$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa File: 5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa (raw, json) Hash identifier: 4SLGlhGljCjKjRgIIYvFnttq3s2ZkERhJrfoixvRvy4= Subject key identifier: C0:76:A1:F8:7D:75:2C:0A:BD:86:6D:00:D2:95:77:7A:E8:0A:53:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ECA6C8A5CDDD8BA3D406D67E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 7029 IP address blocks: 209.2.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:8a:5c:dd:d8:ba:3d:40:6d:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=c3dc482c-e06f-4f0d-b372-a86d30e713d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:38:d6:a1:3c:9c:d6:c7:d2:26:84:72:6e: eb:bf:80:90:e7:eb:74:56:9d:5d:da:55:7e:9d:f9: 2f:5d:5c:7a:bb:90:c4:ce:d6:84:f7:79:0d:80:51: 96:5b:e3:28:35:c0:97:88:f7:88:c0:1b:b6:2b:03: 1d:ba:64:58:33:68:99:2c:4a:34:6d:fb:be:67:29: e6:25:f9:ef:35:5f:ce:9a:de:50:7a:e2:91:f7:8b: 77:fd:e7:97:3f:86:71:3b:0a:82:66:93:76:bd:8c: 08:88:e5:94:1e:5e:b6:7a:bb:d8:46:bb:23:2c:d0: 53:79:ce:25:63:4d:02:94:63:18:84:03:b4:c9:d9: 75:e2:85:07:cc:41:d6:6f:fe:c6:4b:77:0f:0c:e4: df:71:f6:f4:76:80:ea:65:72:b4:f5:e7:52:e0:a7: bd:e2:d0:d1:2b:4b:4c:99:48:4c:c2:30:84:6f:f3: f0:23:88:9f:a1:ef:c1:d2:4b:bc:c6:0d:78:63:ec: 71:09:ec:e9:69:a2:8c:78:64:15:ce:26:57:f0:81: c2:5f:e5:94:48:22:fc:e8:4a:03:cb:d6:b3:3a:af: 8d:62:d0:e4:d1:53:69:1c:97:ba:22:42:38:da:f6: bf:38:5a:75:65:ce:88:49:c3:40:a5:00:4b:e0:ea: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:76:A1:F8:7D:75:2C:0A:BD:86:6D:00:D2:95:77:7A:E8:0A:53:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a32b09d-614c-323d-9b02-d8bdad4fc43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e8:1d:30:ff:48:4f:d5:d4:ef:76:c3:c4:42:1e:9e:5b:e3: 55:a2:cd:0b:66:fd:d8:9b:f8:a9:36:1a:c0:86:18:59:84:52: 65:2e:23:94:0c:9d:f8:1b:80:56:a6:a4:44:bd:40:8b:8d:54: 78:3b:2a:dc:6a:48:8a:33:8c:6e:ce:d7:df:56:e6:60:65:04: 39:ae:f6:07:6b:b9:25:34:0c:49:62:da:49:ef:c7:45:1e:da: e6:ad:7c:41:13:67:48:5a:14:9a:9f:74:6b:85:5e:85:41:b0: 0d:b9:88:c5:1f:7e:9c:76:82:9e:c9:24:ef:07:f3:00:ae:64: 91:b7:82:56:d2:ff:cc:77:d1:99:ac:ae:5b:d9:18:3c:58:98: bc:10:11:1c:a6:e4:74:0b:1a:ba:6b:7a:93:a8:9f:11:7f:26: ad:f3:16:2d:78:49:d1:6a:83:43:71:6d:27:aa:f0:bd:13:d2: e8:fa:ff:7f:40:e7:4d:4d:29:b4:54:41:57:1c:ca:39:38:ae: 0b:00:17:41:dd:54:bb:51:68:86:d6:65:9a:e4:2f:7f:92:d0: ff:a4:51:87:c1:2d:ce:1f:86:0a:e0:5f:ae:f1:82:1e:26:25: 41:b7:c1:ad:5b:95:59:23:87:a4:f2:db:d4:59:44:73:2c:3b: 00:99:1d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbIpc3di6PUBtZ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk YzNkYzQ4MmMtZTA2Zi00ZjBkLWIzNzItYTg2ZDMwZTcxM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4U41qE8nNbH0iaEcm7rv4CQ5+t0Vp1d2lV+ nfkvXVx6u5DEztaE93kNgFGWW+MoNcCXiPeIwBu2KwMdumRYM2iZLEo0bfu+Zynm JfnvNV/Omt5QeuKR94t3/eeXP4ZxOwqCZpN2vYwIiOWUHl62ervYRrsjLNBTec4l Y00ClGMYhAO0ydl14oUHzEHWb/7GS3cPDOTfcfb0doDqZXK09edS4Ke94tDRK0tM mUhMwjCEb/PwI4ifoe/B0ku8xg14Y+xxCezpaaKMeGQVziZX8IHCX+WUSCL86EoD y9azOq+NYtDk0VNpHJe6IkI42va/OFp1Zc6IScNApQBL4Oq9wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMB2ofh9dSwKvYZtANKVd3roClODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWEzMmIwOWQtNjE0Yy0z MjNkLTliMDItZDhiZGFkNGZjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0QKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfoHTD/SE/V1O92w8RCHp5b41WizQtm/dib+Kk2GsCGGFmEUmUuI5QM nfgbgFampES9QIuNVHg7KtxqSIozjG7O199W5mBlBDmu9gdruSU0DEli2knvx0Ue 2uatfEETZ0haFJqfdGuFXoVBsA25iMUffpx2gp7JJO8H8wCuZJG3glbS/8x30Zms rlvZGDxYmLwQERym5HQLGrprepOonxF/Jq3zFi14SdFqg0NxbSeq8L0T0uj6/39A 501NKbRUQVccyjk4rgsAF0HdVLtRaIbWZZrkL3+S0P+kUYfBLc4fhgrgX67xgh4m JUG3wa1blVkjh6Ty29RZRHMsOwCZHUo= -----END CERTIFICATE-----Generated at Thu Aug 27 11:32:04 2026 by rpki-client