$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c1c13d6-ea63-3a65-a0e6-34319d779258.roa File: 9c1c13d6-ea63-3a65-a0e6-34319d779258.roa (raw, json) Hash identifier: B0QcchYCKCzrg1fh6KuQmkFBD0vsq3mUMAymME9GXXk= Subject key identifier: D1:95:25:16:66:1D:95:13:95:27:6E:28:17:71:7F:92:B7:52:38:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FB97D773A2F548CF5000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c1c13d6-ea63-3a65-a0e6-34319d779258.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.191.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fb:97:d7:73:a2:f5:48:cf:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=f36bacf4-af09-49ae-9ca2-da9abc3c47c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:56:b6:8e:8c:5c:93:81:94:3f:52:26:e2: 82:36:78:87:6b:ab:0a:53:41:7a:71:f8:57:15:8c: e7:bd:1d:de:40:4f:ef:2f:85:be:6e:6f:df:af:dc: 69:49:01:a1:b0:24:c2:34:82:02:98:e6:4c:47:11: 07:67:f5:b8:83:3e:76:a2:c4:60:4b:91:79:9d:25: 44:68:de:3d:81:f1:00:b9:84:9b:eb:90:47:02:b9: 18:ca:82:1f:01:e4:e0:57:72:e3:31:5c:60:70:11: e5:b1:4f:04:42:e3:9b:4e:15:12:cc:17:93:6d:e6: d8:e9:d9:d7:9a:c0:07:67:01:48:b6:2b:44:8a:66: 37:93:38:db:6f:3c:27:f7:bb:e5:8f:84:3a:c7:b8: cf:86:cf:8d:52:38:59:e3:e6:75:ea:d7:16:cc:8d: ad:b7:b3:e6:3b:db:ae:ee:0d:d4:0f:f9:00:08:ae: 8d:26:73:45:51:77:fa:63:3c:86:a2:9a:7f:a7:41: 2a:e8:1e:84:18:71:0e:ce:6b:0c:1c:ff:b6:13:90: 30:02:5c:78:ad:36:3f:87:b9:3f:41:46:ad:0f:ea: 93:fa:19:8f:b3:de:f8:e8:6a:32:37:40:8b:c3:a1: 76:4b:6b:9d:c4:33:80:74:1e:73:13:2e:6d:29:bd: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:95:25:16:66:1D:95:13:95:27:6E:28:17:71:7F:92:B7:52:38:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c1c13d6-ea63-3a65-a0e6-34319d779258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c7:34:74:e4:fb:5b:09:97:bb:5b:28:16:e5:2e:69:b6:ab: c3:0d:f0:83:44:03:17:23:a1:4b:17:9f:5f:9c:c4:bc:81:14: 68:5a:fe:d5:8b:63:ef:0a:36:78:0b:32:3c:ef:eb:4f:db:4f: 0c:47:c9:a6:4d:f7:90:db:af:19:1c:bc:92:72:f4:c6:18:ee: 1b:59:62:8d:e9:0b:9c:68:65:f4:13:06:0e:f2:8b:22:a9:24: 70:31:ec:13:94:82:7d:2f:2a:84:79:1f:68:e9:36:fa:c8:02: f0:05:1d:f6:b3:91:d5:37:d2:ce:61:9e:cb:03:2f:bb:78:ee: ca:ad:27:c8:e9:1e:13:28:f7:6b:25:47:28:c3:ab:f9:0e:2d: 15:18:d0:c4:77:7d:31:f0:a1:22:22:c0:28:d6:5f:8c:7a:ab: ee:2f:ed:0d:9e:e4:35:69:16:dc:6b:6f:0d:b0:9b:4e:8e:b7: 55:e7:13:f8:65:72:ef:5a:70:25:d8:05:57:ed:53:68:15:da: 49:e3:e2:c1:64:a4:34:39:d1:96:04:97:c8:50:b8:94:ba:8b: ab:81:82:a1:22:92:c2:72:f8:56:33:ca:4e:54:ac:bf:8b:ed: 25:9f:31:40:a1:78:14:41:00:3d:70:5e:b8:42:d6:e0:c1:a4: 2a:d0:89:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vuX13Oi9UjPUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZjM2YmFjZjQtYWYwOS00OWFlLTljYTItZGE5YWJjM2M0N2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUJWto6MXJOBlD9SJuKCNniHa6sKU0F6cfhX FYznvR3eQE/vL4W+bm/fr9xpSQGhsCTCNIICmOZMRxEHZ/W4gz52osRgS5F5nSVE aN49gfEAuYSb65BHArkYyoIfAeTgV3LjMVxgcBHlsU8EQuObThUSzBeTbebY6dnX msAHZwFItitEimY3kzjbbzwn97vlj4Q6x7jPhs+NUjhZ4+Z16tcWzI2tt7PmO9uu 7g3UD/kACK6NJnNFUXf6YzyGopp/p0Eq6B6EGHEOzmsMHP+2E5AwAlx4rTY/h7k/ QUatD+qT+hmPs9746GoyN0CLw6F2S2udxDOAdB5zEy5tKb2bSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGVJRZmHZUTlSduKBdxf5K3UjhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWMxYzEzZDYtZWE2My0z YTY1LWEwZTYtMzQzMTlkNzc5MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPHNHTk+1sJl7tbKBblLmm2q8MN8INEAxcjoUsXn1+cxLyBFGha/tWL Y+8KNngLMjzv60/bTwxHyaZN95DbrxkcvJJy9MYY7htZYo3pC5xoZfQTBg7yiyKp JHAx7BOUgn0vKoR5H2jpNvrIAvAFHfazkdU30s5hnssDL7t47sqtJ8jpHhMo92sl RyjDq/kOLRUY0MR3fTHwoSIiwCjWX4x6q+4v7Q2e5DVpFtxrbw2wm06Ot1XnE/hl cu9acCXYBVftU2gV2knj4sFkpDQ50ZYEl8hQuJS6i6uBgqEiksJy+FYzyk5UrL+L 7SWfMUCheBRBAD1wXrhC1uDBpCrQiWY= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:20 2026 by rpki-client