$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a748e325-7820-3142-b220-66cb78b749e8.roa File: a748e325-7820-3142-b220-66cb78b749e8.roa (raw, json) Hash identifier: qZtkyfsXf9nBvtscW6OSFQEQ54ZxD7Xqm1PbK4tMHSw= Subject key identifier: 5A:FB:27:54:DB:D4:5F:2B:07:A7:C7:6B:C5:C5:6A:32:AF:0C:C9:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE701124AB9B4049241FD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a748e325-7820-3142-b220-66cb78b749e8.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.187.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:01:12:4a:b9:b4:04:92:41:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=ea098d40-67f1-4a06-9227-6734080c33a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:be:f7:1b:af:17:87:6b:85:68:f5:e6:08: 9b:6f:45:d3:27:a9:cd:cc:2c:a2:bd:86:9c:0f:f8: bc:4d:3a:1d:0a:62:53:fc:b2:fe:dd:b7:9e:3a:93: 05:c1:63:bb:43:56:3e:0a:83:16:12:56:f9:13:72: 93:89:be:5f:11:41:05:d7:b5:d7:51:94:99:7c:f2: f1:33:e8:ba:72:42:ff:81:6b:83:3d:0f:59:83:93: 0d:3f:d1:4b:b6:36:a9:f9:08:f8:0c:28:bc:24:f2: 5e:72:8f:1f:94:21:e3:42:1d:b7:15:a8:2f:9e:15: 07:0c:c8:72:d5:5f:f3:87:89:48:75:67:69:c5:09: aa:24:13:db:db:b7:e2:25:06:24:cb:6d:ae:6e:a8: 0d:c0:1e:b9:8a:59:fc:98:0e:19:90:e4:b5:d4:81: 5f:94:3a:03:23:bb:a4:cd:19:b4:bc:30:08:6e:78: db:3b:ae:6a:bf:ee:7c:68:c0:7a:70:9d:56:d0:7f: ae:0e:ca:3c:dd:96:04:c8:a6:ef:30:f9:a7:b9:dc: 59:33:b8:6f:7d:f6:88:65:36:b2:23:3e:34:4b:d9: 28:86:83:53:31:d1:94:cd:7d:85:8c:bc:09:85:92: dd:7c:86:35:8f:cb:ea:44:9f:c1:f1:91:4b:36:8b: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FB:27:54:DB:D4:5F:2B:07:A7:C7:6B:C5:C5:6A:32:AF:0C:C9:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a748e325-7820-3142-b220-66cb78b749e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:81:fc:b8:41:4e:06:ee:53:61:d8:4b:88:ba:a3:5d:47:e9: c4:34:db:77:15:94:ed:08:bc:c6:a0:90:ec:e9:6c:e2:a6:15: 97:fe:8f:85:6b:d6:75:19:be:ca:3d:cb:d7:ab:d2:f6:41:4d: d7:74:11:c0:c5:3e:db:01:1d:9b:b0:e4:70:3b:90:4e:e8:ab: 75:c7:dd:01:c0:3e:22:8a:42:26:80:89:82:94:c2:00:cf:ec: 76:24:f6:41:d0:6b:66:02:0e:64:6f:43:3d:7e:ca:f8:ae:11: e0:31:82:06:7d:b3:6a:be:12:e3:45:47:fa:ea:df:6b:12:56: 68:bb:48:47:d4:be:42:28:b9:12:b5:d6:11:7b:db:05:89:54: 68:67:19:4f:a1:fb:73:87:58:86:19:00:f1:66:ed:6f:09:87: bf:f5:f5:f7:2e:3d:ce:87:1f:3e:2b:59:3a:73:49:f9:ce:1a: 41:e1:cb:8a:64:ad:92:ff:d9:3f:74:da:fc:01:47:9c:4a:fe: ae:1a:a0:a1:95:67:09:14:b2:0e:46:a4:43:37:e9:a4:a2:ba: 59:36:2f:99:3a:49:0c:95:74:5e:01:3d:1d:d7:8c:d7:d2:80: a7:92:73:e5:26:3d:2c:4b:fd:d7:e1:13:f2:36:81:2f:f5:95: ca:6f:38:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5wESSrm0BJJB/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZWEwOThkNDAtNjdmMS00YTA2LTkyMjctNjczNDA4MGMzM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQG+9xuvF4drhWj15gibb0XTJ6nNzCyivYac D/i8TTodCmJT/LL+3beeOpMFwWO7Q1Y+CoMWElb5E3KTib5fEUEF17XXUZSZfPLx M+i6ckL/gWuDPQ9Zg5MNP9FLtjap+Qj4DCi8JPJeco8flCHjQh23FagvnhUHDMhy 1V/zh4lIdWdpxQmqJBPb27fiJQYky22ubqgNwB65iln8mA4ZkOS11IFflDoDI7uk zRm0vDAIbnjbO65qv+58aMB6cJ1W0H+uDso83ZYEyKbvMPmnudxZM7hvffaIZTay Iz40S9kohoNTMdGUzX2FjLwJhZLdfIY1j8vqRJ/B8ZFLNosQ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr7J1Tb1F8rB6fHa8XFajKvDMmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc0OGUzMjUtNzgyMC0z MTQyLWIyMjAtNjZjYjc4Yjc0OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKB/LhBTgbuU2HYS4i6o11H6cQ023cVlO0IvMagkOzpbOKmFZf+j4Vr 1nUZvso9y9er0vZBTdd0EcDFPtsBHZuw5HA7kE7oq3XH3QHAPiKKQiaAiYKUwgDP 7HYk9kHQa2YCDmRvQz1+yviuEeAxggZ9s2q+EuNFR/rq32sSVmi7SEfUvkIouRK1 1hF72wWJVGhnGU+h+3OHWIYZAPFm7W8Jh7/19fcuPc6HHz4rWTpzSfnOGkHhy4pk rZL/2T902vwBR5xK/q4aoKGVZwkUsg5GpEM36aSiulk2L5k6SQyVdF4BPR3XjNfS gKeSc+UmPSxL/dfhE/I2gS/1lcpvODg= -----END CERTIFICATE-----Generated at Thu Aug 27 12:35:24 2026 by rpki-client