$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa File: e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa (raw, json) Hash identifier: pq3OEw+0x0JU2VdkLWugnCC2CMo2DGgIuURI8B0eolQ= Subject key identifier: 09:A4:02:19:22:F1:6E:DA:37:D3:0D:D4:B7:D9:E2:BA:BC:1B:27:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E97B50AE117AA2294F01B5240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 7029 IP address blocks: 173.187.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0a:e1:17:aa:22:94:f0:1b:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=23c3dd01-a22a-42b5-8ac0-6b405d80e5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:f2:2a:82:a0:28:16:74:a6:00:6d:a1:bc: e1:ec:d0:d3:24:fa:bc:eb:7a:f0:81:ce:09:aa:7d: b0:53:39:77:67:cd:16:32:4c:12:99:b5:f1:07:98: 3c:7d:3e:83:bc:a0:81:68:59:d5:73:aa:e3:c8:96: 5a:01:69:30:48:19:51:24:bd:00:1a:7f:4e:9d:12: 0a:03:3b:c8:4e:40:6b:07:52:16:24:97:0d:5e:c3: 76:d9:38:27:5d:37:e2:26:e0:7e:ba:61:05:79:87: da:bf:05:80:b4:3f:27:15:e3:4b:18:07:e5:3c:8d: ba:d2:64:d1:66:c3:84:ce:9d:fe:c3:7f:ab:b7:5f: e7:4c:66:1f:17:74:0c:ea:a7:d0:00:e1:49:cb:57: e8:62:fa:04:ad:97:7d:c8:70:a1:40:1d:db:36:06: 5d:bc:43:83:73:40:4e:27:b4:e7:d4:7a:84:3d:e8: 6e:dd:5c:f0:1b:79:24:91:c2:25:32:d7:9e:33:9e: be:93:64:e9:62:f9:26:30:f9:1a:95:13:d9:a3:31: 03:62:13:85:9d:b0:da:a2:ae:97:f6:b5:b2:f5:a7: ed:32:d8:fc:4c:27:fa:26:79:35:13:ec:10:80:2f: 97:a2:45:bc:62:95:cb:0d:3c:c4:e2:73:ff:c9:77: 2a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A4:02:19:22:F1:6E:DA:37:D3:0D:D4:B7:D9:E2:BA:BC:1B:27:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e19ec4-5d27-3935-8928-71c90f78d2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4e:74:8e:99:fa:d2:6b:1c:75:7f:9f:e6:9d:8d:d2:c0:1d: a6:71:e2:8a:72:69:b4:ad:de:44:9c:80:97:35:71:8b:bb:50: 02:fd:c7:71:0f:c8:46:5e:83:92:5b:ce:e4:51:8b:ee:cd:f4: 49:f6:c8:21:a5:43:72:e0:fc:d9:79:72:a2:2e:68:6a:ab:0b: 8b:3a:f9:20:86:60:a5:33:c7:b5:99:a9:2f:c9:82:38:6b:32: e2:5b:c8:45:8a:d6:cc:ae:58:72:f8:03:30:1d:50:da:f5:bf: 65:dd:c2:6a:0e:4f:f0:47:68:13:ab:54:f5:6c:a8:88:16:af: d9:46:2a:fd:04:eb:fc:fb:39:df:4c:85:d5:1e:63:59:4b:15: 41:79:69:11:f2:5f:3d:e7:58:24:93:f8:6e:ad:a2:91:d1:27: a7:60:8c:48:b2:db:ba:fa:57:93:9b:31:87:f6:55:57:a1:eb: 1e:ce:19:89:ec:4e:1b:5a:0d:56:2a:8d:05:54:b2:d8:cc:11: ed:48:ed:40:0d:b5:41:3a:e4:26:11:e3:2a:de:5c:d0:46:b4: 15:56:90:92:03:da:dc:c9:76:48:3f:f6:9f:f0:6a:18:7b:f0: 3f:17:ba:92:7d:73:70:b4:bd:04:a7:9e:84:ba:38:71:67:1f: 07:1f:0b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQrhF6oilPAbUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk MjNjM2RkMDEtYTIyYS00MmI1LThhYzAtNmI0MDVkODBlNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUnyKoKgKBZ0pgBtobzh7NDTJPq863rwgc4J qn2wUzl3Z80WMkwSmbXxB5g8fT6DvKCBaFnVc6rjyJZaAWkwSBlRJL0AGn9OnRIK AzvITkBrB1IWJJcNXsN22TgnXTfiJuB+umEFeYfavwWAtD8nFeNLGAflPI260mTR ZsOEzp3+w3+rt1/nTGYfF3QM6qfQAOFJy1foYvoErZd9yHChQB3bNgZdvEODc0BO J7Tn1HqEPehu3VzwG3kkkcIlMteeM56+k2TpYvkmMPkalRPZozEDYhOFnbDaoq6X 9rWy9aftMtj8TCf6Jnk1E+wQgC+XokW8YpXLDTzE4nP/yXcqawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmkAhki8W7aN9MN1LfZ4rq8GyfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTVlMTllYzQtNWQyNy0z OTM1LTg5MjgtNzFjOTBmNzhkMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBOdI6Z+tJrHHV/n+adjdLAHaZx4opyabSt3kScgJc1cYu7UAL9x3EP yEZeg5JbzuRRi+7N9En2yCGlQ3Lg/Nl5cqIuaGqrC4s6+SCGYKUzx7WZqS/Jgjhr MuJbyEWK1syuWHL4AzAdUNr1v2XdwmoOT/BHaBOrVPVsqIgWr9lGKv0E6/z7Od9M hdUeY1lLFUF5aRHyXz3nWCST+G6topHRJ6dgjEiy27r6V5ObMYf2VVeh6x7OGYns ThtaDVYqjQVUstjMEe1I7UANtUE65CYR4yreXNBGtBVWkJID2tzJdkg/9p/wahh7 8D8XupJ9c3C0vQSnnoS6OHFnHwcfCwA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:26:28 2026 by rpki-client