$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd9d92a2-d1fe-3b1f-82a3-b4d1c20e488b.roa File: bd9d92a2-d1fe-3b1f-82a3-b4d1c20e488b.roa (raw, json) Hash identifier: tA+GqcsITDnvEJ/5U60L9/jDWm/kR5GPxrlj/uwwx0E= Subject key identifier: E9:6B:23:76:A7:84:98:F1:7F:E3:0A:F5:89:6C:50:87:70:25:55:1B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F051B89CEF610030F578D3EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd9d92a2-d1fe-3b1f-82a3-b4d1c20e488b.roa Signing time: Mon 31 Aug 2026 13:29:59 +0000 ROA not before: Mon 31 Aug 2026 13:29:59 +0000 ROA not after: Sun 29 Nov 2026 14:29:59 +0000 asID: 7029 IP address blocks: 173.185.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:1b:89:ce:f6:10:03:0f:57:8d:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 31 13:29:59 2026 GMT Not After : Nov 29 14:29:59 2026 GMT Subject: CN=095041bb-705d-42a4-a11f-9964404e18c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:2b:f9:78:71:a7:a2:35:ba:b8:70:e4:3f: 1d:35:cd:09:c8:c6:1e:b9:e3:58:2d:cf:35:29:c4: cd:0c:58:da:c5:e9:3c:73:95:2b:ec:a9:f2:e4:da: aa:1e:a0:bc:de:6f:72:c7:3f:35:18:b8:23:2f:b3: 9b:78:bf:e5:13:d2:e9:3c:c7:b1:82:ed:e0:cb:ee: dd:00:b5:2f:84:40:70:68:21:f4:21:b9:ae:4c:5c: 59:eb:61:64:b9:26:16:c5:56:08:0f:c1:57:e4:68: f0:e0:58:69:29:da:fe:ff:d2:bf:cd:bb:88:a7:55: 3d:03:fe:67:74:2f:f6:a7:be:11:0f:84:de:35:f1: 4e:8c:a4:3b:65:66:4e:37:0d:33:d3:07:0e:4a:66: 76:d8:af:1c:44:56:aa:3d:f9:55:b7:40:f7:e5:eb: ed:01:5b:f7:60:47:91:37:36:87:30:55:ff:ee:75: 8f:e6:04:7b:b0:9c:1f:4a:cf:fc:44:07:be:12:80: d4:a4:2a:f6:6c:55:1c:b2:33:5c:0a:3b:57:52:35: 9f:29:96:46:16:22:c2:cd:4c:8f:8a:77:18:f6:81: c8:72:59:04:23:0b:d0:73:a4:d8:a0:b5:17:5d:9b: 73:83:34:e6:e5:47:5e:ea:45:39:90:7f:5b:d3:d0: ac:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6B:23:76:A7:84:98:F1:7F:E3:0A:F5:89:6C:50:87:70:25:55:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd9d92a2-d1fe-3b1f-82a3-b4d1c20e488b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7d:a6:a7:1a:13:ed:17:54:90:aa:5d:56:a1:33:c8:eb:f4: 0c:b3:4d:49:f7:50:68:88:ac:1a:d3:42:a7:ee:68:04:88:95: c9:fa:7a:76:b5:11:e1:b1:6f:f4:0a:e2:d6:7b:28:b5:83:03: 3c:31:9a:23:f4:40:4f:31:cc:71:ba:09:f9:ab:eb:48:61:1f: 59:57:d9:f0:dd:6f:54:4a:28:e8:fe:48:88:83:02:80:09:85: d2:7e:ff:ea:61:f5:12:ef:0a:dc:92:0d:72:0f:99:49:49:f3: 0a:a5:cd:f9:84:17:1a:61:41:d3:0d:f8:5d:61:ff:6d:59:15: ec:5b:03:e1:05:e7:8e:d5:6c:d4:15:0e:c3:48:ad:9e:a5:58: aa:64:f8:1b:b2:fe:1a:b8:9d:29:3a:8c:3d:d7:f0:d6:db:b2: 1c:f3:82:91:f6:75:8b:55:f6:c5:e0:a3:67:52:c9:bf:45:4b: 6a:4c:69:d2:b2:b8:32:35:5f:78:3f:51:79:b4:10:21:28:7e: 2d:58:d6:63:21:82:42:d4:1f:27:c1:d6:c8:cc:00:93:6a:29: 3e:8e:1f:50:86:0e:0d:41:63:cd:fe:fb:6b:ad:46:f5:ed:3a: 3f:a9:e6:4d:ec:d7:45:9a:e3:ca:1a:7b:4d:d3:48:b2:8e:10: 31:31:ea:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8FG4nO9hADD1eNPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMTEzMjk1OVoXDTI2MTEyOTE0Mjk1OVowLzEtMCsGA1UEAxMk MDk1MDQxYmItNzA1ZC00MmE0LWExMWYtOTk2NDQwNGUxOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIwr+Xhxp6I1urhw5D8dNc0JyMYeueNYLc81 KcTNDFjaxek8c5Ur7Kny5NqqHqC83m9yxz81GLgjL7ObeL/lE9LpPMexgu3gy+7d ALUvhEBwaCH0IbmuTFxZ62FkuSYWxVYID8FX5Gjw4FhpKdr+/9K/zbuIp1U9A/5n dC/2p74RD4TeNfFOjKQ7ZWZONw0z0wcOSmZ22K8cRFaqPflVt0D35evtAVv3YEeR NzaHMFX/7nWP5gR7sJwfSs/8RAe+EoDUpCr2bFUcsjNcCjtXUjWfKZZGFiLCzUyP incY9oHIclkEIwvQc6TYoLUXXZtzgzTm5Ude6kU5kH9b09CsNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlrI3anhJjxf+MK9YlsUIdwJVUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ5ZDkyYTItZDFmZS0z YjFmLTgyYTMtYjRkMWMyMGU0ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ9pqcaE+0XVJCqXVahM8jr9AyzTUn3UGiIrBrTQqfuaASIlcn6ena1 EeGxb/QK4tZ7KLWDAzwxmiP0QE8xzHG6Cfmr60hhH1lX2fDdb1RKKOj+SIiDAoAJ hdJ+/+ph9RLvCtySDXIPmUlJ8wqlzfmEFxphQdMN+F1h/21ZFexbA+EF547VbNQV DsNIrZ6lWKpk+Buy/hq4nSk6jD3X8NbbshzzgpH2dYtV9sXgo2dSyb9FS2pMadKy uDI1X3g/UXm0ECEofi1Y1mMhgkLUHyfB1sjMAJNqKT6OH1CGDg1BY83++2utRvXt Oj+p5k3s10Wa48oae03TSLKOEDEx6t0= -----END CERTIFICATE-----Generated at Tue Sep 1 02:47:54 2026 by rpki-client