$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d1be9e-dee5-3009-b5fe-30872df65cd2.roa File: c2d1be9e-dee5-3009-b5fe-30872df65cd2.roa (raw, json) Hash identifier: 1wFCOjO0G/fhItjfrLcYcCKhWjiDv4amOl+ualX6lp0= Subject key identifier: 8F:52:B6:63:87:26:30:8D:BE:27:1A:EC:B3:38:C2:FC:E5:BD:C2:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1EBDC8CE199E6E8FD9280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d1be9e-dee5-3009-b5fe-30872df65cd2.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 30522 IP address blocks: 173.189.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:eb:dc:8c:e1:99:e6:e8:fd:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=eaa0e80b-9d19-40be-89be-cfb6cc733a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:24:2f:a5:48:37:51:75:36:57:39:c3:87: 49:d3:d3:97:79:1f:11:d7:b7:31:78:d8:85:ab:0a: 14:0d:4b:dc:7b:07:73:7c:a2:49:45:c1:47:13:4a: 69:ca:9e:3f:42:7e:ea:45:e0:d5:e7:64:48:8f:e4: be:9d:36:61:cf:ce:32:41:c6:02:df:9f:44:6b:a5: 49:81:46:bc:ca:4d:5f:0d:66:e5:81:d3:0e:41:0e: e2:3f:61:fc:af:a1:3d:4b:7f:ff:35:fe:0c:3b:d7: 9c:e7:f9:6a:19:12:ec:8b:e0:e8:52:65:d5:24:7b: 97:47:fc:9d:44:d5:72:b3:3f:4e:00:9b:93:24:08: aa:67:e4:8f:3e:b0:e2:4c:da:f1:e8:7f:6a:13:ed: 87:07:4e:dd:e2:62:27:d0:51:76:bf:2c:ad:e8:77: a2:2f:ab:83:84:2c:71:60:77:35:9b:13:fe:90:c0: a6:20:0a:62:22:46:30:7b:65:4f:73:4a:72:99:13: 7b:65:d1:78:e7:c6:33:e6:7f:98:e8:b6:d8:1e:56: 6d:fb:56:be:32:4c:19:0b:ac:15:5f:f2:9f:99:a8: 22:ec:20:0b:da:7e:06:4c:68:eb:48:39:14:d9:84: 8b:7c:76:c7:0e:10:fc:64:10:3f:9c:a5:66:26:65: 21:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:B6:63:87:26:30:8D:BE:27:1A:EC:B3:38:C2:FC:E5:BD:C2:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d1be9e-dee5-3009-b5fe-30872df65cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6f:2c:7b:8d:a8:04:1b:99:3a:17:07:28:f6:a8:52:88:d3: 52:32:1b:37:b3:8d:31:a5:87:37:6c:cc:92:2b:58:41:b2:50: 65:71:3d:46:47:9d:86:07:6e:a3:c6:d5:4b:56:05:0e:15:55: 6b:2e:13:5a:2f:09:e0:97:2a:45:2a:13:7e:f9:b6:b1:a9:67: 45:73:db:e2:d4:cf:e2:02:a1:63:3e:d9:59:d4:7f:bf:74:3c: b5:42:76:39:cd:21:55:68:48:98:90:fe:f8:f6:c6:c6:d1:6f: 2c:9b:28:07:fc:08:1d:48:75:8c:6e:ec:2c:8c:d3:b9:db:6d: a5:37:86:05:5e:b0:3a:e1:8c:52:c9:d2:28:05:7e:2d:80:f1: b5:5c:fd:a2:89:f0:5b:51:9e:12:cf:a4:21:e3:58:81:af:2d: 50:18:db:02:4c:eb:18:33:01:c3:7a:73:87:29:c6:14:4a:c3: 33:f0:69:81:6d:1d:20:81:30:35:24:be:42:1f:97:b4:f2:36: 89:b5:79:f2:9d:3b:54:db:85:da:d4:a5:10:4d:e2:bc:b6:a1: 2c:38:ba:5c:df:02:6b:f1:77:95:cf:f5:ee:cc:ee:3a:2f:93: 9b:eb:0b:59:6e:1a:63:f0:95:30:6b:25:98:ab:d2:7c:8b:1e: 4b:37:91:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysevcjOGZ5uj9koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZWFhMGU4MGItOWQxOS00MGJlLTg5YmUtY2ZiNmNjNzMzYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXskL6VIN1F1Nlc5w4dJ09OXeR8R17cxeNiF qwoUDUvcewdzfKJJRcFHE0ppyp4/Qn7qReDV52RIj+S+nTZhz84yQcYC359Ea6VJ gUa8yk1fDWblgdMOQQ7iP2H8r6E9S3//Nf4MO9ec5/lqGRLsi+DoUmXVJHuXR/yd RNVysz9OAJuTJAiqZ+SPPrDiTNrx6H9qE+2HB07d4mIn0FF2vyyt6HeiL6uDhCxx YHc1mxP+kMCmIApiIkYwe2VPc0pymRN7ZdF458Yz5n+Y6LbYHlZt+1a+MkwZC6wV X/Kfmagi7CAL2n4GTGjrSDkU2YSLfHbHDhD8ZBA/nKVmJmUh5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9StmOHJjCNvica7LM4wvzlvcIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJkMWJlOWUtZGVlNS0z MDA5LWI1ZmUtMzA4NzJkZjY1Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb31MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNvLHuNqAQbmToXByj2qFKI01IyGzezjTGlhzdszJIrWEGyUGVxPUZH nYYHbqPG1UtWBQ4VVWsuE1ovCeCXKkUqE375trGpZ0Vz2+LUz+ICoWM+2VnUf790 PLVCdjnNIVVoSJiQ/vj2xsbRbyybKAf8CB1IdYxu7CyM07nbbaU3hgVesDrhjFLJ 0igFfi2A8bVc/aKJ8FtRnhLPpCHjWIGvLVAY2wJM6xgzAcN6c4cpxhRKwzPwaYFt HSCBMDUkvkIfl7TyNom1efKdO1TbhdrUpRBN4ry2oSw4ulzfAmvxd5XP9e7M7jov k5vrC1luGmPwlTBrJZir0nyLHks3kZg= -----END CERTIFICATE-----Generated at Thu Aug 27 11:30:36 2026 by rpki-client