$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fadf732c-1c74-3619-a8d9-0787e2f898e1.roa File: fadf732c-1c74-3619-a8d9-0787e2f898e1.roa (raw, json) Hash identifier: UBAXOfKOI7wd3Lfya4c2J4tJWI3Xw6S4xK076l1PyOQ= Subject key identifier: 3F:C8:D5:6F:13:B3:DF:1D:7C:11:C6:B0:0A:52:95:77:47:06:38:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E291CC42C63381EFFE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fadf732c-1c74-3619-a8d9-0787e2f898e1.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 66.49.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e2:91:cc:42:c6:33:81:ef:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=5c3b189f-cd23-49f8-99f8-45b1d16e4d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fa:2a:f1:84:e9:d2:ef:1e:70:1e:01:5c:fe: d4:d6:b6:ec:3c:bc:b7:1b:a5:96:b6:d0:1e:3c:86: f9:91:07:74:0b:1b:61:ba:96:07:2a:b9:0c:f2:48: a4:fd:a9:de:e0:7b:9b:0a:71:21:f5:a1:5a:95:c0: b9:43:72:fe:01:a8:b2:98:27:d6:73:65:0d:42:d9: e6:28:9f:f5:16:d7:4a:29:8f:33:08:fa:d3:69:25: 10:d4:37:9c:71:fd:4f:af:4d:9d:4b:16:e2:b7:eb: f5:56:5c:0d:b7:8c:09:70:07:b1:da:01:a1:42:af: 55:f5:59:eb:ac:da:b9:78:5a:6a:0b:c7:c7:25:35: 4a:f4:0e:dd:97:c6:aa:4d:0f:ee:ed:70:70:ea:4f: 8b:64:c2:12:b4:37:50:35:f1:75:a0:43:94:f2:e9: b7:e1:d6:e3:78:e8:07:e9:83:c0:03:1c:49:ac:55: 44:94:6c:e0:37:f0:b8:df:ee:74:3d:43:83:d7:3c: ed:1f:5c:50:05:6e:30:57:c5:78:10:97:e7:52:16: bd:07:dd:f8:5e:f8:5c:a9:4e:e9:12:f3:7c:14:53: bb:b8:b5:19:c1:6f:68:4c:d3:ba:62:c1:54:6e:5b: 59:5b:c8:be:04:bd:8f:e1:8d:64:15:4d:4b:d0:44: b8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C8:D5:6F:13:B3:DF:1D:7C:11:C6:B0:0A:52:95:77:47:06:38:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fadf732c-1c74-3619-a8d9-0787e2f898e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.49.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:26:a9:70:d1:bd:d4:2f:81:e8:99:97:e3:1d:5c:c5:a8:64: 91:d1:0c:45:46:25:f1:e1:3e:da:ed:6e:73:ac:0d:35:ec:fc: a3:67:f9:6b:9e:b3:2e:c5:50:1a:f4:ef:e9:fc:ca:15:66:85: 45:49:c6:8a:8c:a4:a6:1d:f5:06:45:8a:bf:64:03:d4:08:70: cf:a3:56:3c:77:3f:36:74:41:c0:ed:a5:f6:a7:4c:3f:14:d3: a3:01:aa:ad:69:f9:87:9f:ce:8c:da:a0:c1:2b:f6:18:ec:0c: c9:ee:fd:32:53:d1:ae:26:a9:82:7d:20:d0:d1:7b:5e:5d:99: 57:ef:33:0d:f9:2a:93:cd:7a:77:25:5b:9e:f2:a4:a8:7a:8f: 64:d6:a1:fb:70:96:a6:51:b7:5e:0c:eb:4a:92:44:54:91:05: 2d:36:e4:4a:17:f8:ee:82:cf:5f:5c:96:30:e9:85:3b:af:7c: 15:d8:65:3e:d0:91:6b:94:81:25:35:59:78:ba:bf:7d:1c:6e: 19:82:51:2c:16:c4:d1:98:58:7e:bc:81:4d:7a:6b:95:d4:d6: 2b:67:72:96:a5:a7:13:30:69:1a:04:33:6f:0a:ba:a1:e8:06: dd:70:55:e5:7a:2b:c8:d7:43:37:19:be:de:bd:7e:d1:3f:30: cd:c4:9e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseKRzELGM4Hv/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NWMzYjE4OWYtY2QyMy00OWY4LTk5ZjgtNDViMWQxNmU0ZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvoq8YTp0u8ecB4BXP7U1rbsPLy3G6WWttAe PIb5kQd0CxthupYHKrkM8kik/ane4HubCnEh9aFalcC5Q3L+AaiymCfWc2UNQtnm KJ/1FtdKKY8zCPrTaSUQ1Deccf1Pr02dSxbit+v1VlwNt4wJcAex2gGhQq9V9Vnr rNq5eFpqC8fHJTVK9A7dl8aqTQ/u7XBw6k+LZMIStDdQNfF1oEOU8um34dbjeOgH 6YPAAxxJrFVElGzgN/C43+50PUOD1zztH1xQBW4wV8V4EJfnUha9B934XvhcqU7p EvN8FFO7uLUZwW9oTNO6YsFUbltZW8i+BL2P4Y1kFU1L0ES4PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/I1W8Ts98dfBHGsApSlXdHBjhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFkZjczMmMtMWM3NC0z NjE5LWE4ZDktMDc4N2UyZjg5OGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQjEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMmqXDRvdQvgeiZl+MdXMWoZJHRDEVGJfHhPtrtbnOsDTXs/KNn+Wue sy7FUBr07+n8yhVmhUVJxoqMpKYd9QZFir9kA9QIcM+jVjx3PzZ0QcDtpfanTD8U 06MBqq1p+YefzozaoMEr9hjsDMnu/TJT0a4mqYJ9INDRe15dmVfvMw35KpPNencl W57ypKh6j2TWoftwlqZRt14M60qSRFSRBS025EoX+O6Cz19cljDphTuvfBXYZT7Q kWuUgSU1WXi6v30cbhmCUSwWxNGYWH68gU16a5XU1itncpalpxMwaRoEM28KuqHo Bt1wVeV6K8jXQzcZvt69ftE/MM3Ensg= -----END CERTIFICATE-----Generated at Thu Aug 27 12:29:47 2026 by rpki-client