d:8c:be:9f:c5:63: 29:a3:51:8f:d5:5c:b4:91:85:fe:12:ec:48:3f:5d:16:47:02: 62:9d:22:70:20:86:04:ac:b7:49:4f:77:4f:87:7d:2f:3d:71: 4e:07:cd:67:0e:cd:ad:ae:9f:72:df:5a:33:16:48:2e:aa:73: 8c:47:d1:15:a9:83:79:4f:44:91:7f:27:6c:93:bd:3c:a8:f7: 5c:8f:fd:41:e6:9f:5e:6d:c9:2c:8a:67:26:fb:24:74:97:ab: 29:e0:b1:9e:8c:52:68:f5:39:a7:ca:85:0e:13:b4:88:d9:ff: de:e5:d2:1f:30:bf:4a:1a:04:29:db:8b:d9:97:e2:12:e1:de: eb:13:2d:b7:00:0b:b3:5c:9e:2d:2d:e6:8d:af:79:f1:96:e5: 70:66:1d:a9:02:95:8f:61:9a:6f:46:fb:5b:10:0b:95:40:25: 88:cc:63:3e:cc:19:b4:d2:2f:1f:a2:a0:23:6e:99:dd:6d:d0: 12:a6:df:be:48:76:71:d2:81:eb:af:d4:c3:88:0c:74:d4:d3: 39:90:00:94:91:62:53:5f:36:19:de:3c:79:9a:1d:62:ba:14: 30:05:28:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYeYCTQ2gtwVs3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MTA5YzAzY2EtYTQ0Yy00ODNkLWEwYzktYzM4ZWNhNzBjY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFzCDv9tTJK+6YwXpKUyFoVzJ9u8qcxSGPhz xhSLup4syk+9TQdkhfSo4ZUj3Tbmikl/6f2gswpPHpS09TGjphC9qMDSAHdq//XV h3pA+w4d+GmkHUVcb8tSt6ysn7gVoqxrecFXSiM+DlLFifiw+cqcapTkwjUD24TJ 5T0Ij6EpQR2ouYar7l0KgLS/GBC+PzqD3WBdpYGPUwcuCYXBYVAtFivq9BWqcTju lbH9FwGDxluOjwqt29WdI/bML00Vc5cctKEMhvYj/DzkjGQhCD8RRNkyrHsTeO62 /TEbM9efH88eg1ABLBij0ahpVsGTJrdvu3mUTCK5NVkFwAPONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3FRrYvm0sXNy6HtJFS9bGGwFDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNmM2Q1YTYtMjZhYi0z NzI0LTkzMDUtZGRhYTZlZTExODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErboQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbkh6MmNNels3Mryj76GhpZXJk6CE3G48d6tY6EjY2Mvp/FYymjUY/V XLSRhf4S7Eg/XRZHAmKdInAghgSst0lPd0+HfS89cU4HzWcOza2un3LfWjMWSC6q c4xH0RWpg3lPRJF/J2yTvTyo91yP/UHmn15tySyKZyb7JHSXqyngsZ6MUmj1OafK hQ4TtIjZ/97l0h8wv0oaBCnbi9mX4hLh3usTLbcAC7Ncni0t5o2vefGW5XBmHakC lY9hmm9G+1sQC5VAJYjMYz7MGbTSLx+ioCNumd1t0BKm375IdnHSgeuv1MOIDHTU 0zmQAJSRYlNfNhnePHmaHWK6FDAFKNE= -----END CERTIFICATE-----Generated at Thu Aug 27 12:33:10 2026 by rpki-client