$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa File: d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa (raw, json) Hash identifier: hhZFfq40O/r4mW6Lm69fI0lP/qIeVcvSObTDy0s37wA= Subject key identifier: EE:3F:8B:32:08:DF:A0:4B:72:2E:E1:71:52:C8:09:27:EC:1E:5C:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C6B92CFA2C766154C200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 66.64.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c6:b9:2c:fa:2c:76:61:54:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=1a0cf1bc-4f50-477e-b1e6-ab62292c828e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:42:30:28:73:06:e5:c1:5a:f2:40:1f:dd: 86:7a:e6:4b:c8:b6:86:fe:66:17:08:2e:66:d4:74: 02:df:7a:b6:de:2a:28:34:91:1a:59:8e:d3:3e:4b: 67:ef:66:c2:41:85:df:67:d6:40:48:a3:3c:f1:f8: 4b:3b:ff:82:f8:a6:0d:98:6d:9d:1f:41:24:fa:60: 4e:65:41:7a:3b:22:6a:ae:5d:55:3c:01:58:77:8f: f2:55:8f:bd:be:f9:ca:16:ae:34:29:21:f1:d5:c9: ab:6b:c6:65:15:49:37:24:05:08:68:0f:43:52:8a: 56:b9:31:eb:72:f5:8a:db:00:37:65:14:38:ed:41: 59:fe:05:b3:1c:af:55:e0:31:67:61:13:3a:4d:f6: cf:ac:77:29:d2:06:c8:1f:bb:54:76:7d:c9:e6:de: 4c:d3:12:bb:56:14:0f:c6:b2:1d:d1:d6:c4:32:94: cf:56:2d:cc:10:e1:1d:cf:0b:b5:80:06:94:03:05: 21:f0:8f:a2:1e:d5:e0:21:f8:1c:08:fe:d1:aa:3a: 60:ff:2c:a2:1c:35:31:77:60:43:94:2e:d3:ba:40: 23:7e:ca:6a:f4:76:4a:a9:f8:53:ff:23:9e:cb:61: ee:3a:eb:ac:0f:7b:1d:d5:b7:1b:95:bb:ae:fd:d4: 2c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3F:8B:32:08:DF:A0:4B:72:2E:E1:71:52:C8:09:27:EC:1E:5C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.64.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a8:6c:74:fd:a6:a2:55:ca:1e:06:5c:b4:70:43:15:2d:a5: dc:98:29:17:86:cd:e1:8f:ef:26:78:b9:df:d7:8a:d9:ee:48: 4b:01:23:0c:96:5d:f4:11:0f:df:25:d8:26:47:d6:8b:ff:e6: fc:71:33:10:85:bc:66:a7:e2:97:f7:2c:64:d3:ed:ea:67:bd: 56:0e:65:f6:0b:d8:9e:98:3f:4d:1d:35:67:e0:61:b1:52:92: bc:71:27:95:3c:96:ac:73:e9:79:aa:45:8a:06:2c:ae:f1:12: 84:7b:da:45:2c:a3:ea:31:7e:04:34:1c:7c:12:eb:bc:a9:2f: 91:03:e0:a9:85:78:ad:e9:94:f8:d1:e0:49:db:1b:09:bd:ab: 5a:be:d3:c2:61:78:b6:d5:6d:3c:5c:f0:49:1a:bb:b6:23:8d: 0d:56:98:13:b0:9b:f5:ee:bb:52:41:04:b7:ed:72:16:23:53: 62:6e:64:3f:74:51:05:73:74:c8:ca:6c:cf:b7:62:f1:1e:6f: 93:90:ab:3b:1f:7d:34:6a:1b:07:c6:be:22:53:d5:9d:a2:0c: 28:55:33:29:c6:71:13:f1:e8:3f:c1:e1:37:89:1c:0e:e5:af: 6f:15:b8:2f:72:c6:53:fa:f4:a1:19:31:2d:de:ca:a9:7c:0d: f3:de:d8:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysca5LPosdmFUwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MWEwY2YxYmMtNGY1MC00NzdlLWIxZTYtYWI2MjI5MmM4MjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HpCMChzBuXBWvJAH92GeuZLyLaG/mYXCC5m 1HQC33q23iooNJEaWY7TPktn72bCQYXfZ9ZASKM88fhLO/+C+KYNmG2dH0Ek+mBO ZUF6OyJqrl1VPAFYd4/yVY+9vvnKFq40KSHx1cmra8ZlFUk3JAUIaA9DUopWuTHr cvWK2wA3ZRQ47UFZ/gWzHK9V4DFnYRM6TfbPrHcp0gbIH7tUdn3J5t5M0xK7VhQP xrId0dbEMpTPVi3MEOEdzwu1gAaUAwUh8I+iHtXgIfgcCP7Rqjpg/yyiHDUxd2BD lC7TukAjfspq9HZKqfhT/yOey2HuOuusD3sd1bcblbuu/dQsewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4/izII36BLci7hcVLICSfsHlwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDJmZDM0MjQtNDcxMC0z ZTcyLWJiMDQtYTUzZTIwMzNhYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQkCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSobHT9pqJVyh4GXLRwQxUtpdyYKReGzeGP7yZ4ud/XitnuSEsBIwyW XfQRD98l2CZH1ov/5vxxMxCFvGan4pf3LGTT7epnvVYOZfYL2J6YP00dNWfgYbFS krxxJ5U8lqxz6XmqRYoGLK7xEoR72kUso+oxfgQ0HHwS67ypL5ED4KmFeK3plPjR 4EnbGwm9q1q+08JheLbVbTxc8Ekau7YjjQ1WmBOwm/Xuu1JBBLftchYjU2JuZD90 UQVzdMjKbM+3YvEeb5OQqzsffTRqGwfGviJT1Z2iDChVMynGcRPx6D/B4TeJHA7l r28VuC9yxlP69KEZMS3eyql8DfPe2KU= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:17 2026 by rpki-client