$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a4d6b1-6aa8-317b-a973-11ce5c35d169.roa File: d1a4d6b1-6aa8-317b-a973-11ce5c35d169.roa (raw, json) Hash identifier: 04QzUDtNV2KINHYuJKtqc5hjDQrNsJMKvfFRuNhd69A= Subject key identifier: D8:E1:34:53:A3:E7:A4:4D:8D:96:58:F5:58:42:00:0D:FA:64:66:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E97B5096FF44121A7C6B92380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a4d6b1-6aa8-317b-a973-11ce5c35d169.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 7029 IP address blocks: 173.184.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:09:6f:f4:41:21:a7:c6:b9:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=ec274add-2935-4df6-8386-05a80ebe57de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:03:dc:72:51:41:0b:21:97:82:88:51:bc:0d: ff:2d:83:92:c6:86:d8:ae:98:2c:07:da:e2:90:a4: 6b:39:c3:90:61:27:de:8e:9d:06:d8:d8:76:67:a2: 4c:ab:54:32:4a:2d:54:90:6d:8a:7f:30:3f:f3:0d: 3f:0b:1d:aa:5d:6f:91:e8:45:e6:b7:68:13:cf:c2: ce:68:7a:bc:5a:bb:dc:ac:f5:ab:4f:4a:4d:3d:ef: 58:f2:55:37:c5:16:83:b2:52:18:af:0d:fa:55:c0: a0:4a:ef:fa:6c:82:b5:c8:54:c2:03:b2:e3:c4:b5: 30:a1:80:70:e4:d9:71:06:62:79:7c:f0:14:4c:11: 0a:41:61:eb:f8:b4:1f:b0:19:e6:70:9e:ee:06:5d: b1:89:5a:f2:af:b9:3c:d8:98:59:a3:0f:63:1f:37: 07:b0:38:67:0c:d0:f4:10:27:18:3d:df:14:7e:fa: 69:82:a6:21:9a:26:3e:a4:fd:52:a5:b2:78:85:90: 07:f1:96:11:aa:1f:94:6a:4a:5a:aa:e7:69:1d:f5: 43:8e:84:be:4e:90:46:46:80:94:09:bf:92:f2:15: b1:5f:26:66:7f:a8:d4:36:19:00:d0:9a:b2:e0:f3: f0:30:37:d7:1a:1b:d9:94:f4:89:3e:45:44:fd:24: 1f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E1:34:53:A3:E7:A4:4D:8D:96:58:F5:58:42:00:0D:FA:64:66:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a4d6b1-6aa8-317b-a973-11ce5c35d169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e5:19:db:b5:bc:81:4c:9f:a5:54:9a:34:9f:6b:8d:b0:dc: 48:ce:d3:93:d0:c1:a4:ab:8d:b6:6d:ee:13:1f:c6:a5:65:fd: 61:39:75:12:2f:79:e7:d5:ea:36:cc:54:84:c1:37:c3:27:20: fa:64:fc:8e:3b:8b:7f:f9:bd:bf:91:bd:67:2d:b3:6f:3e:d7: e8:da:74:a0:1e:ee:d9:cd:d7:f0:47:db:f0:79:67:b2:bd:81: 37:47:57:99:ee:9c:19:4d:03:a1:ce:e1:66:cd:47:3c:36:52: c0:39:b8:f1:de:33:e1:d6:a8:1b:27:8b:e1:22:11:b9:07:44: 8f:e0:a6:ce:5e:3d:99:d8:60:66:94:03:5b:cc:59:f2:00:68: 63:4e:8f:91:01:cb:94:64:b9:dc:98:2d:4a:41:96:bc:01:83: f5:5d:44:f2:e3:ea:27:e9:01:07:47:77:a4:4a:88:44:69:e9: 38:ef:dd:49:10:01:68:b6:f3:1b:c3:37:fa:a2:b3:f1:7f:0c: fc:ee:b8:79:5a:43:b5:f4:44:e4:77:04:b7:0b:2d:29:4a:23: fe:44:cd:6f:78:0d:42:7f:02:57:4d:46:f9:39:97:b9:7d:91: f3:50:f0:43:04:e1:c8:cb:0a:e9:af:8f:26:59:11:47:c0:a8: 25:53:f7:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQlv9EEhp8a5I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZWMyNzRhZGQtMjkzNS00ZGY2LTgzODYtMDVhODBlYmU1N2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQPcclFBCyGXgohRvA3/LYOSxobYrpgsB9ri kKRrOcOQYSfejp0G2Nh2Z6JMq1QySi1UkG2KfzA/8w0/Cx2qXW+R6EXmt2gTz8LO aHq8WrvcrPWrT0pNPe9Y8lU3xRaDslIYrw36VcCgSu/6bIK1yFTCA7LjxLUwoYBw 5NlxBmJ5fPAUTBEKQWHr+LQfsBnmcJ7uBl2xiVryr7k82JhZow9jHzcHsDhnDND0 ECcYPd8UfvppgqYhmiY+pP1SpbJ4hZAH8ZYRqh+UakpaqudpHfVDjoS+TpBGRoCU Cb+S8hWxXyZmf6jUNhkA0Jqy4PPwMDfXGhvZlPSJPkVE/SQfEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjhNFOj56RNjZZY9VhCAA36ZGbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFhNGQ2YjEtNmFhOC0z MTdiLWE5NzMtMTFjZTVjMzVkMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3lGdu1vIFMn6VUmjSfa42w3EjO05PQwaSrjbZt7hMfxqVl/WE5dRIv eefV6jbMVITBN8MnIPpk/I47i3/5vb+RvWcts28+1+jadKAe7tnN1/BH2/B5Z7K9 gTdHV5nunBlNA6HO4WbNRzw2UsA5uPHeM+HWqBsni+EiEbkHRI/gps5ePZnYYGaU A1vMWfIAaGNOj5EBy5RkudyYLUpBlrwBg/VdRPLj6ifpAQdHd6RKiERp6Tjv3UkQ AWi28xvDN/qis/F/DPzuuHlaQ7X0ROR3BLcLLSlKI/5EzW94DUJ/AldNRvk5l7l9 kfNQ8EME4cjLCumvjyZZEUfAqCVT99Q= -----END CERTIFICATE-----Generated at Thu Jul 23 23:20:01 2026 by rpki-client