$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7026e796-4011-3593-8f1d-31d563712f82.roa File: 7026e796-4011-3593-8f1d-31d563712f82.roa (raw, json) Hash identifier: dPwuR03bpQ0tYxNNnlOlxy+LZ01z47kNTBxkdeBYcm0= Subject key identifier: AF:D0:98:51:F5:B9:06:EE:D5:B8:4B:AC:F5:A4:25:EA:4B:95:73:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CC2BFE53A73BF73F1780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7026e796-4011-3593-8f1d-31d563712f82.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 209.252.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cc:2b:fe:53:a7:3b:f7:3f:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=d5158032-2381-4d0d-8a6e-58d52a4864a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:c4:3c:ca:e1:3f:7c:62:02:f5:f6:0d:4f: ac:fe:46:92:95:6c:f7:e6:b9:bc:5a:47:fd:ac:1d: 34:e1:69:c2:63:27:2f:9b:41:c1:04:13:90:de:11: 1a:f1:a1:fc:fc:5b:ee:79:7f:bc:52:9d:39:94:2d: db:9f:0a:98:96:a4:f3:02:30:8d:95:4d:72:8f:03: 1c:ad:77:3f:52:30:72:84:ce:36:2a:d0:9a:a2:c2: 1d:e4:50:fd:45:34:d7:ca:ea:2d:63:f8:01:20:94: 95:ce:35:6e:68:de:3e:cf:d3:9b:10:f0:cb:60:28: 32:17:83:d5:9b:a6:0d:99:77:16:02:4e:50:88:8f: 08:9a:9c:e2:95:ce:c0:36:cc:6a:65:73:59:e1:01: f4:f4:4d:c7:32:49:95:42:ac:77:d9:88:2b:0d:1f: 33:95:25:3f:38:38:e1:ff:b7:d2:ee:5a:70:81:db: cc:c4:fa:9b:d5:da:c6:a4:bb:fd:63:36:a1:63:90: 6b:17:2e:44:a4:cb:26:75:7d:4d:0f:90:08:73:e8: 58:58:f5:5d:23:71:ff:89:18:83:71:89:b1:ed:ee: 5e:da:84:f4:dc:3d:d7:d9:4d:59:1b:3a:12:49:0c: 9a:f5:50:d3:a0:07:34:45:ab:13:ef:9d:c8:1b:c1: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D0:98:51:F5:B9:06:EE:D5:B8:4B:AC:F5:A4:25:EA:4B:95:73:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7026e796-4011-3593-8f1d-31d563712f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:54:56:22:f0:24:62:84:fa:b1:65:a6:fc:76:07:7e:cc:cb: 2d:2e:62:1c:b6:4d:2d:00:0d:7f:41:57:27:b3:93:2a:a8:52: 68:a0:19:e9:42:92:8c:60:45:88:01:3e:ff:5a:eb:1f:89:d2: bf:16:a4:21:4f:ab:4a:02:f4:88:ae:66:38:79:70:1d:1e:2b: 36:ea:9f:aa:74:1b:fc:1b:27:e1:5d:4f:d5:f4:b0:ca:91:64: c3:3b:4c:f4:29:39:70:73:09:92:a7:d1:6b:4f:d0:13:ad:e2: e5:27:4c:bf:8d:d0:b0:2c:02:35:e5:d3:33:8c:4d:a3:21:11: 88:be:58:8d:0f:b8:cd:b8:1e:71:30:12:ea:57:6b:79:03:a1: dc:b1:a0:e1:03:71:de:de:02:53:92:0d:69:53:88:85:b8:3f: f6:9b:71:b4:d2:fd:90:08:3f:04:c9:47:fe:43:34:23:e3:51: cd:15:07:f6:ad:19:0d:b8:56:16:2b:43:e8:e6:a6:15:a5:69: 31:31:20:2e:14:45:e2:b3:ba:ee:4f:8f:98:ae:5a:47:77:af: c1:6f:06:c3:a9:e7:da:1f:52:e8:99:56:e9:f8:89:c6:37:9b: 4c:85:45:19:85:29:33:ab:b7:13:46:a4:30:4a:b0:f0:ba:96: 8e:b2:17:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscwr/lOnO/c/F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZDUxNTgwMzItMjM4MS00ZDBkLThhNmUtNThkNTJhNDg2NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+LEPMrhP3xiAvX2DU+s/kaSlWz35rm8Wkf9 rB004WnCYycvm0HBBBOQ3hEa8aH8/FvueX+8Up05lC3bnwqYlqTzAjCNlU1yjwMc rXc/UjByhM42KtCaosId5FD9RTTXyuotY/gBIJSVzjVuaN4+z9ObEPDLYCgyF4PV m6YNmXcWAk5QiI8Impzilc7ANsxqZXNZ4QH09E3HMkmVQqx32YgrDR8zlSU/ODjh /7fS7lpwgdvMxPqb1drGpLv9YzahY5BrFy5EpMsmdX1ND5AIc+hYWPVdI3H/iRiD cYmx7e5e2oT03D3X2U1ZGzoSSQya9VDToAc0RasT753IG8EwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/QmFH1uQbu1bhLrPWkJepLlXPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzAyNmU3OTYtNDAxMS0z NTkzLThmMWQtMzFkNTYzNzEyZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fwhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJUViLwJGKE+rFlpvx2B37Myy0uYhy2TS0ADX9BVyezkyqoUmigGelC koxgRYgBPv9a6x+J0r8WpCFPq0oC9IiuZjh5cB0eKzbqn6p0G/wbJ+FdT9X0sMqR ZMM7TPQpOXBzCZKn0WtP0BOt4uUnTL+N0LAsAjXl0zOMTaMhEYi+WI0PuM24HnEw EupXa3kDodyxoOEDcd7eAlOSDWlTiIW4P/abcbTS/ZAIPwTJR/5DNCPjUc0VB/at GQ24VhYrQ+jmphWlaTExIC4UReKzuu5Pj5iuWkd3r8FvBsOp59ofUuiZVun4icY3 m0yFRRmFKTOrtxNGpDBKsPC6lo6yFxs= -----END CERTIFICATE-----Generated at Thu Aug 27 09:50:18 2026 by rpki-client