$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cca3069e-b5be-3faf-a15b-d0f1b9ae1601.roa File: cca3069e-b5be-3faf-a15b-d0f1b9ae1601.roa (raw, json) Hash identifier: KGpkxtHmQfAf6tUVsa5pOgKsG7OvlRUUXnqE3L9OBdk= Subject key identifier: A4:D9:DC:20:F2:1A:D6:2E:DD:01:75:0D:79:70:1E:4C:63:BD:0E:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EABB6E16601412A9508A26600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cca3069e-b5be-3faf-a15b-d0f1b9ae1601.roa Signing time: Thu 30 Jul 2026 13:00:12 +0000 ROA not before: Thu 30 Jul 2026 13:00:12 +0000 ROA not after: Wed 28 Oct 2026 13:00:12 +0000 asID: 7029 IP address blocks: 174.131.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:b6:e1:66:01:41:2a:95:08:a2:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 30 13:00:12 2026 GMT Not After : Oct 28 13:00:12 2026 GMT Subject: CN=33f51881-e462-4811-924e-235e46fe319f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:8b:5d:0b:77:2f:c3:92:91:04:c5:b3:c0: 99:5b:0a:82:87:05:ea:c7:04:a8:8a:ea:fa:b0:18: 16:ad:94:a3:e4:47:53:a6:7e:2a:f2:04:c5:73:29: 0b:89:0d:49:da:b8:66:97:db:4d:b9:f8:07:3a:12: 66:b1:72:a8:43:78:9a:15:f8:12:4b:40:c8:ac:70: 0d:a3:85:0b:0a:e9:d6:fa:2f:1a:f2:43:5e:bd:c7: 7e:ad:31:2f:02:86:2c:3a:3b:7f:e9:22:34:a5:f8: 6d:b2:9b:da:fe:32:d4:41:dd:0c:ce:61:b8:1b:eb: bb:3e:b4:10:b8:58:23:f2:9e:1c:f8:b7:e2:9a:6a: 19:ac:17:c0:71:d5:e8:e5:22:e1:4b:21:f3:d0:97: 7a:aa:36:6c:80:9f:58:4c:63:e6:26:2e:bf:be:1c: e5:64:50:5d:85:71:95:5f:3c:e7:d2:01:16:6d:91: 06:54:8b:29:4f:22:cc:bb:20:de:d2:2a:c7:47:67: 51:a4:fd:76:ae:3d:b3:ec:c8:13:47:64:f5:d1:ac: e8:d5:0a:28:c8:13:98:0a:bc:af:1e:4d:64:a9:4f: ab:80:8a:fd:70:3d:fe:ef:c7:46:f3:c7:e1:b5:74: 0e:63:ca:93:5d:2e:26:3b:d5:ed:c5:7d:ad:e6:58: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D9:DC:20:F2:1A:D6:2E:DD:01:75:0D:79:70:1E:4C:63:BD:0E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cca3069e-b5be-3faf-a15b-d0f1b9ae1601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fd:85:8c:2e:74:d2:9c:f8:ac:80:17:b7:93:62:b8:3e:48: d6:7e:04:7a:c5:2e:9e:03:1d:e1:03:34:78:fe:7a:21:ae:8b: c8:2a:6d:67:f1:29:18:4a:48:e2:d9:d6:95:5b:83:45:b3:6e: fb:43:c8:4c:ae:9d:4e:7d:65:6a:77:46:23:16:60:71:2b:40: 63:01:e9:a5:10:3d:6f:42:b3:c1:1d:51:50:ce:5a:96:fa:77: ba:81:72:33:df:f4:b3:71:95:3b:b4:22:07:90:6c:2c:46:56: 77:74:14:d8:58:2b:9f:5c:20:2b:dd:1e:4f:5a:8b:76:02:69: 2f:21:bc:62:42:11:5d:c7:1b:aa:e6:01:fd:46:2f:5a:80:b7: 9a:58:96:6f:68:a2:52:3a:82:c6:2f:0e:c8:84:c0:84:55:0e: 26:1d:fe:1b:d2:f4:d5:8e:6a:b1:cd:72:20:a6:7d:7c:f1:1a: b4:fe:72:54:b5:0b:1b:08:5b:96:6c:67:b3:3a:ed:d3:11:6e: e5:c2:0d:d6:cf:07:83:04:22:9b:b4:ac:b3:90:c7:8e:ad:06: 5c:38:a2:be:10:df:2d:ab:d9:3e:54:90:8d:f0:78:2b:8e:a3: 05:97:36:a1:d8:55:5d:63:fd:b4:8a:d9:f2:5e:32:5b:fe:4b: 73:c9:96:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtuFmAUEqlQiiZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk MzNmNTE4ODEtZTQ2Mi00ODExLTkyNGUtMjM1ZTQ2ZmUzMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4uLXQt3L8OSkQTFs8CZWwqChwXqxwSoiur6 sBgWrZSj5EdTpn4q8gTFcykLiQ1J2rhml9tNufgHOhJmsXKoQ3iaFfgSS0DIrHAN o4ULCunW+i8a8kNevcd+rTEvAoYsOjt/6SI0pfhtspva/jLUQd0MzmG4G+u7PrQQ uFgj8p4c+LfimmoZrBfAcdXo5SLhSyHz0Jd6qjZsgJ9YTGPmJi6/vhzlZFBdhXGV Xzzn0gEWbZEGVIspTyLMuyDe0irHR2dRpP12rj2z7MgTR2T10azo1QooyBOYCryv Hk1kqU+rgIr9cD3+78dG88fhtXQOY8qTXS4mO9XtxX2t5lhEWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTZ3CDyGtYu3QF1DXlwHkxjvQ4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2NhMzA2OWUtYjViZS0z ZmFmLWExNWItZDBmMWI5YWUxNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD9hYwudNKc+KyAF7eTYrg+SNZ+BHrFLp4DHeEDNHj+eiGui8gqbWfx KRhKSOLZ1pVbg0WzbvtDyEyunU59ZWp3RiMWYHErQGMB6aUQPW9Cs8EdUVDOWpb6 d7qBcjPf9LNxlTu0IgeQbCxGVnd0FNhYK59cICvdHk9ai3YCaS8hvGJCEV3HG6rm Af1GL1qAt5pYlm9oolI6gsYvDsiEwIRVDiYd/hvS9NWOarHNciCmfXzxGrT+clS1 CxsIW5ZsZ7M67dMRbuXCDdbPB4MEIpu0rLOQx46tBlw4or4Q3y2r2T5UkI3weCuO owWXNqHYVV1j/bSK2fJeMlv+S3PJluk= -----END CERTIFICATE-----Generated at Tue Sep 1 03:03:05 2026 by rpki-client