$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa File: 9318fe24-60e4-3b51-8fce-61b094e34012.roa (raw, json) Hash identifier: +hs5xlxfNNvoci622vggA5W0ZVSKP2KjpPBpcmjpy3o= Subject key identifier: ED:D7:30:B4:95:C6:36:B2:C0:84:79:80:22:C8:FD:7D:94:5B:47:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78F2C098854177CFBB15600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 208.101.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:2c:09:88:54:17:7c:fb:b1:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=827660a6-d4c0-417b-bf79-b708bde76808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:51:e5:3f:68:8a:4b:a9:16:e6:49:4b:b8:39: a5:3f:63:73:1b:c7:bc:ff:18:8f:f4:34:2e:5e:3a: 4d:da:a3:c3:83:46:e3:6c:3c:ee:57:a6:21:f7:50: c3:3d:65:ff:0c:62:f9:19:0b:b0:12:50:e3:fa:1b: 63:d7:f4:57:47:42:cc:e9:8f:8a:a8:9c:c5:4a:f3: 2d:c7:3f:8a:a5:5f:be:4a:a1:d5:92:c9:75:aa:bf: 19:87:e1:4b:95:ed:2f:b9:b4:43:a0:03:98:d2:db: 67:ab:b4:9b:2a:11:2c:a9:f3:88:00:f4:4f:02:f7: a3:b4:cf:b2:4d:f6:56:d7:05:3e:40:79:4a:77:d3: f0:26:b6:33:02:04:53:b8:90:36:8e:45:38:44:97: 2a:d5:b2:66:3b:da:fa:59:ac:39:c2:02:ec:db:de: 42:b1:07:e2:01:e0:12:ac:f2:e4:8b:18:a2:e2:c0: 1d:7d:1a:97:13:b7:61:58:cf:6c:0e:fc:5a:a5:cc: 5a:9d:da:32:39:c1:bc:4b:85:93:9f:40:d0:2e:bb: a8:b3:66:a0:63:a7:4b:16:73:56:2e:7d:e8:90:33: f6:73:27:96:50:00:26:32:f4:b2:bf:35:49:a8:9e: 04:c0:75:42:cb:2a:32:93:52:5b:e0:17:77:34:fd: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:30:B4:95:C6:36:B2:C0:84:79:80:22:C8:FD:7D:94:5B:47:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:be:7d:04:d0:9b:7e:55:85:64:cd:cc:d6:6d:51:a2:6d:ab: da:28:57:5a:28:82:ab:de:c6:50:9f:6f:5d:b6:6a:63:ec:f9: 5b:4e:7b:88:b2:75:c6:63:78:e5:49:4c:83:fc:c1:52:95:92: f1:80:83:97:4a:29:00:21:73:04:d1:a1:04:db:49:af:8e:15: 86:12:b8:c5:5f:b8:5e:ef:07:67:5c:4b:c9:9d:7f:ea:8c:01: 2e:9b:da:b0:c6:1a:e6:65:9e:04:96:19:af:73:44:68:4e:f1: 4c:a5:3f:82:1d:f8:6d:03:b0:9b:b2:9d:46:10:6e:1c:04:1d: e0:6b:64:cb:57:58:e8:4b:b5:3a:f4:1e:ee:f4:b3:b8:bf:ed: 10:ed:52:e0:e8:59:61:54:26:83:6f:82:f1:b5:28:c9:61:31: e6:7c:b0:95:ee:c6:6f:41:48:31:59:4e:8c:24:20:33:e1:0b: e8:b3:65:10:f4:43:03:44:ed:b9:1b:7b:9c:21:33:02:a8:19: 6a:83:f3:65:8d:a9:8f:74:62:9a:a8:0e:5a:34:8b:72:a4:5f: aa:ce:e2:e3:93:45:31:7b:d4:25:05:e6:64:3f:5f:a5:21:70: 12:01:59:b5:5c:ce:c5:28:bf:8d:56:e4:96:b2:56:3e:73:10: 2d:cc:10:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njywJiFQXfPuxVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODI3NjYwYTYtZDRjMC00MTdiLWJmNzktYjcwOGJkZTc2ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlHlP2iKS6kW5klLuDmlP2NzG8e8/xiP9DQu XjpN2qPDg0bjbDzuV6Yh91DDPWX/DGL5GQuwElDj+htj1/RXR0LM6Y+KqJzFSvMt xz+KpV++SqHVksl1qr8Zh+FLle0vubRDoAOY0ttnq7SbKhEsqfOIAPRPAvejtM+y TfZW1wU+QHlKd9PwJrYzAgRTuJA2jkU4RJcq1bJmO9r6Waw5wgLs295CsQfiAeAS rPLkixii4sAdfRqXE7dhWM9sDvxapcxandoyOcG8S4WTn0DQLruos2agY6dLFnNW Ln3okDP2cyeWUAAmMvSyvzVJqJ4EwHVCyyoyk1Jb4Bd3NP0piQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3XMLSVxjaywIR5gCLI/X2UW0dZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMxOGZlMjQtNjBlNC0z YjUxLThmY2UtNjFiMDk0ZTM0MDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW+fQTQm35VhWTNzNZtUaJtq9ooV1oogqvexlCfb122amPs+VtOe4iy dcZjeOVJTIP8wVKVkvGAg5dKKQAhcwTRoQTbSa+OFYYSuMVfuF7vB2dcS8mdf+qM AS6b2rDGGuZlngSWGa9zRGhO8UylP4Id+G0DsJuynUYQbhwEHeBrZMtXWOhLtTr0 Hu70s7i/7RDtUuDoWWFUJoNvgvG1KMlhMeZ8sJXuxm9BSDFZTowkIDPhC+izZRD0 QwNE7bkbe5whMwKoGWqD82WNqY90YpqoDlo0i3KkX6rO4uOTRTF71CUF5mQ/X6Uh cBIBWbVczsUov41W5JayVj5zEC3MEBM= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:25 2026 by rpki-client