$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2765b7d9-24f7-34f7-879c-3d7364c034cd.roa File: 2765b7d9-24f7-34f7-879c-3d7364c034cd.roa (raw, json) Hash identifier: CC+z/9LM/9FY/OISVBTQVrRagT1zleAlbaofaFMWkRM= Subject key identifier: F0:4C:5B:B6:98:1F:3B:31:90:D9:7F:44:4B:71:1A:49:05:4D:6A:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F0242332CA1F68257B8285FF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2765b7d9-24f7-34f7-879c-3d7364c034cd.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 173.189.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:33:2c:a1:f6:82:57:b8:28:5f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=26f2964c-5bcc-45cf-989d-4771a40669e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:af:49:40:a1:74:99:2f:36:9a:90:16:2c: 93:d0:77:f5:14:9b:c5:a6:2b:7e:98:5a:ea:44:c6: 5c:a6:d3:0d:d5:56:b1:1a:89:0d:a6:a2:11:1d:3b: f0:17:af:52:20:a6:9e:db:c7:a6:15:39:57:01:75: ba:96:f6:f2:e8:fc:73:be:cc:60:78:27:9e:b0:bc: d2:c3:28:18:19:7d:63:61:f6:0c:05:a4:92:41:ae: 4e:23:ee:53:6b:52:19:6c:7c:d5:7a:a9:70:2a:e3: 34:40:55:bd:4c:ef:17:b7:a6:6d:b1:83:0f:a4:33: 5a:c7:21:c8:70:fb:63:e7:88:32:b4:b8:72:76:3b: 26:b5:a5:b5:67:4f:97:57:de:18:2c:5f:d5:93:3e: d3:2d:6c:f7:da:b9:51:ed:27:3b:58:c3:99:78:dd: a2:66:da:17:12:c2:1a:74:16:dc:9f:62:ca:5e:28: 11:30:49:a5:ef:c9:b2:0c:e2:a3:e5:df:c2:83:9e: b6:a3:8b:6c:21:31:c8:cc:0d:72:20:bc:63:de:0d: 08:d2:4c:dd:48:69:29:45:bf:d9:68:7f:b1:8b:fe: 3f:3e:15:e4:04:42:b0:99:bc:38:10:8c:02:35:72: 9e:f6:99:4e:ae:1d:d8:ef:be:4c:45:8b:9b:c1:cf: 9a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4C:5B:B6:98:1F:3B:31:90:D9:7F:44:4B:71:1A:49:05:4D:6A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2765b7d9-24f7-34f7-879c-3d7364c034cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:76:2c:87:7b:1e:4d:d5:95:aa:a7:ce:56:6a:c4:3c:93:12: 59:40:2f:7d:98:37:c2:39:5a:80:e2:1a:ac:0c:46:e5:77:f0: b6:ed:d3:e1:a7:e7:c4:ac:07:2c:56:f4:01:77:e6:a8:a3:79: 86:89:87:f5:79:96:20:7b:47:ba:8d:24:66:fc:fd:ff:12:02: e5:e0:b4:58:23:0a:42:58:a4:10:c2:f0:c0:5e:93:5d:6e:dd: a7:4a:ee:df:ff:5e:1f:f0:cf:16:d3:95:e2:45:6f:f2:c5:55: d3:79:c6:69:04:8e:e4:4e:f2:51:d1:96:35:08:ac:35:72:e6: 29:34:91:c7:04:93:98:f5:22:a4:58:eb:70:22:e1:dd:24:d8: ec:2e:9c:3f:a1:21:1a:ef:41:3b:73:11:cf:4a:a5:fd:d1:8f: d4:ca:34:9b:9d:e7:8f:9b:47:54:83:44:3f:c8:e5:28:0e:e1: d4:13:18:1b:aa:8c:45:ac:3b:0e:c2:bb:00:f9:cb:52:22:4f: b8:f2:11:92:fa:d1:45:66:c1:bd:75:a2:e0:6f:42:72:b7:f1: 0c:c4:70:f7:10:d2:f4:af:05:91:30:59:a5:c9:8a:90:4b:25: 9d:3b:9e:34:9d:ca:3f:a1:06:c8:2d:c7:f9:cb:96:c4:e1:c0: 0c:f8:4c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjMsofaCV7goX/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MjZmMjk2NGMtNWJjYy00NWNmLTk4OWQtNDc3MWE0MDY2OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB2vSUChdJkvNpqQFiyT0Hf1FJvFpit+mFrq RMZcptMN1VaxGokNpqIRHTvwF69SIKae28emFTlXAXW6lvby6PxzvsxgeCeesLzS wygYGX1jYfYMBaSSQa5OI+5Ta1IZbHzVeqlwKuM0QFW9TO8Xt6ZtsYMPpDNaxyHI cPtj54gytLhydjsmtaW1Z0+XV94YLF/Vkz7TLWz32rlR7Sc7WMOZeN2iZtoXEsIa dBbcn2LKXigRMEml78myDOKj5d/Cg562o4tsITHIzA1yILxj3g0I0kzdSGkpRb/Z aH+xi/4/PhXkBEKwmbw4EIwCNXKe9plOrh3Y775MRYubwc+aWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBMW7aYHzsxkNl/REtxGkkFTWo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjc2NWI3ZDktMjRmNy0z NGY3LTg3OWMtM2Q3MzY0YzAzNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp2LId7Hk3VlaqnzlZqxDyTEllAL32YN8I5WoDiGqwMRuV38Lbt0+Gn 58SsByxW9AF35qijeYaJh/V5liB7R7qNJGb8/f8SAuXgtFgjCkJYpBDC8MBek11u 3adK7t//Xh/wzxbTleJFb/LFVdN5xmkEjuRO8lHRljUIrDVy5ik0kccEk5j1IqRY 63Ai4d0k2OwunD+hIRrvQTtzEc9Kpf3Rj9TKNJud54+bR1SDRD/I5SgO4dQTGBuq jEWsOw7CuwD5y1IiT7jyEZL60UVmwb11ouBvQnK38QzEcPcQ0vSvBZEwWaXJipBL JZ07njSdyj+hBsgtx/nLlsThwAz4TPk= -----END CERTIFICATE-----Generated at Wed Sep 23 13:58:27 2026 by rpki-client