$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85acee2-618c-3bf9-a12c-2f390b84b48f.roa File: b85acee2-618c-3bf9-a12c-2f390b84b48f.roa (raw, json) Hash identifier: Im3lXp0nPxRhUhKitLnwtutikVsP5R9ryu2K+1gNxBg= Subject key identifier: 96:2A:C4:65:21:D0:DA:3C:52:80:30:AD:D8:FD:B0:56:1F:8B:3C:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EC0A75833E0DD114E8B633D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85acee2-618c-3bf9-a12c-2f390b84b48f.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.187.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:58:33:e0:dd:11:4e:8b:63:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=7b76d55f-fb77-4d72-a57d-49529fe29fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:60:89:ef:53:5a:39:ab:27:20:ce:50:76: 53:de:e4:16:54:09:38:c3:dc:42:1e:ca:cd:05:4f: eb:af:f1:da:73:5a:45:29:04:1f:21:e7:20:e8:84: c9:c1:0f:72:ef:d2:d4:73:cc:12:95:40:6b:6f:3c: 1e:e6:91:2e:58:ee:e5:ad:ba:d6:0f:b7:ff:ac:0c: 2a:9c:ec:70:2f:f6:bc:58:10:0b:2d:c1:c0:69:0b: b8:3a:1c:54:99:da:bd:2a:81:07:bc:73:e6:22:79: dd:7b:c9:64:93:cd:28:e2:16:ec:e8:cd:cc:ad:7e: 47:1d:b1:40:36:a7:ae:4c:f8:aa:41:e6:7b:b7:12: f8:55:0f:32:6c:6a:61:4c:bf:68:bd:bd:43:f9:86: e7:89:9b:70:1d:f4:3c:c2:c6:b6:01:82:6d:07:ae: 84:ce:a9:e0:2d:89:89:b3:19:f5:5b:94:87:e1:0f: b7:54:94:ef:92:83:19:57:17:fd:a9:3a:18:9b:1b: 02:b1:52:3b:b5:2a:bf:bb:20:0f:ec:99:08:07:b3: 37:f4:61:1c:5d:05:ce:33:c7:2d:b7:51:e7:f6:64: af:9c:e8:d4:22:b3:98:26:c6:9d:49:82:3b:31:6e: 2b:6e:1b:b5:8e:e1:5e:ba:05:b2:fc:60:3e:70:5f: 4b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2A:C4:65:21:D0:DA:3C:52:80:30:AD:D8:FD:B0:56:1F:8B:3C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85acee2-618c-3bf9-a12c-2f390b84b48f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a6:9c:e0:1b:0b:88:2c:b8:89:8f:dc:cf:ab:24:5a:b0:f0: 72:11:87:5c:7a:1b:87:5b:de:12:35:59:3c:92:b6:ad:d7:18: ac:e3:05:89:06:61:cd:0d:dc:23:e5:f9:59:e5:83:8d:9a:1f: 20:92:c9:db:f8:21:de:89:69:c5:b9:bb:8a:38:f5:e3:77:d6: 63:ab:b2:fa:a5:4c:00:04:84:61:26:ab:7f:05:c4:5b:ec:14: 11:fa:26:d4:7c:ef:74:86:a0:b3:d0:ef:9d:6a:a3:41:8b:f6: 5f:30:21:70:1f:53:83:1e:9c:3c:01:ac:f6:e7:ba:98:54:75: d1:d5:71:8d:e6:2b:fd:20:e6:5c:99:2d:dd:6d:2f:2a:75:e1: 98:a5:5f:19:73:a7:18:89:4f:04:26:83:f5:f1:80:cb:a2:41: 7b:19:fb:5e:14:dd:37:37:f2:1f:94:75:5e:bc:2c:87:32:6b: 97:a0:a1:8b:1e:22:32:23:d6:5d:af:8a:61:b5:f6:af:1e:71: d6:65:dd:82:e9:93:fd:f1:b8:67:2b:8e:e2:32:91:f2:9a:a2: 5c:53:21:6e:51:e4:bb:f2:36:09:1e:f3:a7:63:06:02:22:27: 19:31:03:e8:44:f3:5a:4c:34:2a:b8:0c:1b:05:e5:dd:2d:1b: aa:d0:f5:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap1gz4N0RTotjPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk N2I3NmQ1NWYtZmI3Ny00ZDcyLWE1N2QtNDk1MjlmZTI5ZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7hgie9TWjmrJyDOUHZT3uQWVAk4w9xCHsrN BU/rr/Hac1pFKQQfIecg6ITJwQ9y79LUc8wSlUBrbzwe5pEuWO7lrbrWD7f/rAwq nOxwL/a8WBALLcHAaQu4OhxUmdq9KoEHvHPmInnde8lkk80o4hbs6M3MrX5HHbFA NqeuTPiqQeZ7txL4VQ8ybGphTL9ovb1D+YbniZtwHfQ8wsa2AYJtB66EzqngLYmJ sxn1W5SH4Q+3VJTvkoMZVxf9qToYmxsCsVI7tSq/uyAP7JkIB7M39GEcXQXOM8ct t1Hn9mSvnOjUIrOYJsadSYI7MW4rbhu1juFeugWy/GA+cF9LyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYqxGUh0No8UoAwrdj9sFYfizxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg1YWNlZTItNjE4Yy0z YmY5LWExMmMtMmYzOTBiODRiNDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2mnOAbC4gsuImP3M+rJFqw8HIRh1x6G4db3hI1WTyStq3XGKzjBYkG Yc0N3CPl+Vnlg42aHyCSydv4Id6JacW5u4o49eN31mOrsvqlTAAEhGEmq38FxFvs FBH6JtR873SGoLPQ751qo0GL9l8wIXAfU4MenDwBrPbnuphUddHVcY3mK/0g5lyZ Ld1tLyp14ZilXxlzpxiJTwQmg/XxgMuiQXsZ+14U3Tc38h+UdV68LIcya5egoYse IjIj1l2vimG19q8ecdZl3YLpk/3xuGcrjuIykfKaolxTIW5R5LvyNgke86djBgIi JxkxA+hE81pMNCq4DBsF5d0tG6rQ9eg= -----END CERTIFICATE-----Generated at Thu Aug 27 12:29:51 2026 by rpki-client