$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa File: 4ee3a52f-4216-30e6-9301-7439d905414e.roa (raw, json) Hash identifier: wPBDAgpuU4zDNT7rLHSlSot+syMCJZxsP4XCeBzKiDM= Subject key identifier: 68:F2:6A:29:3A:CE:B2:8D:DF:08:D4:48:49:D0:67:F1:6F:07:0F:CB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E736A0DD564115DE2D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 174.131.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e7:36:a0:dd:56:41:15:de:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=7b3175bb-82d8-4a3c-ad30-8ea7f0abb0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:b2:9e:eb:67:bd:e9:fe:43:ee:8c:c3:9a: c5:5a:f1:c6:1d:25:b1:de:b7:39:d4:42:03:e7:9b: d0:47:89:97:30:08:75:a9:bd:18:3a:1d:56:8e:7a: 5b:dd:1b:28:e9:ab:74:f6:7d:99:33:b6:ea:10:f2: 44:b4:26:ea:9d:59:7e:1d:bc:13:3f:3e:33:a1:c9: ba:16:5a:98:d4:9d:c0:32:7e:f7:60:36:ba:40:85: 30:68:e7:e9:26:4d:7b:cb:dc:c5:28:5f:e4:d5:f0: 37:2d:87:a4:d8:e6:5c:24:94:bd:dd:1f:8b:f9:b5: cb:93:f1:da:42:7d:79:ec:92:db:ba:0a:92:58:e0: 3b:f2:29:88:f2:b3:bc:98:29:89:18:2f:43:20:13: 0a:c4:7e:53:3c:cd:a0:79:b0:24:1e:69:0a:f8:e8: 1e:3a:82:ff:d3:81:be:c6:53:db:0c:04:27:bb:83: 58:10:ac:f8:66:64:2a:18:a9:39:1b:a8:aa:c0:6c: 6f:e0:32:31:07:8f:93:03:29:1d:c0:19:05:2f:e6: 53:2f:a3:ea:b3:5e:4c:88:55:da:c7:6a:03:a4:c9: 22:5f:e9:a3:5a:c7:f2:a3:ce:96:c1:17:77:65:f1: 21:58:a7:de:48:74:b9:61:8e:15:b6:63:06:37:ad: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F2:6A:29:3A:CE:B2:8D:DF:08:D4:48:49:D0:67:F1:6F:07:0F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:74:ca:ca:ee:69:46:d2:b5:83:d9:3e:e9:31:59:ff:51:4d: 33:58:40:32:da:be:0b:e2:f6:67:16:45:14:4c:82:e9:0c:f7: c8:8c:a4:a7:0e:38:23:2b:1d:7e:28:cf:bc:5d:15:22:71:c1: 21:99:8e:ef:3f:c9:3e:43:2e:77:02:8d:4d:eb:a3:62:fa:a7: 72:c1:b0:43:eb:e1:e1:df:a7:e0:ad:cf:a8:82:0a:f9:3f:02: 71:f8:fd:60:62:11:f4:d0:97:85:c8:ea:ab:fa:c6:80:0d:4c: 65:97:2c:b0:31:0a:5d:e6:26:3e:1e:55:5e:8c:0b:24:b8:53: 38:a9:0b:30:d2:d0:99:2a:89:61:f8:6c:82:56:02:4b:b5:eb: 01:43:75:e3:74:93:75:66:fb:6f:4d:c0:81:41:6e:6f:bb:7a: d5:ed:13:dc:01:4d:05:61:b6:cb:c0:28:04:1a:53:b4:12:b4: e3:7a:38:c2:b0:de:8a:b8:a4:bd:ac:54:14:75:42:85:76:f5: 3a:02:4c:91:2d:bb:e6:41:a7:ff:3b:a4:e0:1f:42:5f:7b:0d: c5:e7:d1:15:fd:66:6d:e2:6c:b5:14:01:af:f0:20:c1:e8:a3: fd:bc:86:60:18:6f:74:de:30:06:fa:fd:06:42:11:58:ed:e3: b6:41:b4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysec2oN1WQRXeLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk N2IzMTc1YmItODJkOC00YTNjLWFkMzAtOGVhN2YwYWJiMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjCynutnven+Q+6Mw5rFWvHGHSWx3rc51EID 55vQR4mXMAh1qb0YOh1Wjnpb3Rso6at09n2ZM7bqEPJEtCbqnVl+HbwTPz4zocm6 FlqY1J3AMn73YDa6QIUwaOfpJk17y9zFKF/k1fA3LYek2OZcJJS93R+L+bXLk/Ha Qn157JLbugqSWOA78imI8rO8mCmJGC9DIBMKxH5TPM2gebAkHmkK+OgeOoL/04G+ xlPbDAQnu4NYEKz4ZmQqGKk5G6iqwGxv4DIxB4+TAykdwBkFL+ZTL6Pqs15MiFXa x2oDpMkiX+mjWsfyo86WwRd3ZfEhWKfeSHS5YY4VtmMGN62EiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjyaik6zrKN3wjUSEnQZ/FvBw/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVlM2E1MmYtNDIxNi0z MGU2LTkzMDEtNzQzOWQ5MDU0MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh0ysruaUbStYPZPukxWf9RTTNYQDLavgvi9mcWRRRMgukM98iMpKcO OCMrHX4oz7xdFSJxwSGZju8/yT5DLncCjU3ro2L6p3LBsEPr4eHfp+Ctz6iCCvk/ AnH4/WBiEfTQl4XI6qv6xoANTGWXLLAxCl3mJj4eVV6MCyS4UzipCzDS0JkqiWH4 bIJWAku16wFDdeN0k3Vm+29NwIFBbm+7etXtE9wBTQVhtsvAKAQaU7QStON6OMKw 3oq4pL2sVBR1QoV29ToCTJEtu+ZBp/87pOAfQl97DcXn0RX9Zm3ibLUUAa/wIMHo o/28hmAYb3TeMAb6/QZCEVjt47ZBtH8= -----END CERTIFICATE-----Generated at Thu Aug 27 11:38:49 2026 by rpki-client