$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa File: a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa (raw, json) Hash identifier: ZiQO48CqEr6jZEksF1zf+PioaZ4ZomFw9qGxKOTr5yg= Subject key identifier: 34:00:41:9F:76:4C:50:66:88:7B:ED:94:DA:6F:9A:1F:4B:78:71:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1D0CFC0BDEBCD2CED2D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 53478 IP address blocks: 207.59.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:d0:cf:c0:bd:eb:cd:2c:ed:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=8970f2a8-3a54-48fd-81d8-b8adddd03699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:b8:2f:ec:ac:53:53:99:61:d5:9b:f3:9c: c3:bd:d7:c5:21:72:f6:d3:a7:39:d8:40:b9:c2:4f: 19:bf:f2:c9:2c:7d:8a:7c:e2:09:6b:c2:db:6c:2a: 81:ac:92:bb:b5:16:9f:b5:18:93:33:51:27:a7:64: 65:7f:d1:0c:22:78:f6:19:e2:4e:a1:54:10:ad:75: c9:a3:e6:0c:3a:56:b1:01:3d:ed:65:c0:de:39:1f: 9e:af:c4:07:d9:08:f1:f1:dd:bb:c9:4e:c0:90:92: 6a:f3:6a:1e:50:de:7e:bb:b7:8a:0c:c4:de:e9:90: 29:87:cf:d2:15:64:c4:fa:f1:7d:10:58:cc:66:33: ca:1b:5c:35:23:32:d5:56:7d:78:18:81:22:38:c8: 43:c7:b6:6e:e1:34:06:ed:0f:76:e0:54:38:3e:8a: 66:cb:22:4d:a7:e2:87:fb:c0:48:1a:89:c0:0e:d8: 9f:75:7e:f1:b5:d8:39:4b:cb:39:e9:4d:6d:74:0d: 90:49:b8:2a:41:98:8d:de:c3:fa:80:3d:c5:58:6c: 80:d9:4a:30:57:08:50:fc:88:df:b6:de:fb:0f:ee: 8f:1f:c5:aa:7c:64:e0:ff:1c:83:62:42:55:16:79: ec:74:7b:23:00:88:40:94:49:01:ea:fa:e4:8d:61: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:00:41:9F:76:4C:50:66:88:7B:ED:94:DA:6F:9A:1F:4B:78:71:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.59.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ed:0e:11:76:2a:0c:5d:b8:78:e4:c2:df:59:c5:b4:84:38: 14:bd:51:6f:56:0e:20:e0:58:74:01:73:27:58:85:0f:4c:1b: 5b:f6:a6:8a:78:51:7f:0b:1b:1e:01:78:b8:ca:c4:4f:ce:91: 9c:41:ea:55:e2:6b:99:65:b5:45:ec:17:62:17:13:61:d4:75: 9c:68:4d:4c:b0:72:14:3d:fe:a3:6f:f6:1a:55:ad:13:01:cd: 21:63:1e:70:62:a8:1f:9a:3a:19:a9:d2:e0:4e:71:f1:41:fa: c5:30:de:6d:22:25:35:a9:0b:e9:11:c6:2a:23:4c:41:17:02: d5:4f:47:0b:fe:e9:da:a8:ad:ad:3c:da:f1:09:67:04:33:f9: eb:e3:79:87:d8:4e:8d:2a:6d:3e:b7:09:ff:a9:ee:39:a7:d2: e3:b6:80:07:fe:ac:dd:b2:d4:ea:b6:44:87:91:12:37:3a:57: 8d:8e:62:d4:e1:fa:45:94:c8:8d:17:de:ee:f7:50:3b:a4:ce: 0e:77:09:ab:ae:d5:ef:98:0a:58:8b:84:1e:df:2c:5e:cc:17: e7:e4:44:21:2b:c0:e1:af:05:6f:e5:f0:19:01:df:7d:3a:8d: 76:70:68:3f:70:0d:f9:94:4e:7a:38:b9:a7:2d:84:95:e2:56: 0d:50:ed:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysdDPwL3rzSztLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ODk3MGYyYTgtM2E1NC00OGZkLTgxZDgtYjhhZGRkZDAzNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqji4L+ysU1OZYdWb85zDvdfFIXL206c52EC5 wk8Zv/LJLH2KfOIJa8LbbCqBrJK7tRaftRiTM1Enp2Rlf9EMInj2GeJOoVQQrXXJ o+YMOlaxAT3tZcDeOR+er8QH2Qjx8d27yU7AkJJq82oeUN5+u7eKDMTe6ZAph8/S FWTE+vF9EFjMZjPKG1w1IzLVVn14GIEiOMhDx7Zu4TQG7Q924FQ4PopmyyJNp+KH +8BIGonADtifdX7xtdg5S8s56U1tdA2QSbgqQZiN3sP6gD3FWGyA2UowVwhQ/Ijf tt77D+6PH8WqfGTg/xyDYkJVFnnsdHsjAIhAlEkB6vrkjWFx5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQAQZ92TFBmiHvtlNpvmh9LeHHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlhY2FhYTMtN2ViNC0z ZjM4LTkwMjktMTY0YzdkNWI2MjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvtDhF2KgxduHjkwt9ZxbSEOBS9UW9WDiDgWHQBcydYhQ9MG1v2pop4 UX8LGx4BeLjKxE/OkZxB6lXia5lltUXsF2IXE2HUdZxoTUywchQ9/qNv9hpVrRMB zSFjHnBiqB+aOhmp0uBOcfFB+sUw3m0iJTWpC+kRxiojTEEXAtVPRwv+6dqora08 2vEJZwQz+evjeYfYTo0qbT63Cf+p7jmn0uO2gAf+rN2y1Oq2RIeREjc6V42OYtTh +kWUyI0X3u73UDukzg53Cauu1e+YCliLhB7fLF7MF+fkRCErwOGvBW/l8BkB3306 jXZwaD9wDfmUTno4uacthJXiVg1Q7Sw= -----END CERTIFICATE-----Generated at Thu Aug 27 16:09:16 2026 by rpki-client