$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20af1d0-e956-3e29-97d7-865222ab8240.roa File: b20af1d0-e956-3e29-97d7-865222ab8240.roa (raw, json) Hash identifier: TXt/G2y4LYm82d7pROKDNTSD0M3mt2C+SRMSOFL48a8= Subject key identifier: 57:00:59:50:D5:E2:22:C9:84:1E:CD:F4:E6:59:9D:82:3E:14:41:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED863B7B9836A0B5C9AA1C300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20af1d0-e956-3e29-97d7-865222ab8240.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 162.40.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:b7:b9:83:6a:0b:5c:9a:a1:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=c9b38ffe-baec-462b-9932-fd9ab906b9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:f1:08:55:7a:64:89:6d:0a:86:be:15:24: 68:e2:7a:88:4e:97:3f:42:8e:d4:de:ac:30:84:1e: ac:2a:e2:5c:50:90:e4:dd:5c:6e:f0:08:55:b5:e3: 10:25:8b:84:5f:a1:dd:73:32:66:19:f0:b5:7d:75: e7:35:dd:b3:2f:f4:7f:48:61:ad:73:3d:18:0d:a3: dd:48:75:0b:38:76:e9:ef:22:af:10:a4:01:a8:48: b6:a3:2e:13:52:01:a3:b7:1f:e8:0a:29:8c:a3:ab: 02:64:e5:10:5e:f3:d1:43:73:32:14:5b:7f:4c:cb: d3:5e:fc:8f:92:72:c6:05:89:2d:19:54:77:a8:06: 38:cf:46:4a:da:94:17:11:c6:0e:aa:b8:da:d8:f5: f0:91:c8:0b:75:b5:21:bf:ac:73:75:15:ff:39:a7: 01:62:cd:be:99:8c:ed:d5:f0:2b:73:0e:8b:ba:a3: 31:52:8c:a6:82:67:24:27:4e:87:7c:75:be:d8:b1: b5:02:7c:eb:ff:6d:e8:f9:fb:8f:16:21:f9:ff:36: 93:67:f9:61:25:c6:01:71:08:ad:bd:5c:1f:60:56: a5:77:24:b4:42:5e:d1:50:9c:0b:21:56:03:3f:17: b7:5d:ed:b6:64:05:78:27:08:40:10:da:bd:7c:c4: 93:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:00:59:50:D5:E2:22:C9:84:1E:CD:F4:E6:59:9D:82:3E:14:41:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20af1d0-e956-3e29-97d7-865222ab8240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:33:59:1c:9e:c2:65:b0:98:29:1b:ce:c6:46:61:96:7e:7c: a6:36:ca:ac:0c:2f:aa:0a:c4:db:6d:22:0d:1c:36:45:af:5f: a0:48:e2:a8:08:f8:80:34:5f:75:8d:53:bc:c4:53:cc:03:2e: f3:3b:7c:4f:f6:0a:ae:eb:9f:06:df:07:8c:2c:4c:93:72:07: c7:3f:52:d9:30:21:12:8a:45:50:c0:8f:e4:95:5d:a9:4e:26: a9:a6:00:e9:5b:d9:0d:eb:42:db:e3:e5:76:c5:57:2c:c5:a9: 96:df:af:f5:63:5e:0e:24:db:5d:1d:54:42:42:28:d7:32:a8: c8:1a:fd:89:4e:6b:dc:41:3b:45:30:67:af:b0:fb:ec:9d:d4: ed:45:2f:76:62:bb:0b:20:86:76:44:02:22:4d:39:16:0e:65: 41:51:08:47:f8:e7:4e:77:12:02:bb:83:d9:8e:00:56:bd:9f: 38:53:5d:b5:c1:bf:6d:22:42:85:bc:bf:c4:3f:64:86:84:29: c4:33:ca:12:7b:ac:ef:40:bf:7a:6c:d1:4f:43:bd:09:0e:7a: 6e:ed:08:d9:ca:71:16:6e:8f:31:b3:59:4f:44:1c:19:e1:a7: 14:ac:14:26:f0:02:21:46:72:9c:ac:f7:80:33:fe:0c:2c:82: b7:8d:5b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY7e5g2oLXJqhwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YzliMzhmZmUtYmFlYy00NjJiLTk5MzItZmQ5YWI5MDZiOWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWbxCFV6ZIltCoa+FSRo4nqITpc/Qo7U3qww hB6sKuJcUJDk3Vxu8AhVteMQJYuEX6HdczJmGfC1fXXnNd2zL/R/SGGtcz0YDaPd SHULOHbp7yKvEKQBqEi2oy4TUgGjtx/oCimMo6sCZOUQXvPRQ3MyFFt/TMvTXvyP knLGBYktGVR3qAY4z0ZK2pQXEcYOqrja2PXwkcgLdbUhv6xzdRX/OacBYs2+mYzt 1fArcw6LuqMxUoymgmckJ06HfHW+2LG1Anzr/23o+fuPFiH5/zaTZ/lhJcYBcQit vVwfYFaldyS0Ql7RUJwLIVYDPxe3Xe22ZAV4JwhAENq9fMSTdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcAWVDV4iLJhB7N9OZZnYI+FEFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjIwYWYxZDAtZTk1Ni0z ZTI5LTk3ZDctODY1MjIyYWI4MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoiggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0zWRyewmWwmCkbzsZGYZZ+fKY2yqwML6oKxNttIg0cNkWvX6BI4qgI +IA0X3WNU7zEU8wDLvM7fE/2Cq7rnwbfB4wsTJNyB8c/UtkwIRKKRVDAj+SVXalO JqmmAOlb2Q3rQtvj5XbFVyzFqZbfr/VjXg4k210dVEJCKNcyqMga/YlOa9xBO0Uw Z6+w++yd1O1FL3ZiuwsghnZEAiJNORYOZUFRCEf45053EgK7g9mOAFa9nzhTXbXB v20iQoW8v8Q/ZIaEKcQzyhJ7rO9Av3ps0U9DvQkOem7tCNnKcRZujzGzWU9EHBnh pxSsFCbwAiFGcpys94Az/gwsgreNW1o= -----END CERTIFICATE-----Generated at Thu Aug 27 16:10:18 2026 by rpki-client