$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1cff863-3334-345a-a495-debc44a66b17.roa File: e1cff863-3334-345a-a495-debc44a66b17.roa (raw, json) Hash identifier: vpX/4OZt//8iBB4FCaY6BvIV/37JG2euw8OlQyWPjdY= Subject key identifier: 87:E9:A2:33:A3:57:16:90:FC:86:19:7F:54:C0:4B:9E:C4:1B:7E:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED863B70B8262DF769E377200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1cff863-3334-345a-a495-debc44a66b17.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 64.24.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:b7:0b:82:62:df:76:9e:37:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=c7d94ddf-0d27-49d3-b3b5-fd97be591efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:07:78:45:da:cb:ea:97:ca:61:f9:b5:b8:4a: 5a:c7:0f:c5:51:6b:b8:06:4c:ac:b7:7b:8e:eb:36: 67:2a:11:1d:78:77:1a:8b:5e:ff:12:74:c5:13:2a: a4:f8:f9:5d:d6:be:df:c3:90:3b:48:cf:77:70:a5: 1b:7d:63:97:ad:0b:6b:67:99:99:94:49:47:ce:27: 48:f2:f5:9a:00:8d:cb:37:de:3c:37:80:c4:91:75: f9:1b:d7:c6:55:bb:94:8f:99:44:d4:23:7f:b4:d5: 1c:19:01:be:1d:58:e1:3b:96:b7:36:9d:f4:92:4b: 40:ff:8e:22:fa:e8:57:47:24:ee:cd:6b:13:96:54: 6e:d6:e4:dd:02:2e:7d:1b:80:25:23:9a:ff:2f:56: dc:96:0b:ad:71:14:22:f3:a9:2d:e2:4c:74:81:91: 60:fc:82:67:ec:f7:eb:ec:cf:bc:f4:17:cb:3b:5d: 02:46:2e:54:ca:32:6b:9c:97:3d:75:b2:6e:ba:e5: 83:b8:77:0c:39:b3:82:bf:38:83:e9:b7:3c:ca:e4: cc:31:7e:fa:62:1d:b7:16:53:c2:34:e0:b2:7a:be: da:8f:d8:49:cf:6c:ba:35:11:3d:66:71:cc:a1:1b: c9:6d:7b:a9:c6:27:fb:f1:1d:9a:d9:9d:97:79:14: 6a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E9:A2:33:A3:57:16:90:FC:86:19:7F:54:C0:4B:9E:C4:1B:7E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1cff863-3334-345a-a495-debc44a66b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:99:72:89:cb:7f:86:4c:34:09:21:df:7c:c3:39:ab:f7:7c: a4:47:85:98:97:78:d8:63:c5:ba:19:29:dc:47:8b:3c:0b:57: 07:97:a1:f9:ff:ab:b5:40:9f:bb:5a:e8:20:dd:1b:ae:59:3e: 43:25:d1:a4:58:90:e6:8c:b5:2e:e9:8e:bc:c8:ef:53:0f:f7: 42:b2:e6:e8:76:5b:7e:5c:59:d1:58:c3:98:93:bd:87:18:76: 3d:ea:1c:c0:34:c0:ab:df:57:f8:e9:3f:67:eb:a8:66:74:3a: 45:26:6f:f8:ef:02:56:88:04:13:7e:87:01:44:b5:91:8d:80: d1:79:50:f7:72:8f:99:be:45:07:26:f0:13:f4:fd:b9:ac:fa: 45:48:e4:b5:02:ae:a3:0a:2c:83:c7:0d:f5:3b:da:27:e6:dc: 64:b5:b2:9f:b2:e4:bd:b2:61:af:06:5f:8e:a2:b0:e5:2d:a0: c2:96:d0:c7:48:90:91:6a:21:99:86:bd:3d:94:68:87:a1:51: 22:d0:cb:4a:9c:80:8a:ce:f3:4a:1e:9c:7c:65:df:9d:7a:2f: ab:d7:b8:f7:e1:e2:fc:cd:bb:9b:5e:20:70:43:cf:3c:e0:ef: 03:56:8f:02:89:28:58:a7:c4:c3:d9:35:ad:59:bd:b1:1e:38: 4d:52:c7:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY7cLgmLfdp43cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YzdkOTRkZGYtMGQyNy00OWQzLWIzYjUtZmQ5N2JlNTkxZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Qd4RdrL6pfKYfm1uEpaxw/FUWu4Bkyst3uO 6zZnKhEdeHcai17/EnTFEyqk+Pld1r7fw5A7SM93cKUbfWOXrQtrZ5mZlElHzidI 8vWaAI3LN948N4DEkXX5G9fGVbuUj5lE1CN/tNUcGQG+HVjhO5a3Np30kktA/44i +uhXRyTuzWsTllRu1uTdAi59G4AlI5r/L1bclgutcRQi86kt4kx0gZFg/IJn7Pfr 7M+89BfLO10CRi5UyjJrnJc9dbJuuuWDuHcMObOCvziD6bc8yuTMMX76Yh23FlPC NOCyer7aj9hJz2y6NRE9ZnHMoRvJbXupxif78R2a2Z2XeRRqjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfpojOjVxaQ/IYZf1TAS57EG34iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTFjZmY4NjMtMzMzNC0z NDVhLWE0OTUtZGViYzQ0YTY2YjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuZconLf4ZMNAkh33zDOav3fKRHhZiXeNhjxboZKdxHizwLVweXofn/ q7VAn7ta6CDdG65ZPkMl0aRYkOaMtS7pjrzI71MP90Ky5uh2W35cWdFYw5iTvYcY dj3qHMA0wKvfV/jpP2frqGZ0OkUmb/jvAlaIBBN+hwFEtZGNgNF5UPdyj5m+RQcm 8BP0/bms+kVI5LUCrqMKLIPHDfU72ifm3GS1sp+y5L2yYa8GX46isOUtoMKW0MdI kJFqIZmGvT2UaIehUSLQy0qcgIrO80oenHxl3516L6vXuPfh4vzNu5teIHBDzzzg 7wNWjwKJKFinxMPZNa1ZvbEeOE1Sx5c= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:25 2026 by rpki-client