$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd8739ad-b4f8-38b2-9871-7da0a31aab9c.roa File: bd8739ad-b4f8-38b2-9871-7da0a31aab9c.roa (raw, json) Hash identifier: 2g4A+/qXuxdU1VatmWw5LLRCE92VaSds9F6kBWl6ggI= Subject key identifier: 2A:DA:22:53:EE:4E:72:81:04:53:C5:50:F3:82:6A:1F:EC:A0:16:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43254C2A83DB9443DFBBD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd8739ad-b4f8-38b2-9871-7da0a31aab9c.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 67.140.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:54:c2:a8:3d:b9:44:3d:fb:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=6439b17a-c2fd-46a1-aea9-b4a3e59dbcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:9c:d9:a7:35:0d:6b:85:a2:d5:43:c2:0e: 04:7d:d1:0a:20:a6:e7:99:e7:6a:4b:c5:57:c2:56: 75:23:75:11:14:47:3d:25:6d:54:55:d1:7c:7a:fe: f3:dc:c2:0c:00:98:7b:36:44:f2:96:7b:c1:77:cd: 3d:89:16:93:0e:48:c0:e8:21:0e:de:75:ef:1d:6d: 1a:8e:64:11:20:1b:ea:ca:3e:f6:cd:06:83:cc:1c: 83:b4:90:31:69:55:bc:21:ac:45:0e:ea:90:48:b3: 51:ca:ba:e1:cf:49:1a:dc:92:81:67:02:d6:45:b3: f6:44:b6:d6:70:1b:2d:ed:40:d4:16:c5:2f:b0:0b: 68:29:ae:1b:c6:3e:44:c8:38:b7:e6:a5:4b:6b:e2: c9:bb:c9:de:83:3d:7f:98:30:95:b1:01:02:e2:6d: 92:74:dd:72:74:d8:83:4b:c3:6d:a2:c7:91:b2:af: c2:3d:b7:1a:5f:cd:e3:fc:02:6b:b3:ab:00:51:3b: 58:36:ea:60:40:68:82:f7:f3:c0:ab:16:35:27:f3: 69:a4:a4:84:63:e5:b1:57:e1:2b:5f:94:6a:04:fd: 7a:5c:ed:79:55:2e:42:38:a5:d8:da:e3:93:3a:8d: 09:dc:4f:1e:ab:bf:65:b3:c3:17:e6:43:4f:22:4a: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:22:53:EE:4E:72:81:04:53:C5:50:F3:82:6A:1F:EC:A0:16:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd8739ad-b4f8-38b2-9871-7da0a31aab9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:39:68:67:59:c7:19:a4:5b:a1:25:17:cc:cb:96:c0:cf:fd: a5:2a:19:63:7c:47:67:01:fc:9a:45:fb:d6:bf:7f:06:96:1a: ae:86:34:c1:42:28:4f:fe:93:86:20:cb:1b:c5:61:2b:9c:38: 56:57:a2:04:ae:47:02:1c:92:f2:fe:71:8b:50:cf:ce:fd:0a: 2c:32:cd:a5:5b:74:b1:39:a8:58:15:6b:ec:e9:76:04:49:b0: ac:f2:ef:d6:bf:cb:2d:83:2e:99:18:7d:02:01:fa:bc:6a:ed: 01:25:b5:8d:4f:a0:37:3b:9e:ce:66:8e:cc:38:bb:0d:c8:06: 4b:7c:2f:0f:c5:73:ad:6e:27:4a:9b:ec:d1:a4:80:61:62:5c: 66:4b:79:32:c5:3f:1d:0f:39:9d:13:b8:90:50:46:1e:39:c3: 1d:de:42:0e:39:4a:2b:fc:a4:5d:1f:04:ab:15:26:5b:1c:7d: f7:fa:44:01:9e:8b:cb:10:f0:5d:94:3d:ac:3f:9f:0e:17:af: f3:14:33:d1:34:16:54:5b:6b:75:fb:9f:ee:2c:78:0b:c6:3d: 1b:a8:62:3a:47:4b:78:be:c0:33:de:00:a8:83:98:0b:44:3d: 41:ea:e5:68:ab:cf:cf:9e:2f:64:ca:1b:0c:68:36:9a:aa:52: 52:93:14:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlTCqD25RD37vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NjQzOWIxN2EtYzJmZC00NmExLWFlYTktYjRhM2U1OWRiY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHqc2ac1DWuFotVDwg4EfdEKIKbnmedqS8VX wlZ1I3URFEc9JW1UVdF8ev7z3MIMAJh7NkTylnvBd809iRaTDkjA6CEO3nXvHW0a jmQRIBvqyj72zQaDzByDtJAxaVW8IaxFDuqQSLNRyrrhz0ka3JKBZwLWRbP2RLbW cBst7UDUFsUvsAtoKa4bxj5EyDi35qVLa+LJu8negz1/mDCVsQEC4m2SdN1ydNiD S8NtoseRsq/CPbcaX83j/AJrs6sAUTtYNupgQGiC9/PAqxY1J/NppKSEY+WxV+Er X5RqBP16XO15VS5COKXY2uOTOo0J3E8eq79ls8MX5kNPIkpF7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCraIlPuTnKBBFPFUPOCah/soBZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ4NzM5YWQtYjRmOC0z OGIyLTk4NzEtN2RhMGEzMWFhYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI5aGdZxxmkW6ElF8zLlsDP/aUqGWN8R2cB/JpF+9a/fwaWGq6GNMFC KE/+k4YgyxvFYSucOFZXogSuRwIckvL+cYtQz879CiwyzaVbdLE5qFgVa+zpdgRJ sKzy79a/yy2DLpkYfQIB+rxq7QEltY1PoDc7ns5mjsw4uw3IBkt8Lw/Fc61uJ0qb 7NGkgGFiXGZLeTLFPx0POZ0TuJBQRh45wx3eQg45Siv8pF0fBKsVJlscfff6RAGe i8sQ8F2UPaw/nw4Xr/MUM9E0FlRba3X7n+4seAvGPRuoYjpHS3i+wDPeAKiDmAtE PUHq5Wirz8+eL2TKGwxoNpqqUlKTFLA= -----END CERTIFICATE-----Generated at Thu Aug 27 13:18:18 2026 by rpki-client