$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87a0d397-3d10-3273-adc1-3ee2e8c3e382.roa File: 87a0d397-3d10-3273-adc1-3ee2e8c3e382.roa (raw, json) Hash identifier: GGgrjPxN/CxYp61hxQOfPKVsvF7gt4sMV8n9kHFqMFM= Subject key identifier: 0B:B4:56:A3:21:25:3C:B0:01:7E:59:7C:6B:FB:41:50:0F:5A:34:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F051B909B181127B5C6297980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87a0d397-3d10-3273-adc1-3ee2e8c3e382.roa Signing time: Mon 31 Aug 2026 13:30:02 +0000 ROA not before: Mon 31 Aug 2026 13:30:02 +0000 ROA not after: Sun 29 Nov 2026 14:30:02 +0000 asID: 7029 IP address blocks: 173.185.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:1b:90:9b:18:11:27:b5:c6:29:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 31 13:30:02 2026 GMT Not After : Nov 29 14:30:02 2026 GMT Subject: CN=4edaf173-a204-456a-b70e-bb0ad0b06862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:c3:48:bd:d2:29:b1:f0:c6:a9:d2:02:aa: 52:67:99:91:df:48:09:1a:81:c0:1c:a3:80:6a:e6: 1e:ca:c8:a1:58:0d:c2:99:d1:6b:ee:e9:5d:d3:e7: 15:fe:d3:89:f0:08:31:30:a9:2b:e2:50:1c:e1:36: 45:52:2b:4e:0e:ea:ca:37:66:05:d0:ff:c0:94:64: 04:51:1b:74:2b:17:4b:de:17:20:4e:73:5f:88:28: 43:23:c7:21:ed:2e:c0:58:b4:cb:57:ef:62:d8:21: 14:7b:7c:63:89:50:e3:5c:e1:62:85:6b:b8:8c:78: 6c:a2:fe:ca:19:72:89:69:d0:06:18:9a:c1:48:4f: 33:57:6e:f1:e4:e1:ea:75:b1:b2:d6:7d:7d:3a:4c: 47:5b:57:cd:c5:a2:8d:2a:1c:bc:85:be:23:f4:59: ca:fd:e6:4a:36:b0:52:8a:4a:ca:37:8f:d5:60:6b: 11:72:d5:24:a3:34:19:f9:8d:8b:87:36:98:de:0e: 23:2f:5b:24:54:91:d7:6f:ab:fc:12:dd:a1:f6:14: ed:4d:21:5e:8a:b3:c7:c8:0b:49:de:ea:a1:d6:73: 8a:e0:26:ee:45:83:cc:3b:56:fe:51:89:94:21:80: 4c:88:b1:a9:bc:50:72:c4:40:60:31:75:e1:0a:8d: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B4:56:A3:21:25:3C:B0:01:7E:59:7C:6B:FB:41:50:0F:5A:34:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87a0d397-3d10-3273-adc1-3ee2e8c3e382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:44:43:58:b3:bf:88:e4:8d:be:1e:bb:c1:d9:9b:3e:cc:c1: d1:13:c5:32:ed:8a:b6:70:3b:8b:3a:c2:82:c5:0d:b6:10:e9: 7b:f9:78:17:cc:ee:8b:9e:9c:7f:78:73:00:2b:44:29:22:aa: ed:c9:24:b3:5c:27:2f:1e:85:e8:4f:7c:d2:e8:86:ae:96:d9: c9:81:56:54:f2:2a:c1:02:0e:42:5f:c2:9c:a5:bb:98:90:de: 3f:43:49:b2:e4:4f:8c:8f:a5:ed:01:b9:cb:52:db:d0:96:27: ff:cb:e3:91:b1:76:96:8c:e4:33:e9:fc:78:5c:e4:db:95:03: 99:e5:8d:bf:57:e6:8c:d2:be:01:4d:8b:1b:64:27:de:ab:16: b0:62:65:e8:67:dc:cf:ba:70:15:fc:f5:f5:e3:d6:69:3e:5e: cc:cd:05:9c:c9:b9:35:13:4f:d7:c5:fe:51:cf:4a:3b:c9:ec: c8:a3:af:81:d0:88:ce:8e:8e:9a:6b:b8:72:ce:89:e1:8d:30: 61:99:5e:d6:6a:45:8a:54:c1:34:4b:ad:6d:0f:a9:8c:0d:3e: 07:e1:6e:3f:69:24:6b:fd:54:ec:c7:95:23:5e:6e:c3:2a:56: 24:40:3d:65:dd:20:4f:fc:60:fa:19:62:71:2c:a2:d8:71:06: 45:75:5e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8FG5CbGBEntcYpeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMTEzMzAwMloXDTI2MTEyOTE0MzAwMlowLzEtMCsGA1UEAxMk NGVkYWYxNzMtYTIwNC00NTZhLWI3MGUtYmIwYWQwYjA2ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtnDSL3SKbHwxqnSAqpSZ5mR30gJGoHAHKOA auYeysihWA3CmdFr7uld0+cV/tOJ8AgxMKkr4lAc4TZFUitODurKN2YF0P/AlGQE URt0KxdL3hcgTnNfiChDI8ch7S7AWLTLV+9i2CEUe3xjiVDjXOFihWu4jHhsov7K GXKJadAGGJrBSE8zV27x5OHqdbGy1n19OkxHW1fNxaKNKhy8hb4j9FnK/eZKNrBS ikrKN4/VYGsRctUkozQZ+Y2LhzaY3g4jL1skVJHXb6v8Et2h9hTtTSFeirPHyAtJ 3uqh1nOK4CbuRYPMO1b+UYmUIYBMiLGpvFByxEBgMXXhCo2uUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAu0VqMhJTywAX5ZfGv7QVAPWjRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdhMGQzOTctM2QxMC0z MjczLWFkYzEtM2VlMmU4YzNlMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlEQ1izv4jkjb4eu8HZmz7MwdETxTLtirZwO4s6woLFDbYQ6Xv5eBfM 7ouenH94cwArRCkiqu3JJLNcJy8ehehPfNLohq6W2cmBVlTyKsECDkJfwpylu5iQ 3j9DSbLkT4yPpe0BuctS29CWJ//L45GxdpaM5DPp/Hhc5NuVA5nljb9X5ozSvgFN ixtkJ96rFrBiZehn3M+6cBX89fXj1mk+XszNBZzJuTUTT9fF/lHPSjvJ7Mijr4HQ iM6OjppruHLOieGNMGGZXtZqRYpUwTRLrW0PqYwNPgfhbj9pJGv9VOzHlSNebsMq ViRAPWXdIE/8YPoZYnEsothxBkV1Xq0= -----END CERTIFICATE-----Generated at Tue Sep 1 03:01:31 2026 by rpki-client