$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa File: f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa (raw, json) Hash identifier: 6aaU02xWBg05bJROKjp1kvX760lU4i9ubq0U3hZX1oo= Subject key identifier: 86:1E:EE:1D:59:59:02:8F:05:85:54:A7:F0:B9:04:E5:39:23:BE:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CCB52905A0A741E32700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 216.153.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cc:b5:29:05:a0:a7:41:e3:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=3f4b3347-5114-4a7f-b5f3-1f62683e8bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:ce:30:44:1f:a9:05:b9:1f:93:cd:50:4c: 90:b6:f1:ba:07:4b:fe:02:14:4b:4b:aa:99:3b:3a: 86:58:5b:ad:95:d6:6a:02:fc:39:99:13:51:cc:af: 8d:c5:65:a9:10:48:77:4f:b9:df:31:62:a0:4d:e5: ea:84:1c:c5:ba:1e:26:8a:b2:10:c7:53:a2:fc:47: 4a:da:9c:27:e5:c9:17:35:be:e0:2b:78:df:9a:a9: d5:a3:97:fc:55:46:60:3b:04:8c:4f:11:a2:c1:84: 58:de:32:95:64:6b:66:d6:63:d4:45:93:37:c0:df: b4:78:03:b0:e9:3e:ba:fb:9a:30:af:a3:92:96:34: 9c:2d:e4:89:87:64:1d:20:c0:0a:be:42:10:86:02: dd:a5:f5:7f:55:47:78:4b:86:93:c2:27:12:7d:b1: e4:42:6d:50:b6:7b:01:91:13:69:61:e9:6c:8a:e7: a3:c2:18:1c:33:0a:59:4b:6f:93:74:77:4a:7c:83: 33:19:70:e2:1b:1e:e0:2e:7d:41:61:a8:39:15:a6: ba:fd:e1:a1:10:7d:6e:aa:79:1b:50:95:37:c6:f8: 94:df:da:03:fa:f3:6e:55:bc:25:fe:ab:ea:0e:f1: a5:05:84:1e:23:46:95:38:ac:d3:bf:73:05:b3:dd: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1E:EE:1D:59:59:02:8F:05:85:54:A7:F0:B9:04:E5:39:23:BE:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.153.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:80:33:7a:72:c2:da:28:61:ee:16:e8:06:04:7f:16:ec:95: 13:9f:b1:b2:db:df:62:2a:94:eb:92:9e:d9:29:9a:39:c7:13: 0c:09:4e:c3:25:f8:55:8f:03:4b:39:53:f3:06:10:9c:5c:87: 28:4c:74:41:da:5a:75:51:ce:61:e0:a4:dd:6b:a0:de:7a:af: e3:32:ca:1d:db:66:2b:eb:27:b0:d5:9a:3e:74:d7:71:95:6c: e4:b3:27:9f:95:b7:6b:be:dd:75:e3:63:0e:56:0d:07:e0:55: ec:e5:aa:1a:52:d0:5c:2c:ef:61:90:6e:05:36:5b:06:18:85: 64:64:f0:f0:31:dc:57:2b:5c:82:fb:d1:34:5a:29:59:96:d3: 90:78:ec:49:2b:a3:ab:ff:e3:0a:52:2a:31:a7:bc:93:85:6d: a0:a7:87:2f:8f:f4:74:57:4c:30:79:38:fa:92:f1:89:e4:e2: ab:0d:f4:de:63:56:62:41:d7:4e:22:6a:4e:4d:f3:51:25:66: 67:b8:0f:f0:c4:24:f8:8d:8f:29:4a:03:65:13:5a:6d:5d:39: cd:54:99:23:b4:35:31:29:f3:f3:f0:0a:bb:eb:fc:1f:92:42: 69:d8:48:90:96:90:12:2e:cb:d3:2f:23:e4:89:c4:3c:b8:7f: e9:11:08:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscy1KQWgp0HjJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk M2Y0YjMzNDctNTExNC00YTdmLWI1ZjMtMWY2MjY4M2U4YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmPOMEQfqQW5H5PNUEyQtvG6B0v+AhRLS6qZ OzqGWFutldZqAvw5mRNRzK+NxWWpEEh3T7nfMWKgTeXqhBzFuh4mirIQx1Oi/EdK 2pwn5ckXNb7gK3jfmqnVo5f8VUZgOwSMTxGiwYRY3jKVZGtm1mPURZM3wN+0eAOw 6T66+5owr6OSljScLeSJh2QdIMAKvkIQhgLdpfV/VUd4S4aTwicSfbHkQm1QtnsB kRNpYelsiuejwhgcMwpZS2+TdHdKfIMzGXDiGx7gLn1BYag5Faa6/eGhEH1uqnkb UJU3xviU39oD+vNuVbwl/qvqDvGlBYQeI0aVOKzTv3MFs90DNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYe7h1ZWQKPBYVUp/C5BOU5I77eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjA0ZGYzZDEtOTRmZC0z ZTg2LWFiMDMtOGIwZGY3NGQwZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2JmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiAM3pywtooYe4W6AYEfxbslROfsbLb32IqlOuSntkpmjnHEwwJTsMl +FWPA0s5U/MGEJxchyhMdEHaWnVRzmHgpN1roN56r+Myyh3bZivrJ7DVmj5013GV bOSzJ5+Vt2u+3XXjYw5WDQfgVezlqhpS0Fws72GQbgU2WwYYhWRk8PAx3FcrXIL7 0TRaKVmW05B47Ekro6v/4wpSKjGnvJOFbaCnhy+P9HRXTDB5OPqS8Ynk4qsN9N5j VmJB104iak5N81ElZme4D/DEJPiNjylKA2UTWm1dOc1UmSO0NTEp8/PwCrvr/B+S QmnYSJCWkBIuy9MvI+SJxDy4f+kRCDE= -----END CERTIFICATE-----Generated at Thu Aug 27 14:17:24 2026 by rpki-client