$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcea0415-5bdb-35d7-85f2-17af18969555.roa File: bcea0415-5bdb-35d7-85f2-17af18969555.roa (raw, json) Hash identifier: aRHyJUeHaEZX2qPDxztcCwOBunTLwdWSc7f0iUhGj5k= Subject key identifier: 58:99:CC:9F:A7:1D:80:E3:6B:74:F9:80:E4:3F:64:32:38:5C:4A:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAA519C22D3AF147496C10680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcea0415-5bdb-35d7-85f2-17af18969555.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.189.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:9c:22:d3:af:14:74:96:c1:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=879a608b-f4d1-4fc9-8c36-db8d9ca5a794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:d9:55:9c:3d:1f:b1:85:ec:5c:40:31:81: ca:be:8d:2a:9b:d8:8e:7c:bd:de:35:45:40:5c:f4: 97:4a:22:79:32:f3:1a:9b:b8:b5:3a:1a:b7:99:e1: 78:08:d6:25:da:0a:3a:f5:04:a2:37:10:a8:19:e1: 21:62:5a:1c:4a:24:fb:72:e5:b9:18:07:7b:39:5a: 84:f1:9e:9c:b2:87:5f:49:5b:fd:de:65:64:55:51: b7:16:81:8f:18:41:1a:61:57:5f:cd:9d:dd:23:40: 85:d8:90:9d:f2:35:48:01:f2:85:3f:54:47:df:c1: fc:68:15:99:d9:4f:1b:e5:5f:01:3e:7e:b6:bf:13: 4f:d4:d5:c3:28:24:c3:b4:8a:13:98:b3:35:8b:4c: 5a:74:58:a9:a5:d2:d9:77:ee:64:62:f2:ca:c5:3e: b5:e6:ab:dc:6e:40:cf:70:57:bc:84:ef:e8:b7:04: 41:5b:dd:4e:66:82:67:c9:40:c5:bb:43:77:30:c1: 68:e0:cf:71:66:f6:d2:4d:1b:fe:e4:bc:a7:18:84: 56:f2:ed:b8:50:1d:00:3d:bf:0e:2f:0e:ee:63:b6: b0:ab:1c:f4:3a:81:e8:e7:f2:d5:49:a8:eb:fc:1b: 63:c9:b8:30:14:75:72:1c:a3:03:34:60:a1:85:7e: 4f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:99:CC:9F:A7:1D:80:E3:6B:74:F9:80:E4:3F:64:32:38:5C:4A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcea0415-5bdb-35d7-85f2-17af18969555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:23:dd:ed:e7:d9:bc:f4:d5:87:2c:bb:b8:c4:fb:23:7e:ab: e3:1a:a6:f6:ec:b5:7f:6d:5b:f6:0e:e3:e4:aa:fc:78:3c:ab: 9a:31:8f:d0:62:a3:70:02:5f:c0:98:9e:43:9e:05:2d:40:de: 64:71:ee:cb:d8:97:d2:38:f5:be:bf:6f:6f:9f:e5:68:00:09: bb:f8:dc:d0:43:70:61:22:31:49:b8:b7:4c:83:94:4b:bd:c3: a7:18:4e:e7:27:cf:62:0c:91:a1:91:34:d5:2f:c6:0b:2e:96: 1a:0c:f4:f8:93:a1:7f:05:c9:3a:33:1d:8c:ae:d9:47:e5:e2: 4c:90:81:09:f1:90:6e:93:9f:69:7b:c8:02:67:f5:14:0b:e2: 06:2f:cd:2d:83:4e:7e:45:a9:c2:e1:8d:40:f1:2e:64:eb:83: 7f:59:98:86:5f:77:c6:5a:de:78:bc:87:06:3c:3b:e2:d1:73: f0:6d:d9:3d:25:03:b0:17:9e:d6:0a:a2:85:9a:27:e3:c0:6a: e9:f2:93:d5:bf:68:08:52:62:6e:1a:fe:c8:c9:cc:eb:b8:58: 40:58:f4:f2:56:58:23:55:99:28:88:51:11:7c:8f:53:09:20: 91:c6:fc:31:ba:da:9d:52:0d:23:79:d5:fd:ed:a4:c0:05:6f: 1c:ff:b7:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUZwi068UdJbBBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk ODc5YTYwOGItZjRkMS00ZmM5LThjMzYtZGI4ZDljYTVhNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+rZVZw9H7GF7FxAMYHKvo0qm9iOfL3eNUVA XPSXSiJ5MvMam7i1Ohq3meF4CNYl2go69QSiNxCoGeEhYlocSiT7cuW5GAd7OVqE 8Z6csodfSVv93mVkVVG3FoGPGEEaYVdfzZ3dI0CF2JCd8jVIAfKFP1RH38H8aBWZ 2U8b5V8BPn62vxNP1NXDKCTDtIoTmLM1i0xadFippdLZd+5kYvLKxT615qvcbkDP cFe8hO/otwRBW91OZoJnyUDFu0N3MMFo4M9xZvbSTRv+5LynGIRW8u24UB0APb8O Lw7uY7awqxz0OoHo5/LVSajr/BtjybgwFHVyHKMDNGChhX5P/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiZzJ+nHYDja3T5gOQ/ZDI4XErgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmNlYTA0MTUtNWJkYi0z NWQ3LTg1ZjItMTdhZjE4OTY5NTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0j3e3n2bz01Ycsu7jE+yN+q+MapvbstX9tW/YO4+Sq/Hg8q5oxj9Bi o3ACX8CYnkOeBS1A3mRx7svYl9I49b6/b2+f5WgACbv43NBDcGEiMUm4t0yDlEu9 w6cYTucnz2IMkaGRNNUvxgsulhoM9PiToX8FyTozHYyu2Ufl4kyQgQnxkG6Tn2l7 yAJn9RQL4gYvzS2DTn5FqcLhjUDxLmTrg39ZmIZfd8Za3ni8hwY8O+LRc/Bt2T0l A7AXntYKooWaJ+PAaunyk9W/aAhSYm4a/sjJzOu4WEBY9PJWWCNVmSiIURF8j1MJ IJHG/DG62p1SDSN51f3tpMAFbxz/two= -----END CERTIFICATE-----Generated at Thu Aug 27 12:30:37 2026 by rpki-client