$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc19565b-4e56-3903-899b-e7310e4c4036.roa File: cc19565b-4e56-3903-899b-e7310e4c4036.roa (raw, json) Hash identifier: iP9Xf7j6BY4K5mAYTN7d5h4XBdGjk4rqvSg7z1doPbY= Subject key identifier: B3:C4:1E:24:38:16:EB:CD:DF:F4:C0:D0:66:5E:46:D7:64:40:83:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E92A9242F2B096B999B97AA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc19565b-4e56-3903-899b-e7310e4c4036.roa Signing time: Tue 21 Jul 2026 13:37:20 +0000 ROA not before: Tue 21 Jul 2026 13:37:20 +0000 ROA not after: Mon 19 Oct 2026 13:37:20 +0000 asID: 7029 IP address blocks: 173.189.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:a9:24:2f:2b:09:6b:99:9b:97:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 21 13:37:20 2026 GMT Not After : Oct 19 13:37:20 2026 GMT Subject: CN=badeeda8-835d-4365-92ff-211219ffd92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:bb:3f:0c:3f:64:da:3d:e0:ea:64:27:42:d7: e2:f9:75:40:4d:f8:3b:2f:b2:65:cb:ab:99:61:8c: 56:36:86:75:68:59:ea:69:2b:5b:c2:c6:b6:37:cd: 76:10:85:10:07:87:e1:48:92:9c:a1:c4:86:8f:d8: a6:3a:e7:aa:63:51:c2:88:d1:ec:81:2d:b1:b3:7e: 2d:3d:02:75:8e:d5:4c:aa:5f:2d:d7:2f:88:53:0d: e4:37:1f:f2:bd:cd:2b:d7:04:f0:bf:50:bf:4c:b4: 83:9e:cf:aa:1e:f7:1c:80:59:48:85:d7:c1:a9:96: c9:47:0b:5f:65:87:45:93:84:74:08:4e:19:02:78: 4d:a6:e0:39:89:6d:49:3b:e4:87:00:e1:8d:d4:8f: f7:51:0a:44:11:11:8e:66:bf:99:ea:8c:16:06:85: 7b:35:64:d8:05:d5:79:50:6f:fa:c1:5f:26:a0:a4: 0a:40:ce:5f:bd:4c:64:24:2a:8e:74:57:93:dd:e9: 7d:16:53:ad:46:8d:44:0c:df:43:c8:b9:9c:b1:b0: 01:28:9d:33:54:da:0b:cc:de:9a:df:9e:bf:4a:4b: 4d:ad:a7:d3:0a:8e:54:a2:de:6e:e2:35:21:43:8d: a7:d4:a0:f2:b8:6e:6a:e5:ce:05:82:47:dc:13:81: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C4:1E:24:38:16:EB:CD:DF:F4:C0:D0:66:5E:46:D7:64:40:83:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc19565b-4e56-3903-899b-e7310e4c4036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:77:d2:54:d6:26:34:54:47:cd:4e:c0:8a:97:36:f5:1e:c0: ab:4d:1c:a6:bc:1a:41:f5:e3:9e:74:11:1f:ca:10:97:08:da: 19:c6:7e:a2:34:d9:d7:9c:76:27:aa:7f:f1:60:e3:2a:a6:87: c4:85:5f:73:4f:e3:ef:7b:bd:2c:c7:ae:c9:51:52:59:cc:29: 61:6d:c2:5b:4b:d8:b9:53:46:25:3c:3f:cd:62:86:ea:5c:2b: 1c:6d:0d:c1:99:68:b1:6c:eb:59:c7:9a:c2:11:ed:0f:20:c5: 08:e0:f6:64:a3:f0:a0:92:57:8e:c5:c6:fc:6a:1d:9d:7d:91: 59:e4:9d:7b:8e:3f:aa:70:27:5a:6d:40:5f:0a:55:6b:07:e7: 90:67:a7:b7:63:36:15:f7:0d:4a:84:e1:9f:0c:4a:7b:56:51: ca:3d:53:ee:6c:83:48:9a:b3:5e:f7:fd:91:42:cf:6e:03:ec: fc:3c:d2:6e:4b:4d:d2:bf:e5:76:d7:e4:8d:f8:d7:f0:ea:f2: 7f:ff:1e:29:43:f2:5f:be:73:57:f4:da:0e:79:ed:c4:38:b8: c0:b4:21:98:e3:2d:9c:5e:86:c5:76:de:9a:fe:da:26:c9:d7: 59:fc:72:c0:5c:bd:c5:84:69:8d:57:15:37:40:9e:c0:d3:37: 96:a5:b1:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SqSQvKwlrmZuXqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyMTEzMzcyMFoXDTI2MTAxOTEzMzcyMFowLzEtMCsGA1UEAxMk YmFkZWVkYTgtODM1ZC00MzY1LTkyZmYtMjExMjE5ZmZkOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Ls/DD9k2j3g6mQnQtfi+XVATfg7L7Jly6uZ YYxWNoZ1aFnqaStbwsa2N812EIUQB4fhSJKcocSGj9imOueqY1HCiNHsgS2xs34t PQJ1jtVMql8t1y+IUw3kNx/yvc0r1wTwv1C/TLSDns+qHvccgFlIhdfBqZbJRwtf ZYdFk4R0CE4ZAnhNpuA5iW1JO+SHAOGN1I/3UQpEERGOZr+Z6owWBoV7NWTYBdV5 UG/6wV8moKQKQM5fvUxkJCqOdFeT3el9FlOtRo1EDN9DyLmcsbABKJ0zVNoLzN6a 356/SktNrafTCo5Uot5u4jUhQ42n1KDyuG5q5c4FgkfcE4E7JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPEHiQ4FuvN3/TA0GZeRtdkQINOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2MxOTU2NWItNGU1Ni0z OTAzLTg5OWItZTczMTBlNGM0MDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI530lTWJjRUR81OwIqXNvUewKtNHKa8GkH14550ER/KEJcI2hnGfqI0 2decdieqf/Fg4yqmh8SFX3NP4+97vSzHrslRUlnMKWFtwltL2LlTRiU8P81ihupc KxxtDcGZaLFs61nHmsIR7Q8gxQjg9mSj8KCSV47FxvxqHZ19kVnknXuOP6pwJ1pt QF8KVWsH55Bnp7djNhX3DUqE4Z8MSntWUco9U+5sg0ias173/ZFCz24D7Pw80m5L TdK/5XbX5I341/Dq8n//HilD8l++c1f02g557cQ4uMC0IZjjLZxehsV23pr+2ibJ 11n8csBcvcWEaY1XFTdAnsDTN5alsb0= -----END CERTIFICATE-----Generated at Fri Jul 24 03:49:06 2026 by rpki-client