$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa File: 844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa (raw, json) Hash identifier: vKfmd52PUCrsQw4Ol2anZwBQtLWoyYgC92AiUsDvNbw= Subject key identifier: A2:7E:28:E7:BE:7C:E4:25:E8:78:7F:9D:FE:21:36:16:BD:53:C9:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1EAB377B16D93BD340680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 20458 IP address blocks: 216.204.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:ea:b3:77:b1:6d:93:bd:34:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=bd8fc558-5916-4f77-8527-a1f1a1dae30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1d:1d:52:cd:cb:2c:86:3b:76:bf:4d:13:ce: f7:85:eb:a2:b3:01:e8:5c:d9:55:bf:c8:9f:7f:e4: 6f:b2:1d:34:8a:f3:ce:98:a8:c0:04:dd:a5:d2:4c: ca:fa:7b:f5:8d:97:e2:83:d4:4e:d0:dd:49:cf:ca: 47:58:cd:46:c6:1e:16:14:3f:7a:06:11:41:ee:4b: a9:c5:8f:7c:dd:55:02:24:c5:5e:44:be:0c:25:80: 04:2b:27:83:34:ca:d6:29:93:fe:a7:38:20:19:dd: 4d:2d:d0:5e:3e:9c:80:f4:5e:fd:fb:3a:45:5e:16: 77:54:78:84:8e:a0:34:b3:55:5f:fa:cb:f7:2e:27: a1:42:2e:b4:87:01:11:a3:67:22:b0:08:e4:9a:2c: 6c:1b:6f:ab:6f:5d:62:51:73:b6:98:6b:eb:4e:64: b2:e9:7d:38:05:72:55:a6:de:1b:88:b3:f5:ab:ad: d7:bd:d8:f2:ac:0c:3e:d3:c6:dd:b2:74:97:3d:de: 38:81:cb:7d:e3:14:4e:2e:d7:d6:84:c1:17:25:17: b5:fa:0d:5e:e6:1d:f1:3c:18:a1:d3:d7:75:c7:64: 73:ff:4e:cf:32:57:c7:74:9b:be:2c:b5:05:e8:26: 39:00:9c:ec:bb:d0:05:9b:2b:1a:4e:0b:71:60:ee: b9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7E:28:E7:BE:7C:E4:25:E8:78:7F:9D:FE:21:36:16:BD:53:C9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.204.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3b:e0:7b:38:cf:44:90:1c:6d:99:a2:8e:08:1a:04:00:1c: 64:95:95:8d:1e:6f:cf:bd:50:ac:38:69:11:e4:80:bd:4a:af: 32:ed:8b:ba:cd:41:75:6e:33:e6:d9:32:fa:5a:3e:84:d3:19: c0:b9:00:e7:09:4c:50:cb:47:70:fa:d2:90:f2:13:ed:3c:22: d3:6e:43:be:f8:c6:9e:d4:a4:bc:ee:f0:ab:06:6d:26:2e:76: c6:51:d7:6a:84:69:cd:de:cd:d9:30:00:6c:76:62:d7:ae:99: 52:d5:99:a7:1a:69:fc:8a:d6:c1:94:e0:95:b5:d2:c4:cc:68: 66:c1:ff:df:89:f5:f0:70:1d:39:88:3e:94:e5:45:90:f8:b2: 72:29:a4:c4:48:58:ee:bd:db:b5:35:3f:d0:d9:c5:34:d7:61: 6d:61:df:9f:5a:94:d7:ac:81:e7:cc:cf:d9:a2:b8:d0:f7:e9: 6d:4f:c6:ed:6b:ee:d2:26:ad:a8:d2:f5:56:ba:65:67:c0:f4: e2:09:98:0e:2d:ab:ca:93:c8:72:06:e0:dc:14:9e:2f:7a:7e: ab:92:0c:79:1c:06:a2:82:ef:a1:c8:3c:87:e0:4f:48:27:b5: 01:22:11:a9:65:7b:6c:56:b0:2c:18:33:09:ee:b4:5e:6d:80: 84:5a:f2:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseqzd7Ftk700BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk YmQ4ZmM1NTgtNTkxNi00Zjc3LTg1MjctYTFmMWExZGFlMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx0dUs3LLIY7dr9NE873heuiswHoXNlVv8if f+Rvsh00ivPOmKjABN2l0kzK+nv1jZfig9RO0N1Jz8pHWM1Gxh4WFD96BhFB7kup xY983VUCJMVeRL4MJYAEKyeDNMrWKZP+pzggGd1NLdBePpyA9F79+zpFXhZ3VHiE jqA0s1Vf+sv3LiehQi60hwERo2cisAjkmixsG2+rb11iUXO2mGvrTmSy6X04BXJV pt4biLP1q63XvdjyrAw+08bdsnSXPd44gct94xROLtfWhMEXJRe1+g1e5h3xPBih 09d1x2Rz/07PMlfHdJu+LLUF6CY5AJzsu9AFmysaTgtxYO65XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ+KOe+fOQl6Hh/nf4hNha9U8nYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ0ZDBiNDItMWYzMC0z ZTI3LWE3M2EtNmE2ZDhmMDRjMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MyTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA74Hs4z0SQHG2Zoo4IGgQAHGSVlY0eb8+9UKw4aRHkgL1KrzLti7rN QXVuM+bZMvpaPoTTGcC5AOcJTFDLR3D60pDyE+08ItNuQ774xp7UpLzu8KsGbSYu dsZR12qEac3ezdkwAGx2YteumVLVmacaafyK1sGU4JW10sTMaGbB/9+J9fBwHTmI PpTlRZD4snIppMRIWO6927U1P9DZxTTXYW1h359alNesgefMz9miuND36W1Pxu1r 7tImrajS9Va6ZWfA9OIJmA4tq8qTyHIG4NwUni96fquSDHkcBqKC76HIPIfgT0gn tQEiEalle2xWsCwYMwnutF5tgIRa8pU= -----END CERTIFICATE-----Generated at Thu Aug 27 16:13:55 2026 by rpki-client