$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa File: acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa (raw, json) Hash identifier: 98t8o05wF5pfZPOcj36sXB+2GJx5Q8jYoUKc3Ud+ja8= Subject key identifier: 44:17:31:88:CB:CC:68:9F:92:63:8E:11:7B:B6:DE:D7:7F:AE:B6:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA7873F0068E2833C92929E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.185.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3f:00:68:e2:83:3c:92:92:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=45efe93a-7a7f-4f1f-a8d0-ee1958b7778a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:fa:90:9d:99:a2:62:29:c8:38:94:0b:ac: bb:3c:27:b8:54:5c:d2:74:dc:2b:80:03:a0:05:87: 47:c1:a8:31:5d:97:a7:a5:a6:9a:ab:f5:42:af:d4: 53:04:92:f4:77:8e:64:27:ae:63:2e:e2:58:fe:e7: 98:64:b8:4f:01:dc:e4:80:6f:a4:4f:f3:6c:a3:49: 2d:bb:8a:ed:34:35:53:0e:56:13:1b:78:2b:7b:1d: aa:ea:f4:50:66:a2:27:ee:be:4b:d7:61:b8:3a:8c: 96:7d:90:98:a2:33:8f:6b:f0:9e:1d:4c:62:f8:6d: 11:22:49:b8:50:b1:1a:eb:01:5f:0d:ae:ba:47:b9: 1b:e7:fb:3a:61:ac:3d:a8:7a:31:57:6c:68:89:90: 62:62:c0:23:96:8d:90:f8:ea:d5:99:f6:d1:5d:b0: a0:4c:10:6c:aa:de:be:c3:d3:28:da:39:43:21:a9: 86:9e:12:81:b4:35:1f:72:ae:bc:31:ae:a0:c9:c9: 58:e0:9a:f0:db:c2:26:6b:3d:78:9d:8c:e3:d1:99: 4d:b4:1a:f9:51:ec:64:b3:3f:c4:41:70:4a:3b:91: a4:b9:6f:9f:25:c2:d5:26:ff:43:77:53:c5:6b:dd: 6f:71:cc:87:fa:da:1e:84:7f:a6:13:55:32:e0:fb: f8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:31:88:CB:CC:68:9F:92:63:8E:11:7B:B6:DE:D7:7F:AE:B6:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:93:83:0e:8e:b2:24:8a:f1:d8:d8:8d:fa:2d:ef:98:c0:a4: e4:7b:fc:f9:e8:df:79:d2:e9:cb:e7:c5:0d:c8:34:93:2a:85: 5c:67:70:7e:62:25:4b:2a:05:b1:53:31:aa:c4:ad:94:e3:06: c4:fc:62:56:44:f9:72:c7:b1:b5:ab:8d:18:9b:6d:5a:c2:58: e8:74:4e:f3:96:5e:99:be:a9:42:5c:26:0b:1b:aa:a1:94:7d: 23:a6:7a:9c:25:d1:7d:87:58:69:9c:bc:d2:da:93:c0:2d:be: 1d:82:53:b8:fd:f8:55:6c:ec:f0:88:a6:82:7a:ce:ba:37:b5: 25:ec:69:76:af:64:38:79:03:73:5c:ac:a2:bb:78:20:4c:e4: 3f:fc:37:db:4f:01:db:c9:a7:53:5c:9e:ac:64:54:2b:07:a8: 69:33:54:ac:c6:55:db:e4:a8:32:47:bf:06:2e:12:bd:3a:96: 99:e1:34:a4:d3:4f:20:51:3d:b5:ec:26:d2:1e:e9:03:ef:ab: 5b:0d:fa:1e:54:0b:5e:4e:ed:fe:cb:ba:9c:2a:cc:c4:9e:5a: ad:25:ef:a1:66:a9:ac:51:d3:18:27:9a:15:72:43:1a:ab:4a: 23:9f:84:cb:96:8b:12:17:f5:f4:05:06:e8:a0:ec:f2:7b:ca: fc:23:c9:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhz8AaOKDPJKSnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDVlZmU5M2EtN2E3Zi00ZjFmLWE4ZDAtZWUxOTU4Yjc3NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0/6kJ2ZomIpyDiUC6y7PCe4VFzSdNwrgAOg BYdHwagxXZenpaaaq/VCr9RTBJL0d45kJ65jLuJY/ueYZLhPAdzkgG+kT/Nso0kt u4rtNDVTDlYTG3grex2q6vRQZqIn7r5L12G4OoyWfZCYojOPa/CeHUxi+G0RIkm4 ULEa6wFfDa66R7kb5/s6Yaw9qHoxV2xoiZBiYsAjlo2Q+OrVmfbRXbCgTBBsqt6+ w9Mo2jlDIamGnhKBtDUfcq68Ma6gyclY4Jrw28Imaz14nYzj0ZlNtBr5Uexksz/E QXBKO5GkuW+fJcLVJv9Dd1PFa91vccyH+toehH+mE1Uy4Pv4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQXMYjLzGifkmOOEXu23td/rrbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNmZmJiY2ItYjZhZC0z YmNkLWIyYmUtMThhNTRmM2NkYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrblkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiTgw6OsiSK8djYjfot75jApOR7/Pno33nS6cvnxQ3INJMqhVxncH5i JUsqBbFTMarErZTjBsT8YlZE+XLHsbWrjRibbVrCWOh0TvOWXpm+qUJcJgsbqqGU fSOmepwl0X2HWGmcvNLak8Atvh2CU7j9+FVs7PCIpoJ6zro3tSXsaXavZDh5A3Nc rKK7eCBM5D/8N9tPAdvJp1NcnqxkVCsHqGkzVKzGVdvkqDJHvwYuEr06lpnhNKTT TyBRPbXsJtIe6QPvq1sN+h5UC15O7f7LupwqzMSeWq0l76FmqaxR0xgnmhVyQxqr SiOfhMuWixIX9fQFBuig7PJ7yvwjyVo= -----END CERTIFICATE-----Generated at Thu Aug 27 12:26:05 2026 by rpki-client