$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/632d2d98-3ca8-3c01-a046-3232bd2e8457.roa File: 632d2d98-3ca8-3c01-a046-3232bd2e8457.roa (raw, json) Hash identifier: dHyBBBvnYvGJR0kONyM35vwIf8sM/Bko5zGqeHeCsXE= Subject key identifier: 68:0E:DB:8D:0D:75:99:B0:16:2F:1B:B2:8D:DC:66:F7:8C:1F:69:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1ECD2A2208C0B3215BE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/632d2d98-3ca8-3c01-a046-3232bd2e8457.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 54066 IP address blocks: 216.172.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:ec:d2:a2:20:8c:0b:32:15:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=36b36f94-e222-4793-978f-a4492c0a498c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a2:d9:85:b3:b7:85:6a:3b:e5:51:bb:b8:90: 12:b7:9d:71:7c:6c:4f:97:a7:78:20:f2:27:00:e0: 88:79:e2:6c:fb:68:bf:aa:0b:36:da:a1:fe:ec:9b: 53:1e:95:d5:66:5d:ea:63:50:06:bb:86:04:81:08: 65:48:f8:c9:8b:76:af:7f:1c:97:94:c1:c3:d0:1d: 4f:ea:6f:be:bc:1a:3e:b2:97:f4:5f:39:76:bb:ba: e2:3f:fa:9c:4d:d3:38:69:ab:16:c6:97:31:15:54: b3:3a:01:0a:be:46:ab:55:e5:4f:25:fb:60:7c:5b: 51:65:cf:19:a1:a4:c4:87:8c:d6:bc:d7:3b:8f:37: b0:7f:9f:99:49:7a:80:e5:59:df:74:8a:3d:a2:7a: f4:37:27:3b:30:d7:3a:e3:28:b1:a3:81:ba:f8:42: 43:dc:a6:73:06:5b:9c:c7:6a:2e:61:d4:1b:32:ed: 47:89:8d:b8:37:68:a1:47:c0:53:d3:ec:eb:ed:33: db:61:ed:38:3a:12:fb:90:43:96:d5:94:d6:9c:55: db:5c:db:35:0c:c1:25:8a:bd:41:f9:ac:7e:28:23: 74:38:ba:c2:20:27:b7:d1:68:13:33:3d:32:9f:6f: e2:86:68:f6:d5:41:f0:94:42:91:49:56:95:68:ec: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0E:DB:8D:0D:75:99:B0:16:2F:1B:B2:8D:DC:66:F7:8C:1F:69:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/632d2d98-3ca8-3c01-a046-3232bd2e8457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e0:3f:26:e9:f7:1c:71:82:bf:0a:ca:eb:23:40:14:cb:d3: 81:10:03:74:33:bd:81:32:8d:6b:7b:95:06:f2:68:59:ef:23: 18:28:f9:19:1d:f4:7c:1e:e6:39:85:67:73:09:58:b1:c5:2f: 5e:89:dc:5b:0b:c6:87:fc:ca:44:c9:0a:d4:20:ea:87:52:10: d2:42:8a:24:7d:98:6c:99:b9:e6:b3:67:51:17:12:f8:a4:71: 5a:78:4f:ec:ef:dd:f5:3f:5d:09:f6:38:6c:95:77:10:80:f6: 12:64:9e:d8:80:c3:ad:11:91:51:36:9a:22:88:23:fa:df:cd: 04:b4:4b:ba:a7:2a:32:47:72:b0:2a:50:d2:ec:ee:25:33:43: 79:dc:3b:9e:7e:af:00:2f:d6:96:2a:c0:e2:aa:af:73:da:36: 6c:52:30:b8:d1:e0:56:02:6f:44:cc:00:88:3a:20:35:ff:82: b9:04:6c:21:73:7f:01:4f:32:f1:d2:65:71:39:de:03:ca:e6: e6:1d:c4:a8:f8:b1:f5:b3:ec:07:1b:4d:10:2f:63:e6:83:16: 61:92:66:af:6a:67:53:fb:49:20:b6:be:4a:0b:01:12:6e:49: cb:a1:08:62:2c:78:54:a1:df:15:17:a8:04:4a:83:95:37:fb: 94:e3:86:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysezSoiCMCzIVvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MzZiMzZmOTQtZTIyMi00NzkzLTk3OGYtYTQ0OTJjMGE0OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqLZhbO3hWo75VG7uJASt51xfGxPl6d4IPIn AOCIeeJs+2i/qgs22qH+7JtTHpXVZl3qY1AGu4YEgQhlSPjJi3avfxyXlMHD0B1P 6m++vBo+spf0Xzl2u7riP/qcTdM4aasWxpcxFVSzOgEKvkarVeVPJftgfFtRZc8Z oaTEh4zWvNc7jzewf5+ZSXqA5VnfdIo9onr0Nyc7MNc64yixo4G6+EJD3KZzBluc x2ouYdQbMu1HiY24N2ihR8BT0+zr7TPbYe04OhL7kEOW1ZTWnFXbXNs1DMElir1B +ax+KCN0OLrCICe30WgTMz0yn2/ihmj21UHwlEKRSVaVaOywWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgO240NdZmwFi8bso3cZveMH2mVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjMyZDJkOTgtM2NhOC0z YzAxLWEwNDYtMzIzMmJkMmU4NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHngPybp9xxxgr8KyusjQBTL04EQA3QzvYEyjWt7lQbyaFnvIxgo+Rkd 9Hwe5jmFZ3MJWLHFL16J3FsLxof8ykTJCtQg6odSENJCiiR9mGyZueazZ1EXEvik cVp4T+zv3fU/XQn2OGyVdxCA9hJkntiAw60RkVE2miKII/rfzQS0S7qnKjJHcrAq UNLs7iUzQ3ncO55+rwAv1pYqwOKqr3PaNmxSMLjR4FYCb0TMAIg6IDX/grkEbCFz fwFPMvHSZXE53gPK5uYdxKj4sfWz7AcbTRAvY+aDFmGSZq9qZ1P7SSC2vkoLARJu ScuhCGIseFSh3xUXqARKg5U3+5TjhuQ= -----END CERTIFICATE-----Generated at Thu Aug 27 09:48:10 2026 by rpki-client