$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8520335c-5409-30cc-874f-c7fd7d7b6a29.roa File: 8520335c-5409-30cc-874f-c7fd7d7b6a29.roa (raw, json) Hash identifier: z/nWOpjrQxG5G+P9BWRV4Tw8ANf0E6vfvuboc0FeRac= Subject key identifier: 1A:74:18:72:EB:E1:55:54:C4:2D:0A:16:46:8C:65:67:CE:A3:ED:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED862896303C0D4E4C8D13880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8520335c-5409-30cc-874f-c7fd7d7b6a29.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 64.24.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:89:63:03:c0:d4:e4:c8:d1:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=c4565801-585c-44e1-86ec-8302780f706c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b3:c5:12:30:15:b6:cf:0b:c1:5e:65:85:d3: 2d:48:5c:72:bf:09:30:6f:46:54:85:dc:f3:4e:b5: 73:28:d7:90:b7:68:12:25:d8:17:db:fb:40:e7:28: f5:ec:1c:0e:53:c2:48:2a:49:26:d0:8b:94:4c:ee: 74:dd:c3:c0:4a:f7:f3:a9:d5:1e:a3:7b:89:7d:72: 1b:71:52:30:d8:df:92:09:3b:d8:11:2d:c0:18:d4: 64:40:b5:e4:37:99:7b:93:26:16:c0:67:a0:9f:f7: f6:d6:95:3b:a9:91:df:a1:1d:62:62:f2:f5:7f:01: 42:42:6c:b7:72:c6:e5:05:79:00:85:7e:04:64:fe: ca:4a:0a:1a:9b:41:36:b6:fd:46:33:af:30:97:b2: 5b:7e:05:37:09:3e:83:f0:ba:e0:59:49:cf:2d:db: c8:43:eb:a5:21:c1:c8:94:cd:59:f8:bb:92:6f:c4: 5c:47:62:99:67:9e:7e:b2:d1:ea:42:1f:d4:d7:d9: e0:75:e5:0a:ef:7f:da:23:66:e1:a1:4b:83:3c:98: f7:bd:a4:d5:23:4f:3e:4c:83:4e:ca:34:53:c7:06: be:ac:df:13:c9:96:1c:92:05:93:32:64:76:9d:09: 5b:a2:14:ad:b5:97:50:66:f5:7f:c6:37:f3:18:f0: 6b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:74:18:72:EB:E1:55:54:C4:2D:0A:16:46:8C:65:67:CE:A3:ED:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8520335c-5409-30cc-874f-c7fd7d7b6a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:54:49:d2:3f:15:6d:f7:26:31:b6:28:66:3f:bb:71:a5:30: 61:ca:90:90:db:de:4e:54:4d:94:68:94:7d:73:9b:e0:a5:ee: e2:73:dd:ce:27:7b:4e:be:2b:d1:69:92:24:e0:8d:d4:a9:ec: 39:fa:51:0e:1a:a6:90:e2:11:26:64:44:56:ef:65:45:da:86: a9:c6:44:e3:4e:57:7e:ee:47:2f:b5:f3:8e:40:bd:74:d1:1f: f3:a9:5e:51:7a:7e:e4:8a:82:c6:b5:49:08:73:04:7f:d0:d5: bf:56:6a:3c:41:6d:86:14:17:42:9c:9a:d9:c3:2c:06:f2:7c: 9a:0e:90:b7:14:b1:18:ec:29:b6:6b:d9:84:38:aa:d3:66:b6: cc:12:ea:a2:3d:e8:57:91:53:62:89:0d:a2:97:e6:f4:7c:b3: 77:45:05:8d:63:b0:1b:79:90:cc:3a:cd:ef:fc:af:cf:aa:df: 68:e2:4d:54:ed:37:94:42:4a:58:92:5b:8d:13:81:72:d8:ac: 44:74:77:86:9a:da:4a:0c:d9:1d:ca:cc:f2:e1:2b:6d:0b:01: a0:bb:98:6a:fe:00:7b:e7:01:fa:9b:e6:5a:22:a7:91:46:fc: c1:48:26:94:06:04:76:b3:b2:c9:05:fa:d8:c9:f9:da:c1:b1: 9f:f9:86:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYoljA8DU5MjROIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YzQ1NjU4MDEtNTg1Yy00NGUxLTg2ZWMtODMwMjc4MGY3MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrPFEjAVts8LwV5lhdMtSFxyvwkwb0ZUhdzz TrVzKNeQt2gSJdgX2/tA5yj17BwOU8JIKkkm0IuUTO503cPASvfzqdUeo3uJfXIb cVIw2N+SCTvYES3AGNRkQLXkN5l7kyYWwGegn/f21pU7qZHfoR1iYvL1fwFCQmy3 csblBXkAhX4EZP7KSgoam0E2tv1GM68wl7JbfgU3CT6D8LrgWUnPLdvIQ+ulIcHI lM1Z+LuSb8RcR2KZZ55+stHqQh/U19ngdeUK73/aI2bhoUuDPJj3vaTVI08+TINO yjRTxwa+rN8TyZYckgWTMmR2nQlbohSttZdQZvV/xjfzGPBrHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp0GHLr4VVUxC0KFkaMZWfOo+0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODUyMDMzNWMtNTQwOS0z MGNjLTg3NGYtYzdmZDdkN2I2YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhUSdI/FW33JjG2KGY/u3GlMGHKkJDb3k5UTZRolH1zm+Cl7uJz3c4n e06+K9FpkiTgjdSp7Dn6UQ4appDiESZkRFbvZUXahqnGRONOV37uRy+1845AvXTR H/OpXlF6fuSKgsa1SQhzBH/Q1b9WajxBbYYUF0KcmtnDLAbyfJoOkLcUsRjsKbZr 2YQ4qtNmtswS6qI96FeRU2KJDaKX5vR8s3dFBY1jsBt5kMw6ze/8r8+q32jiTVTt N5RCSliSW40TgXLYrER0d4aa2koM2R3KzPLhK20LAaC7mGr+AHvnAfqb5loip5FG /MFIJpQGBHazsskF+tjJ+drBsZ/5hgg= -----END CERTIFICATE-----Generated at Thu Aug 27 12:30:31 2026 by rpki-client