$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8d2fddd-6fbf-3fc8-a28d-07ada0b3d8ce.roa File: e8d2fddd-6fbf-3fc8-a28d-07ada0b3d8ce.roa (raw, json) Hash identifier: bsLqYSfmRUAaqaKoFcQ01KfmaXWgb7pHd//dRV62hPI= Subject key identifier: 4B:D5:C4:89:CB:CF:26:35:0B:4A:60:2E:72:28:E2:DB:CE:8B:93:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E63043946727BE09E800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8d2fddd-6fbf-3fc8-a28d-07ada0b3d8ce.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 173.186.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e6:30:43:94:67:27:be:09:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=d55e9c48-59e6-4bbd-b3e9-2726d840d793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e7:6f:37:ed:bc:07:bb:a8:c6:32:d6:a7:da: da:92:e4:86:19:2e:4f:fa:67:76:5d:15:3a:b5:23: c1:76:8d:6d:b2:9c:88:43:32:30:e9:9f:75:88:d2: ff:6d:24:e6:37:74:c2:b4:56:e3:c9:1c:65:8a:0e: 64:3a:8c:e0:01:6f:76:23:2c:e2:9e:2d:84:a3:ee: ab:4c:74:36:74:d1:c1:3f:61:92:03:92:04:74:1b: 8c:d0:4a:3a:42:67:cb:22:24:45:4a:85:0a:70:a7: 99:f3:ef:56:05:87:5c:79:28:b9:16:57:82:79:49: 4d:bf:b2:0d:8f:00:85:63:ac:35:39:e0:97:6c:cb: 4d:f4:bc:56:4b:6d:93:fc:d8:27:15:d8:f9:c4:93: 70:ec:16:9d:5e:c5:fa:7b:87:36:28:af:55:9d:a6: 09:18:97:9b:93:b0:95:22:f1:56:8f:ef:89:7d:97: 78:19:9d:c8:ed:9b:4e:dd:45:b2:aa:26:86:a0:8d: 6a:7f:64:b1:ec:d2:a5:b7:55:bd:df:e2:03:97:f4: ec:36:d2:da:ba:0d:e9:e7:59:77:03:c1:43:13:ec: ad:00:8b:34:82:6e:8f:50:21:48:33:7a:ed:0b:0c: 12:1a:53:b8:a6:dd:99:b8:d5:cd:66:df:d1:d0:ad: a3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D5:C4:89:CB:CF:26:35:0B:4A:60:2E:72:28:E2:DB:CE:8B:93:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8d2fddd-6fbf-3fc8-a28d-07ada0b3d8ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:20:32:fe:e9:cf:a8:ea:b5:8c:24:cb:e4:ce:66:8f:1f:55: b7:a3:20:cb:a5:ff:46:95:67:e7:27:6e:c3:2f:8b:35:86:a7: 8d:5d:d7:1c:6c:87:0e:0c:9c:0d:ed:28:f1:6e:af:3b:fc:24: 45:4e:d4:6d:6a:2b:83:8b:e6:f2:a8:5d:f5:25:23:d3:ef:24: fc:f1:d6:c0:c4:a6:27:8a:8f:29:81:54:7b:5d:a9:ed:45:7a: 6e:c5:a2:28:7e:da:b1:9a:aa:0a:35:f8:6c:4e:5b:31:74:96: 8d:26:52:46:69:f4:0b:c0:22:96:d1:17:0a:e4:18:fe:81:67: f1:d8:f0:ac:84:ab:27:d3:53:ec:c2:0b:84:1a:a4:fe:b5:26: fb:26:23:62:c0:cc:e4:14:3e:29:c9:7e:d5:85:c2:c0:0f:58: 8f:a4:2e:64:14:85:7f:eb:96:d7:b9:aa:2d:6a:82:56:e4:39: 1f:37:f2:ca:80:d2:2b:7f:d7:0f:e6:ee:de:c5:22:7f:29:fd: c0:41:8a:4f:b9:c6:5f:68:7f:a9:12:49:4a:2e:0f:30:6b:ae: ab:20:9b:ce:a0:ea:9a:d7:19:4f:cd:fe:cb:aa:87:09:bc:27: 94:fd:32:06:3a:2b:d2:1b:0b:63:fe:3c:a7:64:f6:d1:19:71: a2:5b:90:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseYwQ5RnJ74J6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZDU1ZTljNDgtNTllNi00YmJkLWIzZTktMjcyNmQ4NDBkNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOdvN+28B7uoxjLWp9rakuSGGS5P+md2XRU6 tSPBdo1tspyIQzIw6Z91iNL/bSTmN3TCtFbjyRxlig5kOozgAW92Iyzini2Eo+6r THQ2dNHBP2GSA5IEdBuM0Eo6QmfLIiRFSoUKcKeZ8+9WBYdceSi5FleCeUlNv7IN jwCFY6w1OeCXbMtN9LxWS22T/NgnFdj5xJNw7BadXsX6e4c2KK9VnaYJGJebk7CV IvFWj++JfZd4GZ3I7ZtO3UWyqiaGoI1qf2Sx7NKlt1W93+IDl/TsNtLaug3p51l3 A8FDE+ytAIs0gm6PUCFIM3rtCwwSGlO4pt2ZuNXNZt/R0K2jvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvVxInLzyY1C0pgLnIo4tvOi5PtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZThkMmZkZGQtNmZiZi0z ZmM4LWEyOGQtMDdhZGEwYjNkOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsgMv7pz6jqtYwky+TOZo8fVbejIMul/0aVZ+cnbsMvizWGp41d1xxs hw4MnA3tKPFurzv8JEVO1G1qK4OL5vKoXfUlI9PvJPzx1sDEpieKjymBVHtdqe1F em7Foih+2rGaqgo1+GxOWzF0lo0mUkZp9AvAIpbRFwrkGP6BZ/HY8KyEqyfTU+zC C4QapP61JvsmI2LAzOQUPinJftWFwsAPWI+kLmQUhX/rlte5qi1qglbkOR838sqA 0it/1w/m7t7FIn8p/cBBik+5xl9of6kSSUouDzBrrqsgm86g6prXGU/N/suqhwm8 J5T9MgY6K9IbC2P+PKdk9tEZcaJbkBk= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:19 2026 by rpki-client