$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa File: 4daf1a7a-da43-3166-9acd-71ed2a62e445.roa (raw, json) Hash identifier: ZHyACvzkAOtccxeB+jQpu/mHFNWVebnb7EUu544eW8w= Subject key identifier: F9:A1:85:0B:51:F7:5A:DB:88:89:04:9D:14:E7:27:B8:64:25:D3:2C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CCA9330D9F8A6FE6ED40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 216.135.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cc:a9:33:0d:9f:8a:6f:e6:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=7997500d-2e76-4db6-ade0-7607a8f547d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:67:90:1d:be:3e:80:cc:a6:60:22:e9:d6: 36:ff:28:1c:3f:7f:d0:ac:89:9b:d6:02:1c:49:50: c4:9f:84:fd:6d:43:6c:50:26:ee:5d:0d:3b:3d:bb: e6:b3:98:7d:c7:35:9f:df:a5:72:61:f1:16:f4:61: 0e:79:9e:31:a3:dd:ba:44:d8:e9:53:58:14:ee:f9: 7b:8a:b6:f6:a3:41:47:2b:10:11:41:bf:d3:c8:93: 01:05:4d:00:94:b7:7c:1c:86:0a:6f:77:5b:82:67: f7:5a:14:50:a0:78:0c:2a:b0:1d:5f:1c:54:42:fa: b3:c6:ea:c9:3b:85:ae:34:68:33:cf:b9:23:57:16: 01:6e:13:ff:c5:52:1f:29:13:f8:44:5b:c5:5d:b5: 08:ce:21:bf:97:72:a9:9c:42:b5:34:c6:10:ce:48: e4:3e:99:69:2f:21:39:6e:34:1b:76:c9:ba:de:a2: c2:ec:62:e4:b6:b4:96:4c:b8:6d:fb:9e:21:48:24: 72:74:16:0d:72:42:1f:ab:5b:8c:8f:9c:17:51:b8: f3:17:ca:41:cd:ec:b5:a2:22:02:05:bd:0c:38:e0: b5:42:5f:fc:45:28:6f:1d:e6:3f:69:23:5f:a6:05: 96:e4:92:10:a2:29:b7:f8:b0:39:c7:cb:0c:10:bf: d2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A1:85:0B:51:F7:5A:DB:88:89:04:9D:14:E7:27:B8:64:25:D3:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.135.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d8:5a:01:c2:f9:87:df:17:b9:d1:0a:91:70:c0:51:5f:54: 4b:fe:04:8d:dd:50:d3:ca:4d:9d:60:92:f9:ee:95:44:ff:15: ab:9c:8e:87:a9:95:9d:13:23:02:7e:21:3b:d2:d7:4b:ba:e1: b3:56:69:60:07:96:e1:14:0c:92:a5:d0:0a:95:47:3e:a7:1a: 52:66:a6:07:75:51:b3:c5:3c:a8:05:d8:65:11:cf:23:6f:e4: 0f:df:3e:b5:32:d2:5f:e9:a9:d2:bf:60:b5:6a:48:fb:e5:97: 22:6e:b9:93:88:e7:1e:c3:09:81:f1:b1:74:ea:8b:e2:71:53: a8:cb:1e:39:2d:25:96:92:c8:2b:1a:30:a8:6c:c8:01:cb:f2: d6:26:15:5a:6e:58:a3:56:46:fc:47:27:a0:ee:75:cb:ac:e0: 5b:ee:01:0d:2f:45:7c:5e:4f:44:ca:91:07:a2:4e:f7:7d:35: 1f:cb:a8:3c:8b:44:a4:24:da:9d:8a:dd:90:b3:23:35:cb:41: cc:50:c0:93:14:88:36:a5:bf:66:86:a5:26:f8:bb:07:9b:f2: 15:43:9a:b9:df:82:5f:1c:d7:62:9a:0c:2b:b4:3a:b0:96:b7: 28:bf:e2:1e:03:77:be:a2:91:89:b3:06:c4:66:d7:65:92:8d: 54:36:4b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscypMw2fim/m7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk Nzk5NzUwMGQtMmU3Ni00ZGI2LWFkZTAtNzYwN2E4ZjU0N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHtnkB2+PoDMpmAi6dY2/ygcP3/QrImb1gIc SVDEn4T9bUNsUCbuXQ07Pbvms5h9xzWf36VyYfEW9GEOeZ4xo926RNjpU1gU7vl7 irb2o0FHKxARQb/TyJMBBU0AlLd8HIYKb3dbgmf3WhRQoHgMKrAdXxxUQvqzxurJ O4WuNGgzz7kjVxYBbhP/xVIfKRP4RFvFXbUIziG/l3KpnEK1NMYQzkjkPplpLyE5 bjQbdsm63qLC7GLktrSWTLht+54hSCRydBYNckIfq1uMj5wXUbjzF8pBzey1oiIC Bb0MOOC1Ql/8RShvHeY/aSNfpgWW5JIQoim3+LA5x8sMEL/SCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmhhQtR91rbiIkEnRTnJ7hkJdMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRhZjFhN2EtZGE0My0z MTY2LTlhY2QtNzFlZDJhNjJlNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2IcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzYWgHC+YffF7nRCpFwwFFfVEv+BI3dUNPKTZ1gkvnulUT/Faucjoep lZ0TIwJ+ITvS10u64bNWaWAHluEUDJKl0AqVRz6nGlJmpgd1UbPFPKgF2GURzyNv 5A/fPrUy0l/pqdK/YLVqSPvllyJuuZOI5x7DCYHxsXTqi+JxU6jLHjktJZaSyCsa MKhsyAHL8tYmFVpuWKNWRvxHJ6Dudcus4FvuAQ0vRXxeT0TKkQeiTvd9NR/LqDyL RKQk2p2K3ZCzIzXLQcxQwJMUiDalv2aGpSb4uweb8hVDmrnfgl8c12KaDCu0OrCW tyi/4h4Dd76ikYmzBsRm12WSjVQ2SxY= -----END CERTIFICATE-----Generated at Thu Aug 27 10:34:42 2026 by rpki-client