$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50ca076d-14f0-31c5-847b-739dec6c1a02.roa File: 50ca076d-14f0-31c5-847b-739dec6c1a02.roa (raw, json) Hash identifier: 3V/Lu6MePAk6EOZvCWKPdt2xKN8UWuLUwLuNkKkIoEA= Subject key identifier: 45:EF:E8:27:37:62:43:02:3C:20:D7:B1:3C:53:4F:9B:65:8F:B1:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CA5A55C8DB3EF194D000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50ca076d-14f0-31c5-847b-739dec6c1a02.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 173.189.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:ca:5a:55:c8:db:3e:f1:94:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=3fa935ff-fc7d-4968-90dd-71b4bd6874e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0e:e1:31:b1:30:c8:5b:fa:9e:f7:6c:21:9e: 98:ef:94:2f:00:34:74:1a:bf:1f:13:2e:01:52:54: 14:98:dc:38:1f:10:fd:92:87:a0:64:c7:09:3e:f0: 72:fe:2c:5a:32:85:4b:1d:78:e6:6f:77:5a:5d:4e: 5a:99:ee:a3:17:2c:1c:9b:ff:82:fc:09:ae:65:9e: 20:96:08:2e:bf:ef:25:6e:3f:bb:c4:76:dd:b5:dc: d8:de:aa:73:2c:48:02:4e:a8:c7:8d:14:3d:69:99: f0:b6:d5:c2:d9:fb:50:1e:6b:b0:b1:b4:da:6b:41: 20:69:7c:9d:9f:cd:7e:36:77:d2:a0:11:8b:22:83: 08:eb:9e:53:77:20:a2:96:c2:43:d6:2f:f4:32:78: 0a:67:45:b2:42:5c:55:f4:70:df:3b:6a:a8:c2:b7: 83:28:f7:d3:9f:5f:4d:37:b3:c5:d5:ea:88:2b:ef: 6b:bb:71:b9:1f:6a:89:63:03:f2:93:84:9f:c6:c0: 3c:fb:e5:b3:ea:7a:27:b7:23:f6:29:8f:7b:23:8d: d8:c0:5a:ea:0e:28:df:3c:ce:f6:d7:64:ce:c1:e7: eb:5d:14:b1:a2:66:c7:66:51:61:63:e5:fb:8c:ed: b7:a9:22:e6:ae:1d:34:8e:d5:53:a3:09:9a:e8:d4: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EF:E8:27:37:62:43:02:3C:20:D7:B1:3C:53:4F:9B:65:8F:B1:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50ca076d-14f0-31c5-847b-739dec6c1a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:da:79:08:01:71:37:7d:19:97:68:14:62:ed:12:0b:55:10: e2:d4:5d:0e:ec:87:02:14:37:37:7b:82:1e:e4:ad:c2:d0:e8: 34:9e:9c:14:fb:68:f5:1f:5c:6d:5c:bb:83:cb:65:79:63:a9: 86:f6:50:ce:46:d9:63:75:da:71:cd:bc:c5:51:b0:80:66:43: 45:12:9b:de:3f:d6:4a:7f:57:f6:f1:ae:52:b5:e0:ef:ec:cc: f5:22:6c:3f:cb:7f:36:96:77:53:f0:ae:f7:cb:96:0f:cb:ca: 76:12:71:5a:25:1d:f3:9f:19:66:cc:31:52:27:16:a4:0f:07: d0:dc:b7:21:18:c3:a4:5b:69:d8:61:04:6e:d7:cf:12:98:2a: ac:f5:7a:ea:ca:97:f9:43:ef:c0:4b:92:5d:9c:14:d6:1a:92: 5d:68:d8:e4:54:f6:63:d1:91:98:e5:fd:1d:b6:52:bb:fa:78: 06:90:65:84:d1:f2:72:93:58:6e:e0:4c:33:f1:be:76:57:51: 69:12:1d:6b:f0:d9:8e:81:31:07:de:6b:f4:1a:f0:67:b3:cf: 22:e8:2c:81:69:4d:32:55:f2:d3:52:a9:3e:8c:c3:ed:53:0c: 45:cc:1b:0e:37:60:eb:8c:7b:d0:b5:2a:a5:47:6b:06:c0:85: 0b:28:94:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscpaVcjbPvGU0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk M2ZhOTM1ZmYtZmM3ZC00OTY4LTkwZGQtNzFiNGJkNjg3NGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA7hMbEwyFv6nvdsIZ6Y75QvADR0Gr8fEy4B UlQUmNw4HxD9koegZMcJPvBy/ixaMoVLHXjmb3daXU5ame6jFywcm/+C/AmuZZ4g lgguv+8lbj+7xHbdtdzY3qpzLEgCTqjHjRQ9aZnwttXC2ftQHmuwsbTaa0EgaXyd n81+NnfSoBGLIoMI655TdyCilsJD1i/0MngKZ0WyQlxV9HDfO2qowreDKPfTn19N N7PF1eqIK+9ru3G5H2qJYwPyk4SfxsA8++Wz6nontyP2KY97I43YwFrqDijfPM72 12TOwefrXRSxombHZlFhY+X7jO23qSLmrh00jtVTowma6NT/UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXv6Cc3YkMCPCDXsTxTT5tlj7FfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTBjYTA3NmQtMTRmMC0z MWM1LTg0N2ItNzM5ZGVjNmMxYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXaeQgBcTd9GZdoFGLtEgtVEOLUXQ7shwIUNzd7gh7krcLQ6DSenBT7 aPUfXG1cu4PLZXljqYb2UM5G2WN12nHNvMVRsIBmQ0USm94/1kp/V/bxrlK14O/s zPUibD/LfzaWd1PwrvfLlg/LynYScVolHfOfGWbMMVInFqQPB9DctyEYw6Rbadhh BG7XzxKYKqz1eurKl/lD78BLkl2cFNYakl1o2ORU9mPRkZjl/R22Urv6eAaQZYTR 8nKTWG7gTDPxvnZXUWkSHWvw2Y6BMQfea/Qa8GezzyLoLIFpTTJV8tNSqT6Mw+1T DEXMGw43YOuMe9C1KqVHawbAhQsolBo= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:34 2026 by rpki-client