$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52df3669-1cbf-34e9-bcc5-f42dc059a383.roa File: 52df3669-1cbf-34e9-bcc5-f42dc059a383.roa (raw, json) Hash identifier: So0DBfoGXWsSfQQS64PGOW3sp9jcx1xMZqi2Kr9DVlA= Subject key identifier: 1E:B3:54:00:56:C8:67:A3:25:7C:D2:E4:0C:F7:44:34:74:4D:AC:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C6C49176526523448C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52df3669-1cbf-34e9-bcc5-f42dc059a383.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 66.153.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c6:c4:91:76:52:65:23:44:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=ed0d965e-9b62-4061-9e60-c3132157f5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:10:1f:55:e4:58:3f:49:30:71:6f:54:20: 4b:f0:b4:16:dd:84:a0:43:27:8a:78:ff:38:fb:8f: cd:7e:95:87:b4:99:79:d5:c5:27:39:dd:33:28:6a: b8:8b:47:f0:6d:97:6f:10:0c:67:ac:b3:65:b1:42: ec:62:d5:d8:e9:9a:4a:f9:53:be:f0:a9:2c:a2:96: ae:53:af:7f:07:fb:53:96:f5:30:f6:c4:c0:01:72: 2d:15:dc:a3:55:09:3e:63:48:00:17:67:84:4f:e2: ab:32:3b:50:fe:1b:08:23:54:cc:ca:83:53:6a:0f: b5:b4:55:16:f7:c0:53:93:a4:6e:e1:56:1b:5a:da: 7b:0f:1b:d6:72:78:59:6d:cd:81:fd:d5:da:d0:6a: cc:d2:3e:15:2a:a2:fb:1d:79:61:3e:60:8e:57:b4: 58:ac:69:03:38:e2:d8:2a:88:25:f2:36:70:08:44: 6a:2c:07:a9:43:88:d8:83:23:45:57:00:da:b2:8d: 9f:6a:51:e6:2f:8c:bd:6e:48:16:37:fd:a1:7b:e7: 02:3d:29:73:ff:ce:7c:9a:11:d5:8a:66:b4:cc:20: 44:51:ec:af:48:c1:43:91:38:98:0f:e0:6f:86:07: 42:c0:fc:5f:b7:15:2e:56:39:fc:c0:71:8d:8b:45: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:54:00:56:C8:67:A3:25:7C:D2:E4:0C:F7:44:34:74:4D:AC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52df3669-1cbf-34e9-bcc5-f42dc059a383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.153.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d4:4d:90:35:66:c5:11:9b:95:5f:44:50:11:3f:3f:05:3b: 84:05:bd:8e:32:31:e1:aa:2c:2c:ee:02:19:0b:98:0d:d1:5f: f1:81:d7:01:f5:55:ae:f8:ec:65:e8:27:b4:30:77:05:33:b4: 73:0d:41:cc:9a:ce:77:63:0e:9f:31:3e:8c:9d:a0:90:7c:35: 65:d0:50:5e:1c:33:1a:7d:0c:99:f3:93:2e:f0:89:3d:6d:32: ee:9e:ad:01:66:f1:17:45:b8:3f:27:c8:14:c1:9d:1a:bc:e4: ef:3f:07:fb:ed:71:70:45:b2:91:15:03:09:db:61:1c:39:b5: dc:48:77:d2:42:08:43:42:26:2a:69:0a:f9:89:60:7d:08:21: c8:51:9d:8e:a6:25:6b:34:ef:82:7d:93:10:e2:4c:74:8a:f3: 0a:f5:00:15:c5:cf:ce:be:47:cb:eb:c3:68:bb:79:22:d0:23: 36:41:83:03:82:98:b2:23:68:78:04:91:91:f2:a1:c9:d2:33: 76:8e:82:e7:3a:84:71:fe:7f:a6:5a:39:fe:1f:08:2c:49:df: 07:ae:8f:32:26:c6:a8:9a:aa:1d:50:bd:f5:77:3d:67:31:f1: 55:33:44:e8:cc:a7:4e:27:83:b7:3f:49:76:29:93:f8:6a:16: a3:c8:40:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscbEkXZSZSNEjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZWQwZDk2NWUtOWI2Mi00MDYxLTllNjAtYzMxMzIxNTdmNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzMQH1XkWD9JMHFvVCBL8LQW3YSgQyeKeP84 +4/NfpWHtJl51cUnOd0zKGq4i0fwbZdvEAxnrLNlsULsYtXY6ZpK+VO+8Kksopau U69/B/tTlvUw9sTAAXItFdyjVQk+Y0gAF2eET+KrMjtQ/hsII1TMyoNTag+1tFUW 98BTk6Ru4VYbWtp7DxvWcnhZbc2B/dXa0GrM0j4VKqL7HXlhPmCOV7RYrGkDOOLY Kogl8jZwCERqLAepQ4jYgyNFVwDaso2falHmL4y9bkgWN/2he+cCPSlz/858mhHV ima0zCBEUeyvSMFDkTiYD+BvhgdCwPxftxUuVjn8wHGNi0WX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6zVABWyGejJXzS5Az3RDR0TayQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTJkZjM2NjktMWNiZi0z NGU5LWJjYzUtZjQyZGMwNTlhMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQpkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3UTZA1ZsURm5VfRFARPz8FO4QFvY4yMeGqLCzuAhkLmA3RX/GB1wH1 Va747GXoJ7QwdwUztHMNQcyazndjDp8xPoydoJB8NWXQUF4cMxp9DJnzky7wiT1t Mu6erQFm8RdFuD8nyBTBnRq85O8/B/vtcXBFspEVAwnbYRw5tdxId9JCCENCJipp CvmJYH0IIchRnY6mJWs074J9kxDiTHSK8wr1ABXFz86+R8vrw2i7eSLQIzZBgwOC mLIjaHgEkZHyocnSM3aOguc6hHH+f6ZaOf4fCCxJ3weujzImxqiaqh1QvfV3PWcx 8VUzROjMp04ng7c/SXYpk/hqFqPIQJY= -----END CERTIFICATE-----Generated at Thu Aug 27 10:39:21 2026 by rpki-client