$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa File: a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa (raw, json) Hash identifier: N70Q2OcYKj8Zqul12/iEVTBR83HDlhDe+CwIsE6Jub4= Subject key identifier: A0:42:90:5E:25:BE:FE:F7:79:99:DF:FF:C5:7C:E6:0C:3F:31:D8:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43223F707EF31D75E451500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 173.185.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:23:f7:07:ef:31:d7:5e:45:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=518ef071-139e-4195-b987-5c989d4a3c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:c0:bf:4a:8a:2b:9d:7d:1c:bd:7d:ab:8c: 18:0f:d7:98:d0:14:17:90:0a:47:75:55:58:2b:ee: e5:03:50:19:47:b5:0c:68:dc:45:0b:6a:8d:d2:ba: 14:61:2d:81:2a:ca:6d:27:2e:ff:d0:83:50:7f:b3: 84:c1:a7:12:eb:5e:bd:b3:0a:6d:81:c1:ea:68:a3: 54:b4:1d:5f:3e:e2:47:05:c0:a9:fd:48:75:60:0a: da:b7:65:8d:de:71:57:b6:2b:de:a3:ea:72:b2:5c: 75:9a:0d:5f:02:9a:39:1d:7a:67:b1:7e:75:9d:67: 54:e9:34:de:2a:7b:3e:a0:3c:9d:fc:30:8a:7f:05: 13:c7:96:9a:43:be:d7:57:8b:d3:fc:55:11:2c:fc: 10:f2:57:f5:52:01:95:72:93:e9:14:e1:e5:b3:27: 8e:ac:e6:d8:bf:c7:6f:51:27:8a:b2:42:ba:92:41: 6f:9a:1c:43:55:e0:e8:e0:61:91:c0:37:30:a5:9e: cd:95:90:fc:4f:85:77:d7:f0:6c:0f:af:85:9c:1a: bb:0c:06:2c:ac:c0:80:ba:db:28:99:38:70:e2:1d: 84:38:7e:41:a8:3c:67:9a:bc:db:21:0d:6d:63:5b: 2c:09:a6:45:f0:fa:f8:71:30:d7:a4:49:96:dd:f0: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:90:5E:25:BE:FE:F7:79:99:DF:FF:C5:7C:E6:0C:3F:31:D8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3fb1de1-24c4-3ca8-81b2-3aeb8099c5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f9:fc:0b:d3:28:1c:26:09:2e:6b:7a:17:23:6e:3d:30:73: 06:7c:74:c9:cd:9c:64:f1:6b:dc:d3:2b:2c:ce:23:6f:ab:c2: 18:60:75:06:4f:2f:0c:61:ee:9c:4a:0b:fc:92:ac:e2:45:38: 13:4d:37:a4:f1:74:15:0b:b6:35:5b:d8:ed:65:58:79:dc:71: b1:b4:18:71:64:f1:41:4a:a9:16:95:72:ab:01:de:d9:1d:61: 31:c7:45:c2:f8:42:26:e8:43:9a:d7:bd:a0:c7:cb:49:f8:72: 26:95:d8:d8:60:dc:ae:78:61:48:88:1a:3b:5c:cd:c2:5b:b6: 59:53:53:21:cc:e1:ef:55:4d:0b:fe:b3:6f:ba:65:b6:28:67: 86:94:4b:14:fb:a0:e9:72:67:f4:ee:30:2d:af:0e:78:e7:61: 14:b8:3d:df:0a:ea:5a:4e:18:13:ff:d5:fe:e5:0c:c8:bb:d6: 5c:a3:ca:18:c2:97:64:0a:9c:89:9d:ca:4c:b4:17:07:39:6c: 0c:8d:dc:fa:54:9e:ca:5b:61:8c:4c:d5:01:dc:fa:7a:a1:57: 9d:d4:d6:08:90:d7:c1:71:89:79:2b:23:4e:59:c8:7d:cf:bb: 57:06:49:1f:99:74:1b:1f:9a:40:cf:9f:3b:5b:52:b6:7d:07: 5d:57:51:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMiP3B+8x115FFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTE4ZWYwNzEtMTM5ZS00MTk1LWI5ODctNWM5ODlkNGEzYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1DAv0qKK519HL19q4wYD9eY0BQXkApHdVVY K+7lA1AZR7UMaNxFC2qN0roUYS2BKsptJy7/0INQf7OEwacS6169swptgcHqaKNU tB1fPuJHBcCp/Uh1YArat2WN3nFXtiveo+pyslx1mg1fApo5HXpnsX51nWdU6TTe Kns+oDyd/DCKfwUTx5aaQ77XV4vT/FURLPwQ8lf1UgGVcpPpFOHlsyeOrObYv8dv USeKskK6kkFvmhxDVeDo4GGRwDcwpZ7NlZD8T4V31/BsD6+FnBq7DAYsrMCAutso mThw4h2EOH5BqDxnmrzbIQ1tY1ssCaZF8Pr4cTDXpEmW3fB3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBCkF4lvv73eZnf/8V85gw/MdgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNmYjFkZTEtMjRjNC0z Y2E4LTgxYjItM2FlYjgwOTljNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT5/AvTKBwmCS5rehcjbj0wcwZ8dMnNnGTxa9zTKyzOI2+rwhhgdQZP Lwxh7pxKC/ySrOJFOBNNN6TxdBULtjVb2O1lWHnccbG0GHFk8UFKqRaVcqsB3tkd YTHHRcL4QiboQ5rXvaDHy0n4ciaV2Nhg3K54YUiIGjtczcJbtllTUyHM4e9VTQv+ s2+6ZbYoZ4aUSxT7oOlyZ/TuMC2vDnjnYRS4Pd8K6lpOGBP/1f7lDMi71lyjyhjC l2QKnImdyky0Fwc5bAyN3PpUnspbYYxM1QHc+nqhV53U1giQ18FxiXkrI05ZyH3P u1cGSR+ZdBsfmkDPnztbUrZ9B11XUfA= -----END CERTIFICATE-----Generated at Thu Aug 27 09:47:15 2026 by rpki-client