$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa File: aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa (raw, json) Hash identifier: 8q9/HoIF9gZs9SUkhWBuFVGGdDDvfGwRUfjlH1f7ayM= Subject key identifier: 1B:13:D2:DE:48:8D:AF:2A:52:F9:70:53:98:12:D6:F2:88:F3:01:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FA0A7F91AD78F656E3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.190.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fa:0a:7f:91:ad:78:f6:56:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=3477939f-df28-44da-8891-0930e6bf96e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:b2:47:85:5e:88:0b:59:1c:cf:0d:f9:17: 1c:6a:3b:d0:64:a9:de:a4:c9:22:61:97:5c:8d:73: d3:18:e9:bb:8b:f0:f2:47:a4:70:0e:48:d7:98:d1: 3f:3a:57:af:cf:e4:77:2e:f4:a1:58:e1:3c:ed:e2: 25:ae:72:f9:57:fe:13:a2:f1:f2:30:be:37:ff:50: 3f:ae:97:74:97:36:cf:3c:46:1d:9d:61:7e:44:a8: 4d:40:e8:56:66:97:89:39:f8:49:ff:10:af:39:2f: b5:8a:8b:6b:49:a1:d6:6f:20:31:34:1f:9a:5e:cf: 97:65:4f:89:0a:50:94:2e:58:79:42:f3:28:55:d6: 59:96:c7:5b:77:fb:29:2f:d1:f1:f6:53:8a:02:28: 1d:7e:31:51:95:cd:76:98:10:2f:25:92:00:87:98: 94:cd:aa:55:7e:54:eb:79:8d:b7:54:21:a4:a6:9a: bd:39:fd:9a:4e:b7:2e:cf:6b:21:bf:4b:e5:c4:cb: 65:31:2a:e0:58:f5:e1:36:f1:45:b4:0e:f2:fd:bf: 7c:1d:3f:b4:03:04:1e:4f:fc:01:67:d3:a6:2b:0e: a2:04:66:a7:f1:82:0e:e4:a2:b9:9e:9f:d9:ef:80: 35:9a:7c:7d:67:68:ef:ce:06:64:7a:9e:7f:4b:dc: ef:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:13:D2:DE:48:8D:AF:2A:52:F9:70:53:98:12:D6:F2:88:F3:01:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a6:34:3d:5f:b0:40:2d:52:a3:99:ff:f7:be:89:6b:00:e4: 3d:46:50:16:e0:af:07:25:e3:b5:34:bd:61:c0:83:22:d6:78: 78:f8:c3:54:a9:3b:8f:6e:57:a9:d3:eb:6c:09:c7:83:95:88: 47:54:f3:65:50:b9:d3:31:24:30:b8:29:62:c5:63:b2:2b:5a: 8b:18:66:c1:be:d8:20:98:2b:0e:6b:16:4d:25:6c:ec:ec:bc: a1:22:43:99:e3:6f:7f:b2:34:51:36:f1:fb:2c:39:2c:76:db: a2:d1:df:cd:ca:15:21:98:58:19:35:9b:c4:6c:a0:06:3f:25: c7:d9:5a:48:67:30:bc:34:a1:46:e8:90:58:33:b3:54:4b:ee: f4:0d:01:3d:1e:b2:32:74:cc:7d:79:34:55:c5:31:5d:3b:8c: 16:ed:86:ad:e9:70:5a:6c:c5:31:9c:c5:60:77:bb:94:4b:43: bb:31:16:3c:fa:c5:fa:ad:63:b0:e0:fa:d4:64:a5:de:73:de: c7:e6:d6:19:65:e0:de:6e:26:4a:cd:e3:6d:97:78:56:ae:a8: 1e:55:08:08:b3:09:2f:9c:d9:d7:43:77:59:06:0a:e4:a2:4b: b5:8d:39:d2:6e:8d:8f:b6:22:c0:53:b0:9f:15:c7:a7:1e:9f: 5c:8e:45:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5voKf5GtePZW48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MzQ3NzkzOWYtZGYyOC00NGRhLTg4OTEtMDkzMGU2YmY5NmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllOyR4VeiAtZHM8N+RccajvQZKnepMkiYZdc jXPTGOm7i/DyR6RwDkjXmNE/Olevz+R3LvShWOE87eIlrnL5V/4TovHyML43/1A/ rpd0lzbPPEYdnWF+RKhNQOhWZpeJOfhJ/xCvOS+1iotrSaHWbyAxNB+aXs+XZU+J ClCULlh5QvMoVdZZlsdbd/spL9Hx9lOKAigdfjFRlc12mBAvJZIAh5iUzapVflTr eY23VCGkppq9Of2aTrcuz2shv0vlxMtlMSrgWPXhNvFFtA7y/b98HT+0AwQeT/wB Z9OmKw6iBGan8YIO5KK5np/Z74A1mnx9Z2jvzgZkep5/S9zvnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsT0t5Ija8qUvlwU5gS1vKI8wEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVkZmMzNmYtZjlhYi0z OGJjLThmMWEtMTA4ODMyMzdkZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCmND1fsEAtUqOZ//e+iWsA5D1GUBbgrwcl47U0vWHAgyLWeHj4w1Sp O49uV6nT62wJx4OViEdU82VQudMxJDC4KWLFY7IrWosYZsG+2CCYKw5rFk0lbOzs vKEiQ5njb3+yNFE28fssOSx226LR383KFSGYWBk1m8RsoAY/JcfZWkhnMLw0oUbo kFgzs1RL7vQNAT0esjJ0zH15NFXFMV07jBbthq3pcFpsxTGcxWB3u5RLQ7sxFjz6 xfqtY7Dg+tRkpd5z3sfm1hll4N5uJkrN422XeFauqB5VCAizCS+c2ddDd1kGCuSi S7WNOdJujY+2IsBTsJ8Vx6cen1yORTw= -----END CERTIFICATE-----Generated at Thu Aug 27 11:39:10 2026 by rpki-client