$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa File: 885c11da-75ed-30f3-be92-905354edd7ef.roa (raw, json) Hash identifier: WGAEsr28c2Cfs3XlnoWqfVED/B6Idcb7zyHswMCZsF0= Subject key identifier: 95:A2:30:5A:E0:3F:70:7C:20:D5:3C:28:91:7C:D3:3D:78:13:E4:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED861E591876BF85E5A84FBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 173.189.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:e5:91:87:6b:f8:5e:5a:84:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=757fa7a2-505d-4abc-b5be-52b83f9f5032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:79:4d:ac:01:76:bb:5c:80:65:11:31:dc:5a: 2d:82:c1:6f:2f:9f:7b:d8:bb:91:ef:ae:d6:a6:7c: 48:bf:b4:3a:23:fb:6e:70:b7:e8:53:3d:bb:64:49: 35:c4:c9:66:45:e4:45:20:27:32:92:17:d9:82:f1: ca:e3:10:58:e4:6d:b6:81:40:4a:a6:cf:29:71:b0: c9:7f:97:bb:43:44:92:f3:40:fe:f8:07:37:ce:ac: 6e:f7:51:34:34:72:e0:45:ea:6e:72:47:8c:64:7a: f9:df:10:47:4b:f4:2c:51:c5:0c:99:15:38:e7:41: bc:0c:cf:16:ad:c5:47:00:09:f7:21:54:14:86:1e: 38:5d:58:cd:86:8b:3f:55:fe:a2:de:73:56:07:48: ff:4b:9e:74:82:78:03:e0:6b:f1:49:3e:37:be:a2: ed:47:dc:44:d5:f6:3d:25:35:3e:b9:4d:2c:c3:41: 7d:aa:f7:7d:38:63:aa:5f:dc:5d:cf:14:be:72:8e: 0a:e2:90:d6:67:3b:45:73:14:6a:f3:e0:ab:6d:cd: d2:f2:56:97:08:ef:47:45:90:fc:7b:3d:60:b9:9e: b7:82:f8:44:1b:b1:4f:70:71:54:f7:b5:a6:c4:3b: aa:92:c7:ee:6f:d5:ef:59:94:74:09:c2:c7:ff:86: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A2:30:5A:E0:3F:70:7C:20:D5:3C:28:91:7C:D3:3D:78:13:E4:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b0:63:20:a7:b7:81:d9:cd:96:25:1f:fb:c7:19:60:c9:b7: 30:c5:25:d3:35:ec:31:2f:d7:5e:25:d1:c2:f7:9a:4e:45:03: 26:e2:64:79:81:e4:35:4c:1c:27:87:70:de:ae:8a:4f:58:21: cf:30:9d:b5:b4:d0:09:b3:4e:23:cf:f4:e8:de:c5:37:c7:d6: 5c:6a:75:f0:6d:26:cc:94:98:54:b9:02:d1:4b:25:c2:a6:9e: 9e:42:aa:4a:48:3c:a4:fd:a8:5d:a9:c8:ad:0c:ac:5c:e3:98: 46:26:05:d4:1c:3d:96:4a:d2:fe:1d:24:31:c7:3c:f5:f1:f3: 5d:6b:ca:a0:cf:52:43:fe:9e:c6:75:70:5f:bb:87:69:af:76: 86:92:d9:01:79:ac:82:ca:21:02:b7:59:bf:bc:4a:1b:a2:20: e6:8e:24:ab:49:2c:d6:b1:86:d2:85:f3:b5:25:f9:b5:da:6b: 6c:af:22:67:b5:f0:4c:fb:b8:1e:da:2f:c2:57:17:d9:0c:98: f1:f7:b2:6e:29:40:eb:08:19:f8:6c:57:f3:55:8e:5d:6f:b0: 8f:6a:2c:35:ab:67:e6:94:db:f9:08:28:6c:c8:32:83:46:9a: d6:2d:47:09:78:a4:9a:02:21:49:d2:ef:65:e0:52:f6:f9:af: ed:88:a2:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYeWRh2v4XlqE+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NzU3ZmE3YTItNTA1ZC00YWJjLWI1YmUtNTJiODNmOWY1MDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnlNrAF2u1yAZREx3FotgsFvL5972LuR767W pnxIv7Q6I/tucLfoUz27ZEk1xMlmReRFICcykhfZgvHK4xBY5G22gUBKps8pcbDJ f5e7Q0SS80D++Ac3zqxu91E0NHLgRepuckeMZHr53xBHS/QsUcUMmRU450G8DM8W rcVHAAn3IVQUhh44XVjNhos/Vf6i3nNWB0j/S550gngD4GvxST43vqLtR9xE1fY9 JTU+uU0sw0F9qvd9OGOqX9xdzxS+co4K4pDWZztFcxRq8+Crbc3S8laXCO9HRZD8 ez1guZ63gvhEG7FPcHFU97WmxDuqksfub9XvWZR0CcLH/4YCPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWiMFrgP3B8INU8KJF80z14E+TPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODg1YzExZGEtNzVlZC0z MGYzLWJlOTItOTA1MzU0ZWRkN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGwYyCnt4HZzZYlH/vHGWDJtzDFJdM17DEv114l0cL3mk5FAybiZHmB 5DVMHCeHcN6uik9YIc8wnbW00AmzTiPP9OjexTfH1lxqdfBtJsyUmFS5AtFLJcKm np5CqkpIPKT9qF2pyK0MrFzjmEYmBdQcPZZK0v4dJDHHPPXx811ryqDPUkP+nsZ1 cF+7h2mvdoaS2QF5rILKIQK3Wb+8ShuiIOaOJKtJLNaxhtKF87Ul+bXaa2yvIme1 8Ez7uB7aL8JXF9kMmPH3sm4pQOsIGfhsV/NVjl1vsI9qLDWrZ+aU2/kIKGzIMoNG mtYtRwl4pJoCIUnS72XgUvb5r+2Iogs= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:34 2026 by rpki-client