$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa File: b5514b8f-46aa-3af8-998f-2a0964724887.roa (raw, json) Hash identifier: GmmBEj1lXQFssJ4R6YEHDi7n2qEGnMhh7mKYpKq3OJ0= Subject key identifier: 71:08:49:67:4C:D4:2F:85:D8:40:86:9C:BE:62:EB:D6:32:CE:71:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CB8DB0E69A11AF033D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 207.222.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cb:8d:b0:e6:9a:11:af:03:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=2d8b82db-906a-4332-aea9-a190d4d77143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:06:de:0c:6e:ed:ab:e0:1a:1b:9d:c1:09: 02:a2:9f:f1:cd:aa:f1:b2:5d:69:d6:2e:77:ec:bc: 14:dc:7e:f0:0f:45:10:85:c1:f9:f0:fb:7f:c9:50: ce:b3:e3:86:e6:d9:da:fb:d1:96:b9:6b:cf:7e:8b: 07:41:cc:da:02:b5:f5:f2:2a:f6:92:bd:8e:c0:2d: 3d:4b:d8:7e:11:ec:30:32:6d:83:18:09:29:fa:e4: 95:58:03:ee:6d:cd:33:b3:3d:29:1a:74:1a:a7:df: d2:50:97:4a:13:99:74:ea:4d:be:36:81:22:3d:d2: 5e:ae:84:f7:f5:5e:ba:04:8f:0f:59:e2:cf:23:c1: 9c:cc:18:d4:dc:06:f6:89:49:d9:0e:1a:70:2b:7b: 78:a1:25:43:49:25:9d:6a:0f:27:a5:f5:86:6f:80: 87:2a:e5:8b:e1:6d:54:57:46:6e:7f:2d:25:8c:ce: ea:76:5e:74:fa:95:e1:88:d7:e1:9c:5f:25:0e:54: a7:f4:dc:3f:34:8e:49:c0:c5:39:a0:58:85:02:2d: 79:9f:e3:95:47:44:33:51:2d:ca:ca:63:fd:03:74: 98:4e:11:42:f3:e3:66:46:69:c2:b5:5b:7a:c9:b7: 42:59:fd:9f:ae:b3:ba:e7:cf:00:89:26:51:a5:21: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:08:49:67:4C:D4:2F:85:D8:40:86:9C:BE:62:EB:D6:32:CE:71:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4c:a4:b8:48:48:51:fc:97:50:fd:c7:45:fc:6d:ca:5f:99: 1f:19:d9:6a:62:8d:f1:c4:f8:bf:73:73:d3:02:00:ac:b0:cf: 4b:48:b7:1c:33:bd:3b:2e:90:1d:f9:78:e7:b1:1c:07:fd:30: a1:e9:3e:d2:c9:37:fb:70:9c:52:88:09:54:2b:e0:29:1c:dc: 11:a1:87:ad:07:eb:e9:3d:14:ac:25:07:2e:94:6a:c3:73:12: 58:03:da:29:b5:5b:15:79:f8:7b:9b:92:a5:6e:c8:fa:18:ca: 1a:c5:2d:ad:12:95:c4:ae:91:4d:18:2e:79:66:a0:69:b4:d1: 68:a4:1b:8d:a4:0a:a1:96:4e:0d:63:59:97:02:a9:37:b3:3e: 1c:0a:3a:24:3b:9f:50:ce:5f:e6:66:c8:4e:20:bd:f1:66:8b: f8:f7:10:c5:31:6c:51:33:82:0a:7a:70:21:76:d9:cb:7b:3a: 94:f3:01:9c:4b:62:4d:3b:3f:0a:71:8d:69:54:c1:b2:30:c0: 8c:40:59:80:46:ec:2c:c6:d0:73:1d:c9:2d:72:53:e4:00:b8: 40:05:f3:e5:d7:c2:be:56:9f:f3:1d:4a:a5:e1:41:2e:0b:25: 4b:fb:4e:86:d5:72:d6:f5:47:72:f5:c9:93:e8:7e:90:6d:ca: 77:65:06:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscuNsOaaEa8DPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MmQ4YjgyZGItOTA2YS00MzMyLWFlYTktYTE5MGQ0ZDc3MTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BEG3gxu7avgGhudwQkCop/xzarxsl1p1i53 7LwU3H7wD0UQhcH58Pt/yVDOs+OG5tna+9GWuWvPfosHQczaArX18ir2kr2OwC09 S9h+EewwMm2DGAkp+uSVWAPubc0zsz0pGnQap9/SUJdKE5l06k2+NoEiPdJeroT3 9V66BI8PWeLPI8GczBjU3Ab2iUnZDhpwK3t4oSVDSSWdag8npfWGb4CHKuWL4W1U V0Zufy0ljM7qdl50+pXhiNfhnF8lDlSn9Nw/NI5JwMU5oFiFAi15n+OVR0QzUS3K ymP9A3SYThFC8+NmRmnCtVt6ybdCWf2frrO6588AiSZRpSHThwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEISWdM1C+F2ECGnL5i69YyznHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjU1MTRiOGYtNDZhYS0z YWY4LTk5OGYtMmEwOTY0NzI0ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz96gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChMpLhISFH8l1D9x0X8bcpfmR8Z2WpijfHE+L9zc9MCAKywz0tItxwz vTsukB35eOexHAf9MKHpPtLJN/twnFKICVQr4Ckc3BGhh60H6+k9FKwlBy6UasNz ElgD2im1WxV5+HubkqVuyPoYyhrFLa0SlcSukU0YLnlmoGm00WikG42kCqGWTg1j WZcCqTezPhwKOiQ7n1DOX+ZmyE4gvfFmi/j3EMUxbFEzggp6cCF22ct7OpTzAZxL Yk07PwpxjWlUwbIwwIxAWYBG7CzG0HMdyS1yU+QAuEAF8+XXwr5Wn/MdSqXhQS4L JUv7TobVctb1R3L1yZPofpBtyndlBhw= -----END CERTIFICATE-----Generated at Thu Aug 27 11:38:38 2026 by rpki-client