$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecf2c07d-f014-3872-97c7-d9321a1ef1f6.roa File: ecf2c07d-f014-3872-97c7-d9321a1ef1f6.roa (raw, json) Hash identifier: 0vwrbk1CH6a0g6EgkwqTCYTXdgDVcrtfBDqNEyyVTMo= Subject key identifier: 15:A1:12:CB:09:DB:80:F8:6D:71:0E:62:86:07:BD:EB:23:20:3B:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EF2E756C27B85BA5574466040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecf2c07d-f014-3872-97c7-d9321a1ef1f6.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 173.213.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:56:c2:7b:85:ba:55:74:46:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=08c8c7a7-7338-4f18-901b-c71dd7ea4990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3b:48:d2:fb:26:2a:52:94:1d:75:24:90:32: fb:b2:74:84:03:de:f2:55:62:56:dd:5e:38:38:18: 82:43:ad:81:3a:22:86:c9:6d:52:8b:b2:16:b8:68: c8:70:84:63:0f:23:e7:eb:34:1e:5b:ff:8a:b5:15: ed:79:13:5b:20:a3:2e:67:28:35:7c:7a:80:ed:f0: 36:d4:99:a1:9d:f1:5f:c4:a7:8d:28:9b:16:02:f8: 65:1d:41:0c:db:87:6f:4c:e7:ef:ca:57:45:2b:f9: 38:61:e1:e3:b9:1c:2d:cc:fb:a1:09:4b:ec:0f:2a: 30:5e:1f:64:46:ac:61:72:76:a0:f6:56:97:2d:39: 48:22:ec:71:73:1d:c2:e7:1b:9d:c5:c6:ae:0b:1c: 48:ee:96:27:f2:3b:cd:46:36:5a:98:8e:10:7e:3a: 91:1b:af:57:3e:b8:87:b1:ec:78:19:73:da:cd:b1: 3f:10:b0:3d:57:78:ff:2b:6f:87:90:ff:f4:f8:3d: c9:90:f0:59:28:0e:32:38:62:d4:f9:08:79:0b:25: 02:a5:bc:86:8b:7d:c3:5e:4b:48:ca:91:c3:e5:7d: 4c:d3:d4:23:29:0a:f1:b2:97:67:81:e6:1c:86:0d: 6d:c1:ee:3e:5c:99:59:4f:4e:0d:15:77:e3:2e:51: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A1:12:CB:09:DB:80:F8:6D:71:0E:62:86:07:BD:EB:23:20:3B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecf2c07d-f014-3872-97c7-d9321a1ef1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0d:bf:57:1d:7e:79:9a:55:fe:96:23:05:cc:96:b0:3c:b7: 9e:dc:e8:23:71:93:18:fa:c2:8b:48:95:ec:92:63:4b:bd:ea: 9f:88:5f:e2:f8:f3:43:de:2f:83:45:9e:b4:95:21:60:ee:6e: 94:48:28:ee:69:f6:81:55:ea:79:d5:29:a7:98:cc:e4:5d:2d: 74:64:63:e6:a3:c7:f6:c9:d8:a7:fb:ce:7d:78:06:2b:5f:5d: bc:86:37:55:99:29:c6:5f:f4:03:e7:40:73:ad:fc:42:95:c1: dd:c2:7f:90:98:8f:5f:a3:46:fb:d4:74:5e:02:79:5e:77:88: 93:77:e3:d3:7b:77:2e:49:dd:8a:54:b3:af:81:61:8b:57:9a: 72:0c:1a:ef:34:23:b1:c9:2c:cb:7c:bc:60:b7:80:45:f3:43: 41:73:08:02:af:fc:e2:08:ff:03:a0:7f:66:d5:13:55:08:0c: 85:0d:b9:b7:2a:e0:7c:69:fa:27:9f:2f:be:47:ae:6e:bd:b3: af:be:3d:bd:4c:a9:1f:bf:f1:4d:5f:6c:f4:99:0a:c5:e7:fa: 96:c8:84:b2:3a:90:95:74:1d:5a:2d:4e:5f:37:da:3b:13:27: 01:2d:88:d9:e1:4f:d5:8a:71:2b:bb:98:27:b6:65:6c:ff:bd: 93:9f:92:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y51bCe4W6VXRGYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MDhjOGM3YTctNzMzOC00ZjE4LTkwMWItYzcxZGQ3ZWE0OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTtI0vsmKlKUHXUkkDL7snSEA97yVWJW3V44 OBiCQ62BOiKGyW1Si7IWuGjIcIRjDyPn6zQeW/+KtRXteRNbIKMuZyg1fHqA7fA2 1JmhnfFfxKeNKJsWAvhlHUEM24dvTOfvyldFK/k4YeHjuRwtzPuhCUvsDyowXh9k Rqxhcnag9laXLTlIIuxxcx3C5xudxcauCxxI7pYn8jvNRjZamI4QfjqRG69XPriH sex4GXPazbE/ELA9V3j/K2+HkP/0+D3JkPBZKA4yOGLU+Qh5CyUCpbyGi33DXktI ypHD5X1M09QjKQrxspdngeYchg1twe4+XJlZT04NFXfjLlEP5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWhEssJ24D4bXEOYoYHvesjIDvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNmMmMwN2QtZjAxNC0z ODcyLTk3YzctZDkzMjFhMWVmMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYNv1cdfnmaVf6WIwXMlrA8t57c6CNxkxj6wotIleySY0u96p+IX+L4 80PeL4NFnrSVIWDubpRIKO5p9oFV6nnVKaeYzORdLXRkY+ajx/bJ2Kf7zn14Bitf XbyGN1WZKcZf9APnQHOt/EKVwd3Cf5CYj1+jRvvUdF4CeV53iJN349N7dy5J3YpU s6+BYYtXmnIMGu80I7HJLMt8vGC3gEXzQ0FzCAKv/OII/wOgf2bVE1UIDIUNubcq 4Hxp+iefL75Hrm69s6++Pb1MqR+/8U1fbPSZCsXn+pbIhLI6kJV0HVotTl832jsT JwEtiNnhT9WKcSu7mCe2ZWz/vZOfkis= -----END CERTIFICATE-----Generated at Thu Aug 27 11:39:35 2026 by rpki-client