$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa File: b85fcffe-594a-3ca2-98c5-30c94c748750.roa (raw, json) Hash identifier: CHvMIKclSecino5RN0qjYUaIFAzR3r93n5nXN7NrhxI= Subject key identifier: 7E:AE:A8:EC:23:7B:AB:53:7F:78:7A:52:C7:BA:0B:8A:20:FF:8F:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CB121F7F1F90B11DAE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 205.147.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cb:12:1f:7f:1f:90:b1:1d:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=df6de6d2-5ee7-4840-a127-4a3a4c8e18c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:2a:9e:db:98:0c:e7:bb:5b:2b:63:be:ed: ef:c0:fd:c8:47:d3:de:9a:68:f6:ec:73:66:12:0b: dd:0b:68:64:4b:46:f6:b4:fb:38:59:61:4f:b6:b5: db:21:8a:5b:46:4a:12:78:4a:e7:e5:ce:4f:ba:70: 32:77:91:27:b3:09:c6:34:42:44:ee:d3:b8:85:54: 23:f6:59:45:d5:78:fb:c8:41:7e:82:c2:2f:7f:d6: 65:82:59:1d:ea:21:0d:e6:6a:5b:8f:3f:b4:ae:34: 04:7d:b8:78:3d:e5:fb:dd:27:8e:02:a2:46:78:3b: ec:95:ae:48:8d:5b:cf:e4:e3:a2:8b:f0:93:68:30: f8:53:8b:97:e8:31:9d:39:a2:03:39:96:9f:d5:2d: 48:57:ae:bb:86:32:9e:52:e6:8b:f5:62:d1:71:c2: 37:77:fd:f9:82:7a:91:bd:f9:1e:a0:59:77:06:59: cc:d4:dc:8b:ec:1a:29:d5:ad:f9:8e:a6:94:2a:c4: 4c:85:9a:70:0f:f4:c2:0d:57:5a:6c:5b:45:7a:48: 06:a2:63:fa:0d:f2:85:8d:ea:24:96:3a:d1:1c:24: b6:ee:87:29:ff:bb:62:1c:dd:c5:62:32:b0:b1:21: 3c:ca:59:ae:dc:08:f2:72:a4:64:c2:1b:18:e0:07: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AE:A8:EC:23:7B:AB:53:7F:78:7A:52:C7:BA:0B:8A:20:FF:8F:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.147.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:42:07:7d:ea:b6:2b:09:93:da:23:3b:53:4a:8d:39:cd:05: 72:da:9c:d3:6c:6c:4a:fb:08:c8:70:8d:26:71:d1:2e:19:86: 6c:93:21:73:49:91:95:b0:6d:ed:70:a4:30:2d:4d:95:74:9b: de:38:3c:1d:2c:d4:06:32:30:e6:cf:88:d9:34:be:3b:c8:20: f9:d2:44:6b:7d:6e:7a:d7:d7:4f:44:75:63:db:9d:f4:61:ad: 80:d3:df:3f:5a:e7:cb:82:d7:8a:1c:65:b4:e6:7a:ad:87:72: 19:14:98:06:5e:b4:e9:fd:6f:76:36:b9:ba:a2:cd:08:02:2a: fc:ac:31:bf:9b:7c:d0:94:de:63:f2:f3:6b:b6:07:36:26:07: 8c:59:dd:61:0b:ad:dc:16:87:db:38:4a:06:ea:ff:df:cc:ad: 13:d2:40:20:f8:d9:d4:8b:d9:d6:d3:92:2d:13:ef:e8:fc:a4: a3:ac:ca:65:59:03:a9:91:88:5c:79:ca:bd:ba:c7:8a:bf:0e: f7:da:e6:c8:e6:8e:22:e4:c7:c4:50:7f:75:3e:82:c7:ce:30: 51:9a:bd:01:4f:7d:d5:c8:55:34:76:49:30:d7:17:1d:e2:f0: 0e:3e:1e:e4:c0:55:59:6f:d7:5e:10:92:e2:9b:c5:c5:42:1b: 0a:80:cf:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscsSH38fkLEdroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZGY2ZGU2ZDItNWVlNy00ODQwLWExMjctNGEzYTRjOGUxOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKsqntuYDOe7Wytjvu3vwP3IR9Pemmj27HNm EgvdC2hkS0b2tPs4WWFPtrXbIYpbRkoSeErn5c5PunAyd5EnswnGNEJE7tO4hVQj 9llF1Xj7yEF+gsIvf9Zlglkd6iEN5mpbjz+0rjQEfbh4PeX73SeOAqJGeDvsla5I jVvP5OOii/CTaDD4U4uX6DGdOaIDOZaf1S1IV667hjKeUuaL9WLRccI3d/35gnqR vfkeoFl3BlnM1NyL7Bop1a35jqaUKsRMhZpwD/TCDVdabFtFekgGomP6DfKFjeok ljrRHCS27ocp/7tiHN3FYjKwsSE8ylmu3AjycqRkwhsY4AdQiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6uqOwje6tTf3h6Use6C4og/4/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg1ZmNmZmUtNTk0YS0z Y2EyLTk4YzUtMzBjOTRjNzQ4NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1CB33qtisJk9ojO1NKjTnNBXLanNNsbEr7CMhwjSZx0S4ZhmyTIXNJ kZWwbe1wpDAtTZV0m944PB0s1AYyMObPiNk0vjvIIPnSRGt9bnrX109EdWPbnfRh rYDT3z9a58uC14ocZbTmeq2HchkUmAZetOn9b3Y2ubqizQgCKvysMb+bfNCU3mPy 82u2BzYmB4xZ3WELrdwWh9s4Sgbq/9/MrRPSQCD42dSL2dbTki0T7+j8pKOsymVZ A6mRiFx5yr26x4q/Dvfa5sjmjiLkx8RQf3U+gsfOMFGavQFPfdXIVTR2STDXFx3i 8A4+HuTAVVlv114QkuKbxcVCGwqAz24= -----END CERTIFICATE-----Generated at Thu Aug 27 16:13:27 2026 by rpki-client