$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa File: d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa (raw, json) Hash identifier: E4z+eLNNqAldkag3MQJwQF8OuSVqegq8tEvY6dHlFT4= Subject key identifier: 86:4F:E6:72:72:82:CA:C1:28:03:02:DE:06:A0:05:4A:F3:EE:65:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E92DB05F09E695AAC300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 216.138.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e9:2d:b0:5f:09:e6:95:aa:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=2b9c5fa3-fb2b-470d-8e7d-682c037362e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:bb:7f:08:e5:63:50:20:39:61:e1:8d:5f: 72:43:13:5c:d0:d3:93:b9:81:73:4e:2a:96:23:86: a7:d8:dc:3c:90:db:83:63:be:c1:ba:d7:f1:65:06: ee:65:e9:fa:a1:cd:24:5e:59:c6:df:d2:55:f5:5c: c0:bc:07:4d:00:a3:75:56:50:41:4b:85:df:90:88: 7c:30:17:a4:ec:4b:75:8f:25:98:c1:8b:ee:97:36: 42:68:29:15:35:ee:87:5c:c1:01:4e:79:5a:e4:f1: 51:da:02:08:1d:88:e2:62:89:28:4c:bf:62:f5:61: 75:d7:b1:08:29:c0:46:04:c9:b7:b7:81:9f:06:de: 1b:30:f4:3b:07:26:c5:a1:e7:ee:20:17:68:98:73: 86:25:31:94:4d:ab:a0:6d:0a:01:2d:11:58:f7:80: f4:39:70:9a:86:5b:21:bf:62:0d:7d:2a:74:bf:65: a7:f5:cb:ee:d7:c4:ef:2a:f8:12:e4:f4:2b:bd:cb: 46:c2:d0:be:4f:a0:ae:cd:55:23:74:7d:5d:5c:ab: 6e:e2:13:c5:3a:86:a1:da:31:46:80:9d:6f:5f:70: 95:72:3b:a9:ba:64:2c:a1:05:40:5d:f3:da:7b:5a: e6:ad:25:45:54:88:e1:d2:9a:5c:ca:a2:1a:cb:ed: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4F:E6:72:72:82:CA:C1:28:03:02:DE:06:A0:05:4A:F3:EE:65:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6f6e734-4ae6-3107-974a-3ed0e5c9d3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.138.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e0:63:de:fd:51:27:f2:3c:c4:e0:15:ca:76:98:4a:f2:37: 41:4c:66:25:5f:06:55:0a:65:62:e6:aa:ce:e3:0f:65:68:e4: 0b:f8:b6:ef:5a:b2:f5:8f:f4:4c:4c:51:45:10:35:c1:07:1c: 20:21:55:82:dc:1d:09:78:6f:6a:ed:19:a2:b8:3b:79:09:e1: c3:7c:d0:79:83:39:43:fa:e0:f6:62:d8:c9:10:0b:e6:a4:98: a8:b6:bf:97:fc:23:43:cc:90:47:f8:ce:ca:f8:f3:3c:e2:7f: a9:7d:7c:c8:0b:34:f5:4e:78:6e:a9:bb:ef:68:50:ed:d8:39: 91:dc:f4:5b:30:bb:02:a4:89:08:e8:25:8b:1b:21:5a:db:1d: 5a:60:73:c8:fd:71:58:4d:fc:24:27:2c:eb:50:5e:3b:9a:18: 95:e9:6f:2a:f7:ad:e6:34:50:0a:a0:0f:f4:de:6a:7b:ef:19: ee:d8:b2:08:bf:e9:b2:3f:88:cc:7a:71:9c:87:8d:07:69:32: da:c1:3d:8d:f8:50:6a:9d:d3:5c:ac:e9:fb:78:f5:64:eb:97: 89:28:69:08:1d:66:f3:ab:ec:65:c3:a5:b1:7e:f6:30:2c:64: 22:67:a0:6d:b0:8b:4c:c7:55:d7:b3:48:51:10:91:da:db:32: 47:83:13:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysektsF8J5pWqwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MmI5YzVmYTMtZmIyYi00NzBkLThlN2QtNjgyYzAzNzM2MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12K7fwjlY1AgOWHhjV9yQxNc0NOTuYFzTiqW I4an2Nw8kNuDY77ButfxZQbuZen6oc0kXlnG39JV9VzAvAdNAKN1VlBBS4XfkIh8 MBek7Et1jyWYwYvulzZCaCkVNe6HXMEBTnla5PFR2gIIHYjiYokoTL9i9WF117EI KcBGBMm3t4GfBt4bMPQ7BybFoefuIBdomHOGJTGUTaugbQoBLRFY94D0OXCahlsh v2INfSp0v2Wn9cvu18TvKvgS5PQrvctGwtC+T6CuzVUjdH1dXKtu4hPFOoah2jFG gJ1vX3CVcjupumQsoQVAXfPae1rmrSVFVIjh0ppcyqIay+3BuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZP5nJygsrBKAMC3gagBUrz7mUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZmNmU3MzQtNGFlNi0z MTA3LTk3NGEtM2VkMGU1YzlkM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2IqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXgY979USfyPMTgFcp2mEryN0FMZiVfBlUKZWLmqs7jD2Vo5Av4tu9a svWP9ExMUUUQNcEHHCAhVYLcHQl4b2rtGaK4O3kJ4cN80HmDOUP64PZi2MkQC+ak mKi2v5f8I0PMkEf4zsr48zzif6l9fMgLNPVOeG6pu+9oUO3YOZHc9FswuwKkiQjo JYsbIVrbHVpgc8j9cVhN/CQnLOtQXjuaGJXpbyr3reY0UAqgD/TeanvvGe7Ysgi/ 6bI/iMx6cZyHjQdpMtrBPY34UGqd01ys6ft49WTrl4koaQgdZvOr7GXDpbF+9jAs ZCJnoG2wi0zHVdezSFEQkdrbMkeDEz8= -----END CERTIFICATE-----Generated at Thu Aug 27 17:03:49 2026 by rpki-client