$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa File: a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa (raw, json) Hash identifier: KEK8+cq2TKaBuPe7PSk3pjaKvqxpnsDi1Ucf6XUVmN8= Subject key identifier: 64:3F:C9:86:80:C6:46:A4:D5:88:3B:34:C7:BB:4A:87:F0:F7:02:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED432561719ECB663C1A75380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 173.191.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:56:17:19:ec:b6:63:c1:a7:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=d5e0b778-5fab-4703-b9fe-5eac38ba5926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:04:3d:ac:dc:90:e8:bc:6a:4e:ce:66:52: 65:c8:57:53:0b:ee:2a:f2:b5:3c:a7:ba:07:3e:f7: 7e:f8:d0:dc:07:6e:e2:73:a3:54:ae:2b:69:61:54: 08:ce:19:87:38:da:e2:a4:a1:1d:8d:d9:d9:2f:f6: 43:d7:f0:82:ca:72:2f:7e:43:18:5f:c2:bd:56:75: 37:85:69:d7:b8:43:70:35:b9:ae:5e:3b:04:49:3f: 0d:80:63:69:9a:a6:57:cc:a5:ac:0d:fe:01:ad:4c: 87:51:3f:6c:8a:2b:05:ea:1b:f2:63:c8:76:3e:c9: 52:81:37:85:6d:19:98:8e:08:fa:65:3e:25:fb:77: f6:62:af:bd:30:8e:21:73:7e:1a:d9:47:4b:91:96: dc:cd:5d:0f:be:8c:cf:36:67:50:a9:36:77:0b:91: b2:ef:db:7f:7f:35:a4:5c:d6:de:be:42:ca:db:f6: 55:f7:d9:3c:81:50:65:09:f6:0e:17:dd:b2:68:27: 4b:8d:8d:9f:13:a4:91:ee:53:4b:fa:81:70:82:b9: 80:56:32:bb:9f:ff:c8:d2:1c:95:57:13:f3:9b:29: 24:26:ba:d3:35:e7:04:ff:a9:0d:3e:b5:2b:98:d8: ce:c5:1d:0e:3b:68:30:e5:03:c8:88:7f:c1:a8:d5: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3F:C9:86:80:C6:46:A4:D5:88:3B:34:C7:BB:4A:87:F0:F7:02:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c3:c6:b9:43:d4:90:d6:ac:7a:9b:d5:08:6a:19:bb:d2:98: 20:cd:1f:8f:bf:10:6c:cf:68:bb:ee:61:be:26:11:d0:ee:45: 38:3e:08:55:02:ca:02:7e:85:fd:6a:cb:7c:87:3b:99:dd:57: 82:75:ba:92:72:a2:bd:c5:82:11:ae:00:bc:44:cf:31:ae:eb: 7e:00:3f:7c:b8:50:c3:c8:ac:bc:f5:26:cb:e4:88:89:a7:9c: 3f:06:36:5f:0f:81:5d:a2:67:a2:7c:44:b8:4e:9f:16:ff:44: 01:94:4f:1d:1c:c9:07:3e:ef:d2:5d:ba:ec:ac:bc:c5:7b:b2: dc:90:fe:20:6f:98:4b:f6:ba:0c:4f:c1:04:1d:03:a2:99:af: 78:f0:b4:d3:eb:72:9b:8c:bc:c8:78:2a:0e:c1:da:bc:35:78: cd:71:95:78:4b:2d:65:f4:b2:94:7b:58:a4:fd:91:7d:eb:20: e2:d1:55:17:e1:ec:8d:76:ce:9d:8c:e6:7f:4b:30:87:1d:10: f5:1f:fa:b3:2d:95:5e:c0:e7:00:30:56:ce:8d:0f:9b:bb:d0: 87:4b:a0:18:5c:32:cb:89:b0:95:d5:f1:93:98:ce:56:75:18: 34:b9:a9:13:96:77:35:82:63:91:01:7d:82:8b:ba:d9:c0:cd: 59:5a:e0:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlYXGey2Y8GnU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDVlMGI3NzgtNWZhYi00NzAzLWI5ZmUtNWVhYzM4YmE1OTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqAEPazckOi8ak7OZlJlyFdTC+4q8rU8p7oH Pvd++NDcB27ic6NUritpYVQIzhmHONripKEdjdnZL/ZD1/CCynIvfkMYX8K9VnU3 hWnXuENwNbmuXjsEST8NgGNpmqZXzKWsDf4BrUyHUT9siisF6hvyY8h2PslSgTeF bRmYjgj6ZT4l+3f2Yq+9MI4hc34a2UdLkZbczV0PvozPNmdQqTZ3C5Gy79t/fzWk XNbevkLK2/ZV99k8gVBlCfYOF92yaCdLjY2fE6SR7lNL+oFwgrmAVjK7n//I0hyV VxPzmykkJrrTNecE/6kNPrUrmNjOxR0OO2gw5QPIiH/BqNUk/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ/yYaAxkak1Yg7NMe7Sofw9wKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU5OGIyYjAtMTZlNS0z MGEzLWE4ZDAtZGY0ZGE1ZmIyMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPDxrlD1JDWrHqb1QhqGbvSmCDNH4+/EGzPaLvuYb4mEdDuRTg+CFUC ygJ+hf1qy3yHO5ndV4J1upJyor3FghGuALxEzzGu634AP3y4UMPIrLz1JsvkiImn nD8GNl8PgV2iZ6J8RLhOnxb/RAGUTx0cyQc+79JduuysvMV7styQ/iBvmEv2ugxP wQQdA6KZr3jwtNPrcpuMvMh4Kg7B2rw1eM1xlXhLLWX0spR7WKT9kX3rIOLRVRfh 7I12zp2M5n9LMIcdEPUf+rMtlV7A5wAwVs6ND5u70IdLoBhcMsuJsJXV8ZOYzlZ1 GDS5qROWdzWCY5EBfYKLutnAzVla4Js= -----END CERTIFICATE-----Generated at Thu Aug 27 16:01:06 2026 by rpki-client