$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa File: 64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa (raw, json) Hash identifier: uW0hBtF5xR6O0ZVajwSn2R/W0NlowNfwuPv8UIsGdRU= Subject key identifier: 3F:0B:B6:3C:DA:D2:2C:A8:9E:C8:FA:85:99:B9:F6:07:83:D6:85:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43254B7CAD73E65E629EB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 173.190.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:54:b7:ca:d7:3e:65:e6:29:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=e25bead2-1f31-4810-849c-ce7e9e446b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:b7:98:38:3d:16:34:88:e1:b8:71:1e:70: d5:e2:22:8c:79:aa:7d:ed:2c:00:1c:b8:72:13:8b: 47:b5:71:e0:7a:b3:92:7b:df:f8:77:dc:3b:92:86: 5e:48:bb:ec:18:c3:98:b8:42:4e:9e:80:f7:55:69: f8:c5:02:3e:a4:6e:26:2a:60:fb:aa:25:fa:0a:cc: b2:b2:6e:69:ea:03:1a:49:c6:69:f4:59:7d:c9:8e: 02:ef:46:1e:d5:f5:f0:31:ed:81:44:ac:f3:fe:85: e6:13:df:3d:e1:93:c9:e8:07:c0:b0:a1:dc:3b:bc: ce:25:1d:8d:6c:ed:55:ea:1d:1a:60:f7:3b:45:4e: bb:c3:ec:7a:77:3c:c5:7d:a7:0e:c0:f7:da:9b:ab: 7a:76:a6:12:1d:82:8e:44:4c:fd:60:bd:04:35:52: ec:2e:21:5a:86:7f:c6:54:e1:38:9f:86:f5:b1:d7: 67:ff:af:6f:4c:c4:56:b4:89:75:01:f5:c2:71:08: 42:a6:e7:d8:1f:6a:15:cd:9d:86:7e:42:bc:93:38: 0c:fb:66:90:be:29:8a:6a:74:07:a6:88:31:e5:11: d1:18:d2:a1:61:89:8f:4c:56:c0:30:22:3e:6e:5b: 3e:ea:f9:96:a7:d5:93:09:e0:e5:fc:25:73:70:99: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0B:B6:3C:DA:D2:2C:A8:9E:C8:FA:85:99:B9:F6:07:83:D6:85:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bb:d1:88:63:42:dc:97:fc:95:5c:1e:c1:d1:af:8a:ff:f5: ca:6a:60:6f:63:95:85:20:d1:af:e8:61:e7:31:5a:03:65:cc: 40:a8:d4:66:9c:fd:4a:f7:de:43:27:fc:4e:b3:1f:cb:4b:72: e0:35:cf:93:18:5a:32:bd:f6:e1:a9:ab:80:6a:88:27:d4:0e: 1b:32:4c:f2:92:19:50:c7:6c:88:ad:e7:ac:39:43:0a:bb:54: aa:32:89:da:53:36:ae:c7:93:e3:75:c6:7e:b6:b9:71:5e:de: 4b:60:8a:30:23:37:f4:74:c9:17:35:9f:c6:46:f7:7f:15:67: 82:c4:8f:9e:fb:a1:09:00:b5:38:bb:11:ab:45:28:f1:6e:2c: 8e:e9:da:f3:56:e5:a6:9b:a6:d6:dc:12:d8:0f:b6:6d:c1:e9: e8:96:a5:69:61:13:8c:a8:37:49:65:cb:ac:fe:a3:29:5c:96: de:f3:e3:84:20:fa:ef:07:60:b7:12:67:08:d7:4a:e8:e5:1a: e0:21:cc:1f:0f:c8:9d:ca:75:e3:1f:7d:31:04:98:94:19:01: 0b:cd:04:0a:1d:7a:12:b8:4e:b6:d4:99:09:62:be:34:dd:b1: 97:b4:4b:6d:01:74:68:d5:ad:dc:f9:c4:27:f8:2b:73:4a:2c: 35:c4:28:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlS3ytc+ZeYp6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTI1YmVhZDItMWYzMS00ODEwLTg0OWMtY2U3ZTllNDQ2YjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt+3mDg9FjSI4bhxHnDV4iKMeap97SwAHLhy E4tHtXHgerOSe9/4d9w7koZeSLvsGMOYuEJOnoD3VWn4xQI+pG4mKmD7qiX6Csyy sm5p6gMaScZp9Fl9yY4C70Ye1fXwMe2BRKzz/oXmE9894ZPJ6AfAsKHcO7zOJR2N bO1V6h0aYPc7RU67w+x6dzzFfacOwPfam6t6dqYSHYKOREz9YL0ENVLsLiFahn/G VOE4n4b1sddn/69vTMRWtIl1AfXCcQhCpufYH2oVzZ2GfkK8kzgM+2aQvimKanQH pogx5RHRGNKhYYmPTFbAMCI+bls+6vmWp9WTCeDl/CVzcJkIpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8Ltjza0iyonsj6hZm59geD1oXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRmN2MzYjMtOTlmNC0z ZDI3LWE4ZDktMDE2MmJhNmFlMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO70YhjQtyX/JVcHsHRr4r/9cpqYG9jlYUg0a/oYecxWgNlzECo1Gac /Ur33kMn/E6zH8tLcuA1z5MYWjK99uGpq4BqiCfUDhsyTPKSGVDHbIit56w5Qwq7 VKoyidpTNq7Hk+N1xn62uXFe3ktgijAjN/R0yRc1n8ZG938VZ4LEj577oQkAtTi7 EatFKPFuLI7p2vNW5aabptbcEtgPtm3B6eiWpWlhE4yoN0lly6z+oylclt7z44Qg +u8HYLcSZwjXSujlGuAhzB8PyJ3KdeMffTEEmJQZAQvNBAodehK4TrbUmQlivjTd sZe0S20BdGjVrdz5xCf4K3NKLDXEKBA= -----END CERTIFICATE-----Generated at Thu Aug 27 16:08:31 2026 by rpki-client