$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86f4d70e-02e5-328d-9109-3f9e3f75c579.roa File: 86f4d70e-02e5-328d-9109-3f9e3f75c579.roa (raw, json) Hash identifier: ASSZix/TK15ecPTmoreT+lNy18BNIMZz0RkQh6IkyfU= Subject key identifier: 0B:F0:5A:18:37:75:6D:9E:56:85:C1:FE:A2:7B:E3:65:DF:5B:1B:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78F3386666BDD36A03C4040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86f4d70e-02e5-328d-9109-3f9e3f75c579.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 216.96.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:33:86:66:6b:dd:36:a0:3c:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=db02faa3-5d5d-4a0e-9eb3-f97d257efb2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:84:f6:50:72:1a:0d:1c:16:12:5a:b9:d3:00: 0b:f5:fc:3d:5c:55:20:4e:09:12:b1:ad:0a:9c:5c: ea:fb:1c:5b:6a:cb:96:df:48:fa:9b:06:45:76:88: 5b:0c:46:4e:6e:23:da:8e:1d:a3:17:39:99:c0:47: 05:48:09:fd:36:f4:46:32:b2:c2:ec:3e:67:ce:71: d7:de:6f:83:96:24:28:db:fd:80:90:cc:45:9e:bf: e5:81:4f:26:06:a7:fd:b0:d6:5b:39:01:1c:a1:98: 2f:ec:e1:9b:62:00:a2:54:6c:a7:1d:a7:02:c0:a6: e6:8c:4e:2e:7d:a0:5f:71:24:45:a3:a6:0f:94:df: 2d:25:62:85:a9:b7:33:52:33:e2:4a:64:b4:e3:c5: 93:ba:cf:b9:32:1e:1c:87:90:a8:62:f9:75:2c:ed: a4:b0:66:b8:e9:16:6e:f8:03:f8:8a:dd:ae:4b:94: 7c:46:06:97:d3:cb:1d:c3:82:7b:40:12:9b:7a:37: ed:bc:96:3e:66:d2:05:e4:28:9a:51:30:e1:d5:1e: 05:51:9d:02:41:4a:f7:ab:cb:fa:48:39:b6:1a:c8: 7f:fd:7d:3d:91:5e:82:7e:b8:67:8c:50:f9:55:89: b5:d9:b4:cf:6f:8f:80:f0:5d:18:bb:b3:61:2a:ec: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F0:5A:18:37:75:6D:9E:56:85:C1:FE:A2:7B:E3:65:DF:5B:1B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86f4d70e-02e5-328d-9109-3f9e3f75c579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:09:3b:c6:0d:13:62:8d:19:60:11:47:82:46:19:a3:8d:53: 4f:02:a1:e7:40:40:92:1f:81:c4:30:cc:4b:49:33:dc:fd:87: 28:79:cd:77:42:a9:b0:0c:b7:52:7f:8c:dc:48:33:8c:1f:43: 73:06:a6:c3:1d:e8:27:b8:8a:9b:9c:9d:f8:5c:8a:65:04:8a: e6:97:e7:d8:fb:da:de:eb:ef:41:9c:f8:51:40:ef:ae:54:d5: 2e:ca:30:86:f7:5b:d7:3e:bb:9b:73:80:c3:32:5a:85:ab:6c: a8:6b:4e:c5:03:b5:86:b3:5b:46:7a:de:0c:1f:9c:1a:d2:09: 80:75:10:a8:25:fd:d4:f6:a7:65:e8:84:e4:59:fc:6b:b0:5c: a3:ad:90:53:3c:0a:f4:24:2f:53:7b:6f:01:a6:dc:b0:11:88: a7:3c:fa:0e:ec:25:85:da:55:dd:05:3a:ab:fd:49:74:2c:3b: f3:12:45:63:2c:6d:e0:f5:8c:bd:ac:41:e3:e2:d8:d1:08:10: 21:75:48:af:ca:16:c2:29:42:79:51:dd:1b:4f:07:aa:bb:95: 82:7c:a3:7d:e9:3e:56:b0:8e:e1:34:36:0f:dc:5f:ee:be:ea: 53:ad:5a:10:73:97:32:55:25:b7:1c:12:2c:6a:d7:66:d1:0f: 82:77:87:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njzOGZmvdNqA8QEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGIwMmZhYTMtNWQ1ZC00YTBlLTllYjMtZjk3ZDI1N2VmYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYT2UHIaDRwWElq50wAL9fw9XFUgTgkSsa0K nFzq+xxbasuW30j6mwZFdohbDEZObiPajh2jFzmZwEcFSAn9NvRGMrLC7D5nznHX 3m+DliQo2/2AkMxFnr/lgU8mBqf9sNZbOQEcoZgv7OGbYgCiVGynHacCwKbmjE4u faBfcSRFo6YPlN8tJWKFqbczUjPiSmS048WTus+5Mh4ch5CoYvl1LO2ksGa46RZu +AP4it2uS5R8RgaX08sdw4J7QBKbejftvJY+ZtIF5CiaUTDh1R4FUZ0CQUr3q8v6 SDm2Gsh//X09kV6CfrhnjFD5VYm12bTPb4+A8F0Yu7NhKuxKqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvwWhg3dW2eVoXB/qJ742XfWxvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODZmNGQ3MGUtMDJlNS0z MjhkLTkxMDktM2Y5ZTNmNzVjNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMJO8YNE2KNGWARR4JGGaONU08CoedAQJIfgcQwzEtJM9z9hyh5zXdC qbAMt1J/jNxIM4wfQ3MGpsMd6Ce4ipucnfhcimUEiuaX59j72t7r70Gc+FFA765U 1S7KMIb3W9c+u5tzgMMyWoWrbKhrTsUDtYazW0Z63gwfnBrSCYB1EKgl/dT2p2Xo hORZ/GuwXKOtkFM8CvQkL1N7bwGm3LARiKc8+g7sJYXaVd0FOqv9SXQsO/MSRWMs beD1jL2sQePi2NEIECF1SK/KFsIpQnlR3RtPB6q7lYJ8o33pPlawjuE0Ng/cX+6+ 6lOtWhBzlzJVJbccEixq12bRD4J3h0c= -----END CERTIFICATE-----Generated at Thu Aug 27 12:28:44 2026 by rpki-client