$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa File: a0faf63f-7c57-3279-8a19-b5c4db997e94.roa (raw, json) Hash identifier: 06uLtTJrEaPrDzDjK4DE0IY+EnYj47xuV4LxzSp6tZo= Subject key identifier: BA:0F:EC:C9:F0:25:BF:BC:84:CB:F5:D0:49:52:7F:E4:2D:B2:44:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EBB11C0E9C493DC172C441100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 69.40.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c0:e9:c4:93:dc:17:2c:44:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=bb5adceb-8286-4b91-a24f-a45c28c42d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:df:98:ed:ff:af:8b:64:77:0e:59:e3:84:a8: b0:de:b7:59:3a:11:c1:b9:1f:63:38:70:82:0d:2f: b9:92:2f:04:05:2a:3a:c4:f6:7a:bb:6d:c6:a2:fa: 5a:d4:a4:e4:f0:fa:c9:e0:2d:aa:47:33:1a:da:27: 72:31:f2:32:42:62:6c:30:a0:1d:40:0e:24:bd:9f: 39:34:1b:38:4e:2a:de:55:c9:fa:23:11:8b:38:81: 6a:c4:da:8f:68:87:0c:96:89:1b:1f:16:6d:39:c2: fc:87:21:fa:63:10:ca:91:32:38:86:9f:be:a3:ce: 69:60:53:ac:a4:cf:65:9b:77:3f:ea:19:cd:bc:0f: 01:cf:4d:3a:82:c4:25:8a:d7:ad:e6:66:b6:ce:ac: f3:ed:eb:76:29:68:7c:4d:ad:6e:97:e0:16:66:52: eb:fe:43:a1:97:c2:f1:a6:5f:77:70:2d:b9:9d:a3: 24:af:0b:64:4b:18:4f:1d:f6:91:ca:10:3e:cd:01: e8:c5:55:ba:d4:0e:d4:12:97:17:ba:46:c5:c8:03: ce:ca:4e:63:31:f8:a2:46:80:6d:81:40:36:bc:f9: 96:d6:66:5d:71:8c:f7:9e:69:9a:84:c8:a3:eb:19: 03:c1:29:fe:20:73:8b:cf:3c:8f:44:a5:62:75:08: c7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0F:EC:C9:F0:25:BF:BC:84:CB:F5:D0:49:52:7F:E4:2D:B2:44:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:09:ff:fb:cc:3e:47:a7:fa:53:76:49:eb:c2:4d:44:e1:54: 74:bd:14:28:0c:72:c4:cb:a8:9d:ae:98:91:e2:ec:d6:f9:86: b8:19:39:18:10:c2:ca:a8:ce:6d:5b:e1:cc:97:36:72:82:38: 99:90:2f:21:b3:ee:61:fe:25:0b:dc:33:48:42:9d:9a:21:d7: e3:19:5d:95:f9:cc:e8:f3:04:ae:63:ac:f2:91:74:81:7e:51: be:44:28:46:6a:ec:cd:5e:c1:bc:e3:ac:d4:8c:49:77:e7:ee: 0a:1d:8a:18:e1:bb:92:87:b6:f5:53:81:e8:fb:20:1c:8f:2d: 71:dd:fa:12:8d:94:e5:1b:77:09:a3:e6:31:99:82:74:e2:c1: 38:dc:df:6e:42:36:83:ab:0c:48:a9:f9:d9:b9:2b:48:fa:53: 5b:af:4b:c2:f5:c0:53:66:12:85:8e:f9:dc:fd:ba:65:19:f3: 60:ba:81:9b:70:e7:1b:fd:38:d6:bd:bc:44:6e:63:25:31:5c: 24:32:e7:b8:11:9c:4a:13:c8:a2:7e:41:35:9c:4f:18:e6:95: 48:bf:86:3a:b6:4d:6a:f5:ec:74:a5:3c:26:08:46:39:9c:bd: c9:42:11:1b:dd:54:7f:6b:20:cf:e3:e1:a1:44:90:8f:30:de: ed:96:37:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcDpxJPcFyxEEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YmI1YWRjZWItODI4Ni00YjkxLWEyNGYtYTQ1YzI4YzQyZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N+Y7f+vi2R3DlnjhKiw3rdZOhHBuR9jOHCC DS+5ki8EBSo6xPZ6u23Govpa1KTk8PrJ4C2qRzMa2idyMfIyQmJsMKAdQA4kvZ85 NBs4TireVcn6IxGLOIFqxNqPaIcMlokbHxZtOcL8hyH6YxDKkTI4hp++o85pYFOs pM9lm3c/6hnNvA8Bz006gsQlitet5ma2zqzz7et2KWh8Ta1ul+AWZlLr/kOhl8Lx pl93cC25naMkrwtkSxhPHfaRyhA+zQHoxVW61A7UEpcXukbFyAPOyk5jMfiiRoBt gUA2vPmW1mZdcYz3nmmahMij6xkDwSn+IHOLzzyPRKVidQjHHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoP7MnwJb+8hMv10ElSf+QtskS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTBmYWY2M2YtN2M1Ny0z Mjc5LThhMTktYjVjNGRiOTk3ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoJ//vMPken+lN2SevCTUThVHS9FCgMcsTLqJ2umJHi7Nb5hrgZORgQ wsqozm1b4cyXNnKCOJmQLyGz7mH+JQvcM0hCnZoh1+MZXZX5zOjzBK5jrPKRdIF+ Ub5EKEZq7M1ewbzjrNSMSXfn7godihjhu5KHtvVTgej7IByPLXHd+hKNlOUbdwmj 5jGZgnTiwTjc325CNoOrDEip+dm5K0j6U1uvS8L1wFNmEoWO+dz9umUZ82C6gZtw 5xv9ONa9vERuYyUxXCQy57gRnEoTyKJ+QTWcTxjmlUi/hjq2TWr17HSlPCYIRjmc vclCERvdVH9rIM/j4aFEkI8w3u2WNwA= -----END CERTIFICATE-----Generated at Thu Aug 27 12:30:15 2026 by rpki-client