$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db4e1afd-2666-328c-9f7d-07e0c9f0d623.roa File: db4e1afd-2666-328c-9f7d-07e0c9f0d623.roa (raw, json) Hash identifier: gXAyDNWIJaa8YHYFdqr3Tf5MA5wg7/nttXgOYQ1d10s= Subject key identifier: 0C:CE:A0:27:CF:BF:A8:33:6C:C3:57:BB:EB:77:5A:3D:35:70:40:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E9DCC71A98527167E980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db4e1afd-2666-328c-9f7d-07e0c9f0d623.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7381 IP address blocks: 67.151.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e9:dc:c7:1a:98:52:71:67:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=37f9db72-5865-46f7-9e21-216795b4745f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:79:91:6f:90:5a:e0:25:eb:99:5b:41:79:d8: fd:d8:7f:a0:0c:0b:dd:ba:f7:a4:d6:af:a2:e6:32: 7f:f4:c4:1a:28:4a:26:cf:23:e4:93:7b:ad:b1:4f: 32:a4:f3:b6:9e:49:78:5b:6e:da:19:c8:fe:b5:7a: 9d:b5:6c:dc:a1:e7:a1:30:e0:f0:73:f2:89:64:3f: 73:4f:9b:4c:76:a8:85:ce:89:0d:bf:92:8d:07:90: c7:26:bc:23:80:e7:36:a9:2d:4d:6f:3e:99:a1:bf: 0c:a8:6c:a7:29:fd:b7:f1:3d:59:e8:38:3b:4c:94: b6:91:c5:98:78:df:eb:b5:90:67:be:2e:1e:39:c9: 04:2b:83:a6:97:0c:3e:c8:da:80:7e:fd:45:b4:e6: fb:7e:0d:20:c5:8d:2c:0b:58:8c:ad:e4:ea:8c:c7: 8b:78:cb:4d:78:fc:8d:0d:b0:e3:30:3c:59:37:89: c7:75:82:53:b9:82:8b:d1:05:61:b0:49:05:8e:d9: 0d:5c:a9:f7:f3:1d:28:43:c9:9e:16:70:d7:2d:4e: e3:b9:ea:a7:ff:76:76:ff:9b:c5:58:70:5e:b7:c4: 81:1c:eb:e3:7b:de:c4:40:d3:00:9b:3d:72:f3:28: 1c:0d:c2:dc:b2:e2:84:a7:48:31:4d:04:eb:06:23: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:A0:27:CF:BF:A8:33:6C:C3:57:BB:EB:77:5A:3D:35:70:40:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db4e1afd-2666-328c-9f7d-07e0c9f0d623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:18:f3:58:ec:dc:7a:a9:e0:5b:b7:d3:52:69:04:98:dd:36: 54:cb:38:df:09:e3:ff:4f:e8:3a:0a:82:6c:b6:7f:80:21:a1: 3f:ae:a5:c1:ef:25:74:a5:a0:e1:56:8d:4d:de:8a:7b:35:6f: f9:5d:aa:5e:55:46:2a:bb:25:b6:97:03:d2:4c:68:06:9a:98: 01:bf:7b:b0:07:61:7d:e3:c3:a2:9d:71:30:09:a1:64:5e:ba: c6:82:ed:3f:7c:55:a1:c9:5d:d0:c1:04:a1:51:d7:1f:f6:23: 91:07:ac:36:18:78:78:5c:07:33:e7:9a:c1:9c:3b:11:f8:a3: a9:1e:ad:5e:ee:a9:e9:4c:47:d6:95:49:03:70:fe:79:62:f5: ac:a1:bd:c4:c7:af:22:6c:da:2f:be:48:68:dc:c0:f5:ab:35: 44:3e:3e:10:71:aa:b7:87:e9:44:55:c1:27:53:63:5b:f0:fa: 40:d5:df:47:3b:db:a0:25:de:9d:00:8e:d2:f3:94:4d:d3:2f: aa:64:52:bd:bb:a5:10:10:95:5d:5f:2f:1e:ac:17:fb:4d:13: 05:27:95:1b:d7:36:95:2c:21:ad:ab:5a:1f:cc:43:86:94:05: b9:80:30:59:dd:40:31:37:48:2f:bc:0e:1b:03:22:25:ab:69: cd:ff:1d:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysencxxqYUnFn6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MzdmOWRiNzItNTg2NS00NmY3LTllMjEtMjE2Nzk1YjQ3NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nmRb5Ba4CXrmVtBedj92H+gDAvduvek1q+i 5jJ/9MQaKEomzyPkk3utsU8ypPO2nkl4W27aGcj+tXqdtWzcoeehMODwc/KJZD9z T5tMdqiFzokNv5KNB5DHJrwjgOc2qS1Nbz6Zob8MqGynKf238T1Z6Dg7TJS2kcWY eN/rtZBnvi4eOckEK4Omlww+yNqAfv1FtOb7fg0gxY0sC1iMreTqjMeLeMtNePyN DbDjMDxZN4nHdYJTuYKL0QVhsEkFjtkNXKn38x0oQ8meFnDXLU7jueqn/3Z2/5vF WHBet8SBHOvje97EQNMAmz1y8ygcDcLcsuKEp0gxTQTrBiNP7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzOoCfPv6gzbMNXu+t3Wj01cECbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI0ZTFhZmQtMjY2Ni0z MjhjLTlmN2QtMDdlMGM5ZjBkNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5fzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkY81js3Hqp4Fu301JpBJjdNlTLON8J4/9P6DoKgmy2f4AhoT+upcHv JXSloOFWjU3eins1b/ldql5VRiq7JbaXA9JMaAaamAG/e7AHYX3jw6KdcTAJoWRe usaC7T98VaHJXdDBBKFR1x/2I5EHrDYYeHhcBzPnmsGcOxH4o6kerV7uqelMR9aV SQNw/nli9ayhvcTHryJs2i++SGjcwPWrNUQ+PhBxqreH6URVwSdTY1vw+kDV30c7 26Al3p0AjtLzlE3TL6pkUr27pRAQlV1fLx6sF/tNEwUnlRvXNpUsIa2rWh/MQ4aU BbmAMFndQDE3SC+8DhsDIiWrac3/Hek= -----END CERTIFICATE-----Generated at Thu Aug 27 14:18:49 2026 by rpki-client