$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d2c8883-62a3-3037-b4d3-ca57f2779966.roa File: 4d2c8883-62a3-3037-b4d3-ca57f2779966.roa (raw, json) Hash identifier: ku1dwymPKqDdbfVDXViMCiOO/v9YwE4ECiF7ok4Og/8= Subject key identifier: 3F:E3:D6:B3:22:F4:0A:BD:3D:26:95:B5:16:84:2D:B8:0A:E8:85:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA79196E0A3959B8043785C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d2c8883-62a3-3037-b4d3-ca57f2779966.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 174.131.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:96:e0:a3:95:9b:80:43:78:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=757ba3ef-167c-4ca4-9d03-77f4e3e49c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:3c:48:45:56:e5:fc:0a:db:c9:b6:d8:e5: 3e:6f:bf:15:33:37:95:8a:d8:59:2a:65:a8:75:0f: 36:7a:05:b0:7d:10:af:84:4e:cb:01:06:f9:ca:c0: 6b:c8:4c:1b:90:07:53:2a:e4:7b:24:9a:aa:30:49: b7:0a:8d:d8:c4:16:b1:2f:fa:fb:6e:a1:c2:00:d5: ec:48:f6:81:8c:49:b5:b1:0f:5a:3d:f2:e1:df:e2: 0e:d3:d9:76:4b:6f:42:2e:14:27:b1:e0:3a:92:93: 3d:87:99:ab:9d:3a:ee:f1:2e:ec:d2:ff:3f:8d:6f: 8d:bc:34:ac:06:f7:85:48:9c:60:67:9c:04:02:93: b0:b2:b3:ce:b4:e7:96:dd:51:34:54:95:ac:4c:d3: b0:22:f6:e6:0e:93:2e:6d:ff:af:43:69:3d:8a:48: 8a:2e:e3:cb:4c:cf:46:f3:48:11:67:80:6f:a9:38: 64:d1:c4:2a:19:db:27:87:23:2e:a7:e2:a1:08:f3: 31:26:b5:80:4b:20:63:73:ca:3f:8f:84:95:fc:71: 48:5f:33:4a:d7:e6:8b:2a:fd:ed:f3:c3:c1:6c:9b: e6:60:0d:3d:04:15:9e:5f:f9:7a:64:a0:41:d6:da: 86:0b:7b:81:cc:a2:8e:ba:58:82:88:c2:0a:33:41: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E3:D6:B3:22:F4:0A:BD:3D:26:95:B5:16:84:2D:B8:0A:E8:85:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d2c8883-62a3-3037-b4d3-ca57f2779966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d9:d4:a5:0d:12:cd:a1:db:e7:85:e6:ec:6d:94:e5:92:cf: 36:5b:b6:7f:2b:81:d8:a7:f6:db:7e:8d:6e:aa:b3:89:c6:8b: 7e:0f:21:ee:36:90:77:eb:f4:46:0d:c3:1e:ef:a6:ea:00:ea: 65:1c:74:6b:90:f9:eb:2d:90:f2:25:06:fe:62:82:c8:bf:de: 8e:76:ae:01:59:57:97:1b:96:e3:cd:15:cf:96:68:82:17:94: 34:5a:06:90:92:59:4a:29:27:be:fd:eb:73:60:76:ff:e7:d8: ee:15:f6:7b:73:1f:98:1f:86:8a:3a:2e:6f:ee:a8:e5:64:c0: 6a:3c:d6:e2:af:80:31:bc:8a:ae:61:fc:07:e7:94:e9:4d:50: 67:da:b1:55:2a:9a:a1:c9:d1:24:16:c0:35:76:54:1b:2f:2e: a0:1b:07:37:65:95:cd:63:ae:64:48:fa:37:b2:9f:77:1c:35: c1:c2:d4:fe:0f:4a:e1:3f:ea:97:1b:3b:81:be:58:22:4c:44: 4e:6d:e4:7e:7a:27:32:fd:2e:8b:8b:4a:65:7a:99:9b:23:d2: 6a:ea:66:b7:75:b0:28:7d:2e:3f:3b:c8:54:5c:05:d8:ea:d6: 18:f4:79:67:14:78:cd:92:6b:f6:a9:00:9e:05:96:56:20:38: e5:ab:af:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkZbgo5WbgEN4XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzU3YmEzZWYtMTY3Yy00Y2E0LTlkMDMtNzdmNGUzZTQ5YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqY8SEVW5fwK28m22OU+b78VMzeVithZKmWo dQ82egWwfRCvhE7LAQb5ysBryEwbkAdTKuR7JJqqMEm3Co3YxBaxL/r7bqHCANXs SPaBjEm1sQ9aPfLh3+IO09l2S29CLhQnseA6kpM9h5mrnTru8S7s0v8/jW+NvDSs BveFSJxgZ5wEApOwsrPOtOeW3VE0VJWsTNOwIvbmDpMubf+vQ2k9ikiKLuPLTM9G 80gRZ4BvqThk0cQqGdsnhyMup+KhCPMxJrWASyBjc8o/j4SV/HFIXzNK1+aLKv3t 88PBbJvmYA09BBWeX/l6ZKBB1tqGC3uBzKKOuliCiMIKM0G5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/j1rMi9Aq9PSaVtRaELbgK6IVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGQyYzg4ODMtNjJhMy0z MDM3LWI0ZDMtY2E1N2YyNzc5OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroNiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjZ1KUNEs2h2+eF5uxtlOWSzzZbtn8rgdin9tt+jW6qs4nGi34PIe42 kHfr9EYNwx7vpuoA6mUcdGuQ+estkPIlBv5igsi/3o52rgFZV5cbluPNFc+WaIIX lDRaBpCSWUopJ77963Ngdv/n2O4V9ntzH5gfhoo6Lm/uqOVkwGo81uKvgDG8iq5h /AfnlOlNUGfasVUqmqHJ0SQWwDV2VBsvLqAbBzdllc1jrmRI+jeyn3ccNcHC1P4P SuE/6pcbO4G+WCJMRE5t5H56JzL9LouLSmV6mZsj0mrqZrd1sCh9Lj87yFRcBdjq 1hj0eWcUeM2Sa/apAJ4FllYgOOWrrzo= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:42 2026 by rpki-client