$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa File: e38090fc-da46-3531-9381-e5b4953d080a.roa (raw, json) Hash identifier: maUMwGeDpcxfsRLe+zRkkohHmxWT6JI4SeSEKdSfQno= Subject key identifier: 2F:7C:54:57:68:AB:EC:89:3B:86:C2:84:DD:C7:3F:AC:96:7D:D9:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78FCA5648D7B15F272072E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.188.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:ca:56:48:d7:b1:5f:27:20:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e380e3fc-bd12-48a5-bf5a-8cd58f2bc0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:d4:90:04:36:57:11:08:7e:56:89:ff:b0: ef:eb:25:36:e6:2e:1f:be:ea:c7:ba:cd:38:bb:b3: 0b:0e:0e:46:49:77:7d:72:82:2d:bc:4a:3f:22:2a: a4:3f:e9:56:76:31:40:3e:2a:3d:b2:46:ef:2a:19: 30:04:f2:85:8d:ce:a0:ee:3a:ba:60:69:56:c9:3b: ef:c5:f5:fb:ca:30:1c:01:2a:16:85:79:9d:c2:9d: 43:89:02:ba:ab:39:11:02:14:26:73:95:af:7d:11: ab:bc:df:ec:0b:ba:5f:d2:bb:30:f7:3a:01:70:50: 2a:4f:cf:44:51:8d:4f:91:6b:37:dd:a0:ec:0f:0e: 8c:81:89:a5:66:4c:41:8d:95:fe:12:07:9a:ca:85: 5a:97:9f:ca:e7:1d:e4:18:55:e4:3f:40:4f:ac:a5: 5b:1f:f4:5d:66:be:c9:fd:51:e5:63:40:7c:d3:f9: a9:6b:18:55:73:59:f8:4d:ee:95:de:d5:d9:b5:f6: dc:ae:73:5a:c7:ae:12:3e:bc:66:0f:a8:db:08:3e: 7f:af:81:cf:dc:fd:89:a0:0a:39:54:69:a0:f5:cc: 1a:7a:0f:6f:0a:00:90:ac:62:38:5c:20:3e:de:f8: e0:79:aa:ce:3b:e1:ea:4c:16:03:a2:8b:13:0b:c0: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7C:54:57:68:AB:EC:89:3B:86:C2:84:DD:C7:3F:AC:96:7D:D9:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f5:9d:2d:b5:1c:51:98:94:b7:45:5d:18:de:e1:60:9f:49: fa:4e:db:2a:e4:95:e7:84:59:76:1c:15:05:32:04:a9:54:7a: 02:f8:6f:c0:b6:16:8c:4a:ee:e7:00:fd:e1:14:56:03:98:2e: 5c:24:0d:3d:6a:5d:00:6a:71:64:ec:fb:da:35:21:79:38:eb: b7:bd:fd:d4:37:d1:89:e9:eb:e9:f0:6f:d4:a5:13:87:1c:dd: 6c:f3:c4:59:0a:70:2d:7a:1b:af:43:26:88:0e:39:3c:07:03: 45:01:40:39:83:81:05:e6:ec:73:cb:6c:e8:0e:6c:de:b4:4c: ec:89:77:2b:17:6e:b4:89:b9:32:3e:0f:84:95:ed:79:4a:aa: de:e8:c4:c2:d6:68:7d:85:bd:6d:5c:1a:e1:f6:06:6f:a3:fa: 43:d7:67:a7:36:d3:a5:8c:b0:28:5b:19:fa:af:2c:d3:fb:3f: 3a:47:74:18:46:58:ce:c4:87:94:25:89:72:fd:da:06:b2:48: 52:7c:a3:b1:c0:67:8a:36:02:d3:20:3f:10:9d:48:ee:cd:fc: 43:3a:54:13:9e:5a:8f:c0:a9:2c:e2:4d:04:d7:b3:ff:1f:0a: e9:0d:ec:a4:38:6b:03:cc:23:5a:1f:97:24:4e:8f:59:b0:90: fa:44:0a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj8pWSNexXycgcuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTM4MGUzZmMtYmQxMi00OGE1LWJmNWEtOGNkNThmMmJjMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov3UkAQ2VxEIflaJ/7Dv6yU25i4fvurHus04 u7MLDg5GSXd9coItvEo/IiqkP+lWdjFAPio9skbvKhkwBPKFjc6g7jq6YGlWyTvv xfX7yjAcASoWhXmdwp1DiQK6qzkRAhQmc5WvfRGrvN/sC7pf0rsw9zoBcFAqT89E UY1PkWs33aDsDw6MgYmlZkxBjZX+EgeayoVal5/K5x3kGFXkP0BPrKVbH/RdZr7J /VHlY0B80/mpaxhVc1n4Te6V3tXZtfbcrnNax64SPrxmD6jbCD5/r4HP3P2JoAo5 VGmg9cwaeg9vCgCQrGI4XCA+3vjgearOO+HqTBYDoosTC8ADxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC98VFdoq+yJO4bChN3HP6yWfdkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTM4MDkwZmMtZGE0Ni0z NTMxLTkzODEtZTViNDk1M2QwODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT1nS21HFGYlLdFXRje4WCfSfpO2yrkleeEWXYcFQUyBKlUegL4b8C2 FoxK7ucA/eEUVgOYLlwkDT1qXQBqcWTs+9o1IXk467e9/dQ30Ynp6+nwb9SlE4cc 3WzzxFkKcC16G69DJogOOTwHA0UBQDmDgQXm7HPLbOgObN60TOyJdysXbrSJuTI+ D4SV7XlKqt7oxMLWaH2FvW1cGuH2Bm+j+kPXZ6c206WMsChbGfqvLNP7PzpHdBhG WM7Eh5QliXL92gaySFJ8o7HAZ4o2AtMgPxCdSO7N/EM6VBOeWo/AqSziTQTXs/8f CukN7KQ4awPMI1oflyROj1mwkPpECt0= -----END CERTIFICATE-----Generated at Thu Aug 27 15:14:33 2026 by rpki-client