$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa File: d14864e2-0c04-30bd-aa58-ba30680b128d.roa (raw, json) Hash identifier: 9Fas3dv7jyWaAGl/gSUMZ07q+SSGzxXFjuuqEwOb/5M= Subject key identifier: 69:8F:D3:FA:76:F6:41:D5:02:CF:A1:C0:3F:1A:16:39:EC:BE:8E:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78F37EDF9B43D99D0B42CC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.187.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:37:ed:f9:b4:3d:99:d0:b4:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a4f541a5-b990-4862-83d9-ee0608b249a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:ef:d7:8d:f1:26:98:4f:8f:dd:3a:ff:4f: 03:b1:4d:01:7f:fd:36:57:a4:91:33:c4:4a:54:48: f0:28:a4:a8:8a:50:f1:34:92:25:ea:ec:56:00:84: 51:41:73:74:a1:0c:4c:b0:cf:87:14:ae:d6:bc:62: e6:2f:ed:65:67:69:b0:7a:6a:76:5d:6f:9b:68:e4: 44:9f:85:24:74:0c:7f:a6:d2:df:f4:16:6e:1e:d6: db:b3:f6:9c:09:a9:87:b2:47:6f:35:9d:8a:15:59: 15:02:c8:4d:f1:96:6f:73:71:a9:bb:40:c1:23:ef: 17:30:b3:5d:51:08:59:1c:e8:5a:2f:3b:83:a6:bc: 7e:04:60:73:de:57:87:36:7d:de:87:85:ce:b1:79: da:6e:d5:bf:cc:b4:d9:7f:c3:92:70:65:1e:72:6e: a0:69:82:d0:6a:12:80:bf:12:8b:29:bb:b9:61:de: f9:ea:73:72:63:15:01:52:2f:e6:91:bd:69:5b:5b: 7a:4d:a1:b2:e3:2a:f7:82:af:f1:7e:8f:7c:fe:e2: 8e:6e:a5:63:fa:db:5c:43:ff:e0:b1:ea:b6:64:f1: 89:2c:0f:95:44:1b:af:af:2a:12:54:6e:b6:50:8c: c2:00:64:53:0b:4a:00:cf:48:d5:c3:02:02:9d:71: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8F:D3:FA:76:F6:41:D5:02:CF:A1:C0:3F:1A:16:39:EC:BE:8E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:11:32:45:1c:8a:07:36:45:31:11:64:8e:4e:22:98:03:01: b4:47:36:d3:47:7d:78:9f:0c:54:b5:8a:69:ac:96:6e:ab:1f: f1:97:84:a3:51:8e:9c:79:a0:0a:1d:49:cc:fa:ee:bb:71:37: 0a:92:23:47:86:51:3c:6a:a8:6d:61:5b:66:81:f8:20:69:20: 3c:34:91:c8:59:72:5c:c3:0a:b6:e8:a2:a8:e6:28:22:aa:e9: b4:63:2e:a4:9a:f8:a1:83:d7:76:55:aa:a2:a0:1e:4d:d2:71: 59:f5:fe:aa:d9:cf:98:a7:2d:22:d9:9a:a9:bb:e9:e9:99:3d: 82:0d:10:72:28:98:70:75:f2:25:a3:b7:67:67:e9:05:e9:e7: b3:18:9b:06:93:54:d2:7c:ed:0e:32:f9:e1:20:d8:1c:76:22: cf:55:23:ad:f8:fb:89:42:ab:55:bf:21:4a:3f:e6:50:06:eb: fb:43:63:42:9c:2c:5b:26:fb:ab:2e:ac:3f:d1:7e:e0:c6:0a: c6:90:cb:d0:6f:6b:cb:20:02:23:e5:a1:0c:fa:2f:f7:9a:76: bf:46:cb:6a:e1:92:21:9e:18:60:38:ee:10:90:d0:b2:f8:18: 78:82:67:f4:ef:f4:d1:ab:13:82:aa:9f:af:0f:55:1b:e9:52: 09:21:65:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njzft+bQ9mdC0LMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTRmNTQxYTUtYjk5MC00ODYyLTgzZDktZWUwNjA4YjI0OWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqTv143xJphPj906/08DsU0Bf/02V6SRM8RK VEjwKKSoilDxNJIl6uxWAIRRQXN0oQxMsM+HFK7WvGLmL+1lZ2mwemp2XW+baORE n4UkdAx/ptLf9BZuHtbbs/acCamHskdvNZ2KFVkVAshN8ZZvc3Gpu0DBI+8XMLNd UQhZHOhaLzuDprx+BGBz3leHNn3eh4XOsXnabtW/zLTZf8OScGUecm6gaYLQahKA vxKLKbu5Yd756nNyYxUBUi/mkb1pW1t6TaGy4yr3gq/xfo98/uKObqVj+ttcQ//g seq2ZPGJLA+VRBuvryoSVG62UIzCAGRTC0oAz0jVwwICnXHc8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmP0/p29kHVAs+hwD8aFjnsvo6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDE0ODY0ZTItMGMwNC0z MGJkLWFhNTgtYmEzMDY4MGIxMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkRMkUcigc2RTERZI5OIpgDAbRHNtNHfXifDFS1immslm6rH/GXhKNR jpx5oAodScz67rtxNwqSI0eGUTxqqG1hW2aB+CBpIDw0kchZclzDCrbooqjmKCKq 6bRjLqSa+KGD13ZVqqKgHk3ScVn1/qrZz5inLSLZmqm76emZPYINEHIomHB18iWj t2dn6QXp57MYmwaTVNJ87Q4y+eEg2Bx2Is9VI634+4lCq1W/IUo/5lAG6/tDY0Kc LFsm+6surD/RfuDGCsaQy9Bva8sgAiPloQz6L/eadr9Gy2rhkiGeGGA47hCQ0LL4 GHiCZ/Tv9NGrE4Kqn68PVRvpUgkhZS0= -----END CERTIFICATE-----Generated at Thu Aug 27 15:19:24 2026 by rpki-client