$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa File: b5356367-625f-35f1-a378-86cbb89c2343.roa (raw, json) Hash identifier: zGHHrPcU7eFEg/idm8nKqjiFa0H18t6UoR30WvkM9k8= Subject key identifier: 89:0F:E2:04:F6:B5:0A:DD:6E:3D:2E:10:4E:B3:54:9C:69:BF:CA:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FB5052DC9D13375C3380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.188.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fb:50:52:dc:9d:13:37:5c:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=33da43d5-0772-42dd-90ec-c024d68bd5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:8e:a8:aa:ca:2b:23:89:73:d5:cb:b3:5d: 3c:3a:99:a9:f5:aa:96:0b:56:ee:76:a5:59:81:4c: 23:26:9f:c0:06:f6:54:c9:13:cf:13:fe:bb:43:6c: ea:5d:2d:e2:4d:36:c0:cd:0e:92:44:26:1a:3b:47: 97:81:06:06:0c:28:b1:11:c1:e4:8a:61:9d:8e:5d: 86:db:d4:92:ba:71:b9:27:bb:4b:5e:be:dd:0f:a8: 03:5a:05:99:c8:24:a2:b5:38:bb:bf:78:dd:10:2d: 69:3a:2c:27:a0:3a:59:6b:65:af:5e:0a:16:04:eb: 36:bc:0a:0f:7a:81:ab:7d:5e:a6:8e:31:e6:94:45: bb:cc:38:5d:08:30:6f:95:52:2f:1c:73:d9:45:7e: 4f:c4:17:ef:bf:6d:ff:ef:71:aa:88:17:7d:60:50: 2a:4e:7e:b7:a9:13:3f:82:0a:f5:9f:76:5f:42:31: 8a:be:e8:86:7e:50:74:3b:d0:a0:1e:58:18:99:e9: 74:f6:28:d3:7f:ee:10:41:f4:67:05:db:69:29:6e: 6a:18:c2:1a:63:a7:5c:df:76:eb:10:5e:ba:d9:05: 1d:e2:1a:13:52:84:bc:ed:5e:db:91:7e:ac:a3:66: 75:97:6c:5a:ed:9c:93:a2:c4:47:65:c9:c2:01:ef: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0F:E2:04:F6:B5:0A:DD:6E:3D:2E:10:4E:B3:54:9C:69:BF:CA:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:34:a1:e7:72:c7:eb:bf:0c:00:84:7f:71:cf:74:a9:79:d4: e7:47:ac:e6:f8:95:f8:b2:64:d0:7b:e6:39:d8:41:53:65:c8: a3:93:e6:ee:45:9f:34:ba:65:30:87:14:b6:c7:9a:97:6a:5b: 4f:cd:19:72:76:c8:19:5f:c1:a1:00:48:15:63:14:fd:83:47: ab:32:a9:8a:fc:5d:d4:4c:05:0a:72:85:4a:73:94:e1:ae:9e: cc:08:46:ba:5c:bc:84:e1:c9:97:43:14:28:86:c4:0d:73:50: f7:a2:c8:d6:57:31:f8:57:78:25:19:eb:d4:95:00:d0:5b:0e: 1c:0b:58:55:30:8f:cc:b5:91:c2:94:a6:e6:09:2c:a6:f2:69: 7a:72:5a:98:cb:f9:73:29:bb:e8:e9:b0:9c:18:8a:a0:20:a3: d3:e0:1a:46:34:1e:96:8e:a6:80:d5:9a:65:f9:73:dc:45:46: fa:61:1b:5d:27:fc:c8:f7:99:79:d3:1d:29:2f:c5:79:06:09: 3e:36:25:8b:65:58:80:85:8f:58:91:f9:56:92:1c:35:24:7d: c5:db:85:b2:ae:55:39:e5:d0:43:d2:6b:bc:fc:c1:a4:52:b6: ef:ac:40:66:fd:a2:79:98:3d:f5:90:c4:86:8f:1a:4f:26:16: 65:0f:91:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vtQUtydEzdcM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MzNkYTQzZDUtMDc3Mi00MmRkLTkwZWMtYzAyNGQ2OGJkNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNGOqKrKKyOJc9XLs108Opmp9aqWC1budqVZ gUwjJp/ABvZUyRPPE/67Q2zqXS3iTTbAzQ6SRCYaO0eXgQYGDCixEcHkimGdjl2G 29SSunG5J7tLXr7dD6gDWgWZyCSitTi7v3jdEC1pOiwnoDpZa2WvXgoWBOs2vAoP eoGrfV6mjjHmlEW7zDhdCDBvlVIvHHPZRX5PxBfvv23/73GqiBd9YFAqTn63qRM/ ggr1n3ZfQjGKvuiGflB0O9CgHlgYmel09ijTf+4QQfRnBdtpKW5qGMIaY6dc33br EF662QUd4hoTUoS87V7bkX6so2Z1l2xa7ZyTosRHZcnCAe/b0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkP4gT2tQrdbj0uEE6zVJxpv8rfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUzNTYzNjctNjI1Zi0z NWYxLWEzNzgtODZjYmI4OWMyMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk0oedyx+u/DACEf3HPdKl51OdHrOb4lfiyZNB75jnYQVNlyKOT5u5F nzS6ZTCHFLbHmpdqW0/NGXJ2yBlfwaEASBVjFP2DR6syqYr8XdRMBQpyhUpzlOGu nswIRrpcvIThyZdDFCiGxA1zUPeiyNZXMfhXeCUZ69SVANBbDhwLWFUwj8y1kcKU puYJLKbyaXpyWpjL+XMpu+jpsJwYiqAgo9PgGkY0HpaOpoDVmmX5c9xFRvphG10n /Mj3mXnTHSkvxXkGCT42JYtlWICFj1iR+VaSHDUkfcXbhbKuVTnl0EPSa7z8waRS tu+sQGb9onmYPfWQxIaPGk8mFmUPkXk= -----END CERTIFICATE-----Generated at Thu Aug 27 14:21:50 2026 by rpki-client