$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa File: 78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa (raw, json) Hash identifier: yir/hdp5AqZVtYLmoQ2b3jhCCHEpnDQZLDLJxaseq6c= Subject key identifier: 6D:9A:9D:C3:DA:76:C1:C1:C6:7F:DD:AA:7C:A6:5F:A8:AF:B7:20:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED86289146BC9598849D4DC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 64.24.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:89:14:6b:c9:59:88:49:d4:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=0335b24c-8eb8-4eec-8b9a-3d75dd560688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:13:91:35:20:d0:b9:02:c8:d2:65:e3:bf: e6:ac:00:fe:38:dc:79:37:08:b0:7e:8e:ad:8e:8e: 00:09:8d:e3:79:ff:6e:da:e1:89:a0:28:8a:90:6e: 9d:2e:18:74:f6:23:c1:0c:ea:30:0f:81:aa:97:5a: 6b:3b:d8:ae:e9:35:41:d8:2c:2c:2e:97:27:73:6e: d0:70:11:a5:74:46:c9:06:c2:40:5a:6c:40:be:10: 84:f7:4a:49:c3:cf:0e:18:4b:a9:9e:d3:f0:8c:d7: ea:ca:03:38:8d:b1:8f:34:14:4e:73:81:07:55:2b: 04:3e:a4:65:86:b3:cc:f9:0a:40:07:79:51:6f:d5: 14:30:f3:12:bd:d2:f6:87:ab:50:1d:c4:8d:e1:29: 2b:6f:77:3a:a3:d7:95:8d:5d:16:f1:2a:d2:b7:a3: e4:24:69:a8:3b:a6:44:4a:0c:b8:9a:58:17:ce:76: c2:f8:b3:51:cb:67:5c:57:05:98:bd:00:f7:83:90: 79:25:79:74:a0:29:36:e9:33:50:1f:29:f8:8a:a3: 59:d5:a1:b4:9c:6c:16:75:39:f6:76:e2:c1:02:5b: f4:e1:1b:46:e3:2a:e8:e3:a9:6c:ac:e0:90:f0:e2: bd:3d:2f:1b:95:1d:79:cc:3a:4b:d2:a4:2d:9f:ab: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9A:9D:C3:DA:76:C1:C1:C6:7F:DD:AA:7C:A6:5F:A8:AF:B7:20:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78795b84-a98c-3e7c-bc7d-7e6e3f893733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:88:3c:9c:4b:dc:7b:fe:29:b9:c4:8b:eb:e0:c0:9d:1c:72: 2a:af:46:df:05:6c:a2:e7:e2:7a:32:20:fe:7b:65:ba:0b:87: fe:ac:0f:1c:e4:a6:8e:17:a3:5f:f3:4d:76:70:87:d4:c4:84: eb:e3:a4:80:cb:1e:09:06:f6:79:b4:4d:df:a4:1b:37:ce:3c: 65:93:7f:ff:47:0a:76:e1:08:4c:f9:ae:75:a3:31:d5:d8:9c: ab:3d:92:9d:89:0d:94:b8:45:2e:8e:d7:c4:a6:61:c6:41:34: d2:2c:ae:3a:42:cf:83:96:b0:3b:06:e4:d5:db:0e:4d:99:8c: 3e:50:10:70:3e:c1:ba:05:ee:4f:1a:e8:3a:0d:37:7c:11:a6: 99:3d:64:de:63:e4:fb:98:79:8d:86:0a:cc:8d:3b:e4:0a:74: 34:38:cb:9c:58:69:9c:f4:a1:3d:8d:ce:50:dd:d9:68:02:59: 0a:51:f1:35:e6:ab:55:e5:a9:d8:2f:41:ae:a0:db:cc:5f:cc: ca:39:69:3d:55:aa:3c:da:33:fe:91:5d:46:35:51:be:62:51: 36:56:c8:4f:8f:81:f4:9a:c0:e8:f6:12:0e:20:bb:b1:0b:30: 1f:48:e6:05:52:1b:91:a6:34:a2:86:5c:71:39:fd:da:df:8e: 8a:ef:7f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYokUa8lZiEnU3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MDMzNWIyNGMtOGViOC00ZWVjLThiOWEtM2Q3NWRkNTYwNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+ITkTUg0LkCyNJl47/mrAD+ONx5Nwiwfo6t jo4ACY3jef9u2uGJoCiKkG6dLhh09iPBDOowD4Gql1prO9iu6TVB2CwsLpcnc27Q cBGldEbJBsJAWmxAvhCE90pJw88OGEupntPwjNfqygM4jbGPNBROc4EHVSsEPqRl hrPM+QpAB3lRb9UUMPMSvdL2h6tQHcSN4Skrb3c6o9eVjV0W8SrSt6PkJGmoO6ZE Sgy4mlgXznbC+LNRy2dcVwWYvQD3g5B5JXl0oCk26TNQHyn4iqNZ1aG0nGwWdTn2 duLBAlv04RtG4yro46lsrOCQ8OK9PS8blR15zDpL0qQtn6tncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2ancPadsHBxn/dqnymX6ivtyDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg3OTViODQtYTk4Yy0z ZTdjLWJjN2QtN2U2ZTNmODkzNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6IPJxL3Hv+KbnEi+vgwJ0cciqvRt8FbKLn4noyIP57ZboLh/6sDxzk po4Xo1/zTXZwh9TEhOvjpIDLHgkG9nm0Td+kGzfOPGWTf/9HCnbhCEz5rnWjMdXY nKs9kp2JDZS4RS6O18SmYcZBNNIsrjpCz4OWsDsG5NXbDk2ZjD5QEHA+wboF7k8a 6DoNN3wRppk9ZN5j5PuYeY2GCsyNO+QKdDQ4y5xYaZz0oT2NzlDd2WgCWQpR8TXm q1XlqdgvQa6g28xfzMo5aT1VqjzaM/6RXUY1Ub5iUTZWyE+PgfSawOj2Eg4gu7EL MB9I5gVSG5GmNKKGXHE5/drfjorvfyc= -----END CERTIFICATE-----Generated at Thu Aug 27 15:19:12 2026 by rpki-client