$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa File: da9a9401-3f1f-3569-8f05-b7640211ba28.roa (raw, json) Hash identifier: 1HZKf/gsS/S9G7wMTADY/TZ/g5zA+ac8WAeABoRZ630= Subject key identifier: B9:08:3B:46:D4:60:E1:11:8B:F3:B8:85:12:B9:45:29:50:CD:E0:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43255FFC9A3692BF40B9E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 173.184.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:55:ff:c9:a3:69:2b:f4:0b:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=6fc66a31-423a-4d88-92c7-65e1e6d79e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6e:df:bc:83:91:eb:eb:bc:cd:31:9b:b3:14: 2a:77:9d:32:5e:bd:b7:bb:56:05:85:c6:df:e6:15: fb:ab:94:e9:57:18:e1:30:b2:47:71:81:ba:99:8e: 57:3b:43:8d:17:34:14:c1:6f:75:a2:4f:9f:b8:cc: ef:d2:96:9f:5b:bc:59:70:ea:16:cb:da:54:1e:e4: 1d:ca:fd:fa:c1:c9:5e:2e:02:06:ee:f4:a0:25:aa: 96:52:7f:f0:5b:ab:69:e3:e9:7d:42:7a:4a:30:f9: c3:66:a3:e8:52:33:f8:83:3d:77:88:19:1e:c9:30: fd:d6:03:fd:af:bc:93:a0:e1:a4:8e:b5:2f:82:a9: 5d:c2:b8:4f:d3:72:24:80:61:d8:a4:b0:ac:67:d9: 30:88:eb:0f:af:79:f4:15:6f:bc:6c:5c:4c:fb:48: cb:11:3b:db:dc:9b:52:f4:a5:33:aa:87:e1:32:91: 14:92:64:ec:a5:93:ba:fd:d5:0c:2e:39:2a:42:06: b2:fb:6e:ec:ca:36:1b:3f:88:95:9d:21:e0:f7:02: 28:0f:dd:33:e6:cf:fb:87:6e:ab:d4:52:b4:db:41: 6c:0b:7c:c6:1c:a7:c6:19:e8:cc:71:06:02:20:cf: 06:c8:6f:75:62:fc:12:07:ea:7f:65:15:af:b3:f4: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:08:3B:46:D4:60:E1:11:8B:F3:B8:85:12:B9:45:29:50:CD:E0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d2:4d:c7:09:db:f9:46:ce:37:8e:02:d5:20:ca:26:a7:03: 3b:7d:f0:eb:94:d5:47:a9:20:59:4f:4f:a8:0b:9e:79:f0:ad: 3b:f6:c9:04:93:61:79:64:05:30:04:71:8a:0e:e1:6b:4d:af: 83:49:b1:40:f5:9e:65:03:5e:3e:9a:eb:8f:9d:71:9e:70:c7: 09:f9:fd:74:76:54:9e:2f:86:ec:ec:46:f2:89:89:29:98:ef: bf:ee:65:fd:be:9b:75:61:f6:d5:12:2d:86:c7:aa:7d:00:19: 89:6f:dd:52:33:82:b0:0c:82:61:64:6d:03:35:e6:8a:f2:79: 45:fc:73:84:ae:2d:55:31:c0:bd:e5:bd:be:91:d8:50:96:b4: 4d:99:8e:78:dd:d6:1e:15:f1:b6:2b:60:13:97:87:78:6d:a1: 00:ad:7b:51:01:cd:d5:d2:41:4d:57:b8:cd:c2:10:29:17:90: 40:55:7d:c2:ca:af:35:25:bf:21:dc:fd:3c:ed:33:18:ac:d0: c1:2b:6e:b1:de:00:00:f3:de:86:c1:f5:d3:9d:3e:ce:66:f2: b8:ff:d9:01:07:fd:10:11:61:54:87:5c:21:27:dd:56:0b:e6: e1:1c:37:32:63:87:ef:4d:db:d0:33:68:bb:f0:43:92:cf:16: aa:18:34:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlX/yaNpK/QLngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NmZjNjZhMzEtNDIzYS00ZDg4LTkyYzctNjVlMWU2ZDc5ZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW7fvIOR6+u8zTGbsxQqd50yXr23u1YFhcbf 5hX7q5TpVxjhMLJHcYG6mY5XO0ONFzQUwW91ok+fuMzv0pafW7xZcOoWy9pUHuQd yv36wcleLgIG7vSgJaqWUn/wW6tp4+l9QnpKMPnDZqPoUjP4gz13iBkeyTD91gP9 r7yToOGkjrUvgqldwrhP03IkgGHYpLCsZ9kwiOsPr3n0FW+8bFxM+0jLETvb3JtS 9KUzqofhMpEUkmTspZO6/dUMLjkqQgay+27syjYbP4iVnSHg9wIoD90z5s/7h26r 1FK020FsC3zGHKfGGejMcQYCIM8GyG91YvwSB+p/ZRWvs/QvfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkIO0bUYOERi/O4hRK5RSlQzeBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE5YTk0MDEtM2YxZi0z NTY5LThmMDUtYjc2NDAyMTFiYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHSTccJ2/lGzjeOAtUgyianAzt98OuU1UepIFlPT6gLnnnwrTv2yQST YXlkBTAEcYoO4WtNr4NJsUD1nmUDXj6a64+dcZ5wxwn5/XR2VJ4vhuzsRvKJiSmY 77/uZf2+m3Vh9tUSLYbHqn0AGYlv3VIzgrAMgmFkbQM15oryeUX8c4SuLVUxwL3l vb6R2FCWtE2Zjnjd1h4V8bYrYBOXh3htoQCte1EBzdXSQU1XuM3CECkXkEBVfcLK rzUlvyHc/TztMxis0MErbrHeAADz3obB9dOdPs5m8rj/2QEH/RARYVSHXCEn3VYL 5uEcNzJjh+9N29AzaLvwQ5LPFqoYNHo= -----END CERTIFICATE-----Generated at Thu Aug 27 11:38:13 2026 by rpki-client