$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e6baee3-afc5-3fac-a53e-bc99a45b0cbf.roa File: 4e6baee3-afc5-3fac-a53e-bc99a45b0cbf.roa (raw, json) Hash identifier: S9jquQe1RdmSdRqer1MxIpqtwehuOh+TC75GNmBOKNs= Subject key identifier: 34:DC:63:94:5D:7D:B8:AE:C0:13:F4:80:30:6C:B4:C4:D7:3E:0F:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78FD61C601A7F1BEC33E720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e6baee3-afc5-3fac-a53e-bc99a45b0cbf.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.191.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:d6:1c:60:1a:7f:1b:ec:33:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b849e29a-44c2-489d-a7d3-58b6cc2d4ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:c2:2e:54:99:65:b3:bb:e8:fa:26:c6:dd: 32:20:c8:81:1d:c9:8d:ca:f2:13:76:fe:6d:55:7c: f0:2b:a6:b2:60:ae:db:6e:5b:1a:e5:90:f1:09:29: ae:3e:b8:2b:57:93:09:4b:c0:1d:64:7c:50:33:cd: b9:91:be:af:f5:ff:28:35:8c:1a:c9:ca:04:3a:31: 10:73:74:69:04:9d:42:94:71:76:03:ab:fe:86:e6: 72:13:bf:9d:2a:c6:ef:d1:e2:ef:95:d7:8e:b1:11: df:ac:64:82:72:29:55:c5:d3:bb:aa:b8:aa:2c:10: 15:84:10:fb:01:5d:b3:61:09:0e:81:bb:58:d0:00: 57:0e:03:bc:f3:be:c9:a7:14:94:5a:d0:2b:c5:df: 97:4f:08:97:6e:27:3e:22:f6:d3:b3:d0:f0:c1:6b: 73:33:0e:a8:bc:77:c8:87:c2:5a:e6:55:01:a5:ad: 51:bf:a8:10:20:c8:a1:46:63:f3:f4:eb:98:21:c0: 46:52:96:d8:85:05:af:d0:ee:ba:26:46:48:86:1f: 39:db:cd:28:73:8d:e2:fc:1e:d9:9a:9c:d3:d4:08: b9:e0:dd:0f:2c:cb:5d:48:2b:0d:ff:58:cb:6d:10: 73:52:db:60:30:dd:0a:fa:e3:25:50:cb:7e:1f:e8: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DC:63:94:5D:7D:B8:AE:C0:13:F4:80:30:6C:B4:C4:D7:3E:0F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e6baee3-afc5-3fac-a53e-bc99a45b0cbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d7:cf:09:2b:58:02:4f:ae:8d:4c:fa:41:e5:27:e2:9f:6e: 61:89:34:d5:ee:4d:fb:c0:56:18:0a:b8:07:76:3d:84:c9:6b: e0:51:cd:66:35:24:9f:b7:97:d2:e2:65:df:5b:d3:fb:5b:10: a7:a5:f8:0f:0a:06:52:33:52:88:9d:b6:cc:40:1b:20:4c:1f: ea:4d:25:bd:85:3c:72:b5:d3:db:ac:84:eb:94:0c:5c:d0:f6: c1:c9:2a:bc:bf:17:a4:55:0b:a3:fe:ec:bc:4f:3a:41:a4:d1: 8b:20:0b:07:c9:4f:fb:0b:47:0e:2e:7d:6b:ce:2e:b1:59:75: a5:60:69:36:7c:9b:c0:4c:92:8c:a6:c4:96:c5:31:f6:c5:3e: ff:1d:fa:67:71:d8:94:97:67:55:b5:a6:6e:d9:1f:96:8e:e5: b4:f7:35:01:7b:b4:7f:a9:04:de:25:8e:7f:3b:65:ec:62:d9: 39:f5:07:d6:47:71:f3:b6:b9:cd:fc:52:c2:f6:be:38:bc:34: 71:52:18:46:bd:a8:9f:58:c4:64:95:9f:5b:0e:a9:c2:19:4b: 26:31:ef:c0:26:19:18:87:77:66:18:eb:34:2f:8f:63:f1:d7: b6:55:d8:8f:be:1f:9a:ac:e5:a0:ce:21:39:5f:68:e7:a0:3f: df:22:c8:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj9YcYBp/G+wz5yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Yjg0OWUyOWEtNDRjMi00ODlkLWE3ZDMtNThiNmNjMmQ0ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkHCLlSZZbO76Pomxt0yIMiBHcmNyvITdv5t VXzwK6ayYK7bblsa5ZDxCSmuPrgrV5MJS8AdZHxQM825kb6v9f8oNYwaycoEOjEQ c3RpBJ1ClHF2A6v+huZyE7+dKsbv0eLvldeOsRHfrGSCcilVxdO7qriqLBAVhBD7 AV2zYQkOgbtY0ABXDgO8877JpxSUWtArxd+XTwiXbic+IvbTs9DwwWtzMw6ovHfI h8Ja5lUBpa1Rv6gQIMihRmPz9OuYIcBGUpbYhQWv0O66JkZIhh85280oc43i/B7Z mpzT1Ai54N0PLMtdSCsN/1jLbRBzUttgMN0K+uMlUMt+H+jVoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTcY5RdfbiuwBP0gDBstMTXPg+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGU2YmFlZTMtYWZjNS0z ZmFjLWE1M2UtYmM5OWE0NWIwY2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTXzwkrWAJPro1M+kHlJ+KfbmGJNNXuTfvAVhgKuAd2PYTJa+BRzWY1 JJ+3l9LiZd9b0/tbEKel+A8KBlIzUoidtsxAGyBMH+pNJb2FPHK109ushOuUDFzQ 9sHJKry/F6RVC6P+7LxPOkGk0YsgCwfJT/sLRw4ufWvOLrFZdaVgaTZ8m8BMkoym xJbFMfbFPv8d+mdx2JSXZ1W1pm7ZH5aO5bT3NQF7tH+pBN4ljn87Zexi2Tn1B9ZH cfO2uc38UsL2vji8NHFSGEa9qJ9YxGSVn1sOqcIZSyYx78AmGRiHd2YY6zQvj2Px 17ZV2I++H5qs5aDOITlfaOegP98iyPk= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:00 2026 by rpki-client