$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa File: a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa (raw, json) Hash identifier: V7XQ3rcT4Bk/mtb058lmXU4cFmkT16QEwV5egxnai2Y= Subject key identifier: C3:23:9E:B6:0F:37:82:0D:F0:5F:BF:63:C0:71:C6:AA:9D:FC:2A:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FDF5E77C9D8792FF2C50 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 67.140.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fd:f5:e7:7c:9d:87:92:ff:2c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=c8ebb124-7905-4f86-8568-c093d4687f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:29:eb:f4:6c:32:5c:83:f8:73:a3:a1:ae: ad:31:9b:83:42:ac:ad:51:7c:16:26:dd:da:60:14: eb:56:4b:8d:6b:78:06:79:00:95:75:00:18:72:03: 03:25:a7:84:c3:99:db:f8:81:d9:08:60:50:d2:d2: f1:5f:6c:b5:5e:b2:f3:fc:e0:be:8f:36:19:5c:49: 20:65:36:e7:cf:38:0f:e1:6c:50:46:75:9f:1f:de: f4:d7:51:ca:34:97:f8:f7:ff:5e:ef:11:7b:73:18: 8f:28:40:c8:1c:7e:c7:60:53:ba:f0:61:aa:a8:0a: c3:e3:cd:37:cc:b7:59:21:b9:e6:b0:9b:49:71:1c: 01:71:99:65:f0:9f:72:e0:74:08:4a:48:ed:6e:e5: fa:9b:60:3c:d1:a1:ce:9d:01:55:b9:0d:13:d5:d8: bf:84:77:c8:3b:03:6c:2c:4d:ae:f3:d7:25:9b:06: c0:1e:0c:b6:f8:49:bc:58:ec:a7:b4:92:e7:e9:3f: 9e:f8:a9:6d:af:f0:be:73:ac:88:fa:83:de:6d:cf: 86:ed:05:74:56:7b:42:08:65:70:ba:6c:dd:3a:57: 6f:f6:e8:63:16:99:88:d6:bf:af:5a:f3:3a:21:2b: 88:57:bd:85:25:88:77:36:df:e6:04:95:bc:bb:3e: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:9E:B6:0F:37:82:0D:F0:5F:BF:63:C0:71:C6:AA:9D:FC:2A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:96:6f:15:a5:0c:3e:bf:49:b1:a8:83:ce:40:2d:50:8f:d1: 1f:ce:8f:bf:0c:70:80:2e:f2:1c:71:14:65:ea:6e:6f:12:a3: c4:c1:30:2f:28:7e:4b:d9:84:e7:8d:70:4e:66:a9:6e:98:b7: 29:ee:86:06:ca:8d:9c:45:66:9a:fe:d6:83:2a:39:43:76:6d: 6f:73:c6:dd:65:4f:d6:35:6c:e9:dc:3c:c9:54:9e:ac:36:eb: be:e2:b8:46:f9:c8:05:34:a6:47:0a:1b:1b:0e:ea:f9:15:28: 99:ac:6e:87:cb:82:dd:bd:0c:54:77:89:1f:5f:6f:c9:e0:99: 11:d5:48:53:29:1e:be:6d:64:a2:1d:de:de:a7:33:ea:10:72: 84:69:c6:e1:c5:2f:78:88:e7:0e:f2:cf:3f:c7:28:fe:2e:02: 72:de:fc:b9:ba:97:8a:5f:f5:19:0c:b6:0b:5d:01:7c:36:02: 03:20:32:3d:4a:e5:66:4b:cd:f2:92:7c:94:ce:96:0d:c9:6d: b4:e1:1c:e1:25:03:ed:cc:bf:a9:c2:37:9b:13:b7:8a:a6:10: d2:cb:86:53:e8:a4:e2:be:4e:c9:20:0d:87:22:ed:fb:b8:09: 78:11:83:f8:ed:7c:56:c0:cf:6e:75:87:0a:17:af:83:af:11: ad:5f:d8:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5v3153ydh5L/LFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YzhlYmIxMjQtNzkwNS00Zjg2LTg1NjgtYzA5M2Q0Njg3Zjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Mp6/RsMlyD+HOjoa6tMZuDQqytUXwWJt3a YBTrVkuNa3gGeQCVdQAYcgMDJaeEw5nb+IHZCGBQ0tLxX2y1XrLz/OC+jzYZXEkg ZTbnzzgP4WxQRnWfH97011HKNJf49/9e7xF7cxiPKEDIHH7HYFO68GGqqArD4803 zLdZIbnmsJtJcRwBcZll8J9y4HQISkjtbuX6m2A80aHOnQFVuQ0T1di/hHfIOwNs LE2u89clmwbAHgy2+Em8WOyntJLn6T+e+Kltr/C+c6yI+oPebc+G7QV0VntCCGVw umzdOldv9uhjFpmI1r+vWvM6ISuIV72FJYh3Nt/mBJW8uz66HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMjnrYPN4IN8F+/Y8Bxxqqd/CquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE5YjhkMWMtZmQwOS0z ZWY2LWFlNWYtZTZjZjBhNDZlNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaWbxWlDD6/SbGog85ALVCP0R/Oj78McIAu8hxxFGXqbm8So8TBMC8o fkvZhOeNcE5mqW6YtynuhgbKjZxFZpr+1oMqOUN2bW9zxt1lT9Y1bOncPMlUnqw2 677iuEb5yAU0pkcKGxsO6vkVKJmsbofLgt29DFR3iR9fb8ngmRHVSFMpHr5tZKId 3t6nM+oQcoRpxuHFL3iI5w7yzz/HKP4uAnLe/Lm6l4pf9RkMtgtdAXw2AgMgMj1K 5WZLzfKSfJTOlg3JbbThHOElA+3Mv6nCN5sTt4qmENLLhlPopOK+TskgDYci7fu4 CXgRg/jtfFbAz251hwoXr4OvEa1f2I0= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:16 2026 by rpki-client