$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa File: 6dced57e-3770-3946-aa28-f17af5922741.roa (raw, json) Hash identifier: 5KiWVy39Hn14HqqmtBojD8GO4ElV84g9TG/EAKSw45M= Subject key identifier: B1:8F:E3:F3:50:D0:E7:A5:67:7F:40:43:95:A1:73:72:6F:AA:7D:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CF1ACFBB201A75D43100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 29877 IP address blocks: 66.29.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cf:1a:cf:bb:20:1a:75:d4:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=e3568853-f425-452a-81e4-88ef3d3159d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:dd:b3:36:9a:7e:fd:6d:e9:20:5e:35:7e: 76:3f:5e:63:e6:47:84:23:dd:5f:aa:21:7a:8f:c8: 04:04:6d:4d:87:4a:dc:dc:2a:35:a6:f9:c7:8c:98: 8d:a3:47:a5:83:5e:63:48:1c:42:33:d2:3e:9a:69: 40:25:b0:1e:4a:7d:74:ac:de:44:fc:f8:02:1d:b8: fe:6f:8e:af:19:52:92:59:b9:89:a5:a5:27:b6:71: 4a:38:5c:c5:36:e3:ae:4d:7d:87:75:05:99:e5:7a: 20:03:11:f1:25:6c:77:e2:19:57:a4:fb:05:5a:d3: b8:b7:e1:86:bb:ed:35:87:79:35:8c:da:c2:e6:b9: 3b:ae:87:a5:9b:ed:8d:55:55:91:88:65:72:43:2c: c4:9d:a0:12:e9:62:ff:2d:0d:72:61:da:40:04:dc: 68:6b:4e:d6:2f:0d:5c:42:8f:cc:fc:9d:78:8d:12: 5d:a0:6e:9d:10:e3:cb:78:9c:d5:da:db:ff:45:39: 60:f8:dc:34:32:da:c6:d4:6f:7d:b8:62:2d:46:67: 33:ce:a6:d6:1b:22:0c:6c:e4:9e:b1:f2:9f:02:22: f0:ae:cc:e0:b7:82:df:b3:03:e6:10:93:40:8c:25: 4c:a7:cd:69:cf:ad:69:87:e0:81:4d:2e:e0:e0:96: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:E3:F3:50:D0:E7:A5:67:7F:40:43:95:A1:73:72:6F:AA:7D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a0:d4:a2:be:00:5b:95:03:d2:1c:09:1a:81:66:25:7d:bf: e3:53:d3:8d:1c:ff:59:af:df:e9:29:e2:ec:93:ec:d7:0f:3f: cd:27:41:ea:ab:a9:3b:f2:c3:77:41:c7:60:05:65:21:7d:85: 99:fc:f9:db:a5:5f:2c:89:4c:aa:ca:78:df:3e:17:3e:62:db: 17:cd:a7:df:71:5a:be:08:34:2e:3f:1b:be:6c:83:ca:1e:d4: 01:d9:a0:f1:81:66:e9:1e:e1:19:cd:f8:80:6b:d6:f8:d5:ff: 88:ac:3c:9b:89:2f:f9:2e:76:22:62:d7:4a:97:d7:63:31:94: 78:fb:18:41:97:73:89:9d:fc:19:ee:d7:91:03:9d:04:01:5c: 02:a7:6e:00:c1:c7:5d:ec:0b:59:7d:39:cd:da:27:a4:d6:77: cd:e1:a0:ee:80:68:aa:14:5b:1f:d5:30:90:14:b2:72:c7:a5: db:1d:5c:d4:17:3e:00:06:c1:13:d7:88:95:a5:19:4d:68:66: 9e:b2:be:4b:75:e7:d8:22:fd:75:38:ac:2c:a1:aa:33:40:ef: ef:1a:66:cf:f5:ae:ab:25:cc:c2:f1:5d:40:b9:dd:21:b1:89: 40:8c:e1:12:1b:6c:27:85:b1:32:56:f2:39:53:f6:8c:37:51: 34:1e:40:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysc8az7sgGnXUMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZTM1Njg4NTMtZjQyNS00NTJhLTgxZTQtODhlZjNkMzE1OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidzdszaafv1t6SBeNX52P15j5keEI91fqiF6 j8gEBG1Nh0rc3Co1pvnHjJiNo0elg15jSBxCM9I+mmlAJbAeSn10rN5E/PgCHbj+ b46vGVKSWbmJpaUntnFKOFzFNuOuTX2HdQWZ5XogAxHxJWx34hlXpPsFWtO4t+GG u+01h3k1jNrC5rk7roelm+2NVVWRiGVyQyzEnaAS6WL/LQ1yYdpABNxoa07WLw1c Qo/M/J14jRJdoG6dEOPLeJzV2tv/RTlg+Nw0MtrG1G99uGItRmczzqbWGyIMbOSe sfKfAiLwrszgt4LfswPmEJNAjCVMp81pz61ph+CBTS7g4JZ/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGP4/NQ0OelZ39AQ5Whc3Jvqn01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmRjZWQ1N2UtMzc3MC0z OTQ2LWFhMjgtZjE3YWY1OTIyNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQh3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADig1KK+AFuVA9IcCRqBZiV9v+NT040c/1mv3+kp4uyT7NcPP80nQeqr qTvyw3dBx2AFZSF9hZn8+dulXyyJTKrKeN8+Fz5i2xfNp99xWr4INC4/G75sg8oe 1AHZoPGBZuke4RnN+IBr1vjV/4isPJuJL/kudiJi10qX12MxlHj7GEGXc4md/Bnu 15EDnQQBXAKnbgDBx13sC1l9Oc3aJ6TWd83hoO6AaKoUWx/VMJAUsnLHpdsdXNQX PgAGwRPXiJWlGU1oZp6yvkt159gi/XU4rCyhqjNA7+8aZs/1rqslzMLxXUC53SGx iUCM4RIbbCeFsTJW8jlT9ow3UTQeQHc= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:51 2026 by rpki-client