$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13c1c528-ca81-3336-bf4a-20442d6b685e.roa File: 13c1c528-ca81-3336-bf4a-20442d6b685e.roa (raw, json) Hash identifier: qx7lj+r+IH6HNqG5u/bsKLgN/Giiz7HsRxze1Helv58= Subject key identifier: 22:88:D0:84:79:94:8C:2C:7A:86:A8:BD:16:2A:91:96:FB:BC:4C:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EFCACB6E50FC0AD8C3718C8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13c1c528-ca81-3336-bf4a-20442d6b685e.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 7029 IP address blocks: 207.155.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:b6:e5:0f:c0:ad:8c:37:18:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=0ef22c16-0c13-4275-be25-0575fb421179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:b3:a2:66:19:53:c1:95:c8:2e:0f:05:0b: 4c:d1:77:cd:62:0f:60:67:a0:cc:c0:f3:6a:7f:78: 9d:41:c0:c6:02:14:f7:5b:eb:7a:91:d6:7f:b0:93: 71:63:c6:8c:55:05:59:89:70:79:95:4b:a2:06:17: a2:c3:30:7c:e6:39:a2:f8:e2:16:24:e0:d0:2d:34: 05:9d:a9:71:fc:dc:ff:ad:c1:0f:81:0f:b0:8f:54: 72:f3:95:3c:36:5a:c4:16:45:41:1b:24:f9:2a:1f: 41:80:3e:28:7d:67:06:5c:29:3e:cd:29:88:91:a4: f3:9e:30:70:d6:91:d2:22:10:9b:cc:b4:03:90:4d: 1b:40:9d:6f:73:9c:38:64:4f:7d:da:f8:27:05:9c: 63:dd:26:4e:60:40:22:29:bf:d2:9e:64:d2:34:a2: 6e:38:ff:41:82:64:60:25:b6:86:87:f1:0f:c1:1d: b0:6c:42:60:59:a3:fc:34:fc:fd:0a:1f:54:57:57: 6d:c6:b1:95:70:7a:9f:bc:a4:e2:2d:9d:dd:9b:11: f8:a3:03:79:5d:df:9e:90:92:c6:ce:76:75:39:b3: f8:c6:61:7d:f8:bc:d8:69:f6:c9:48:52:78:78:7c: 65:48:8d:ec:bf:35:d9:c7:04:93:05:69:ab:c7:f9: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:88:D0:84:79:94:8C:2C:7A:86:A8:BD:16:2A:91:96:FB:BC:4C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13c1c528-ca81-3336-bf4a-20442d6b685e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.155.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c2:b3:37:35:25:17:63:d6:c5:a7:42:36:57:84:00:7e:36: 52:64:18:32:7e:dc:51:5c:96:b2:20:bc:92:c9:2a:d5:fc:c3: f6:05:6a:8a:9a:82:6e:c1:3d:23:72:1a:3c:08:d0:b8:8a:08: c9:34:81:55:c9:c7:c4:65:4c:58:b1:82:f4:21:bf:4e:9a:ca: a4:f1:ce:9c:a4:63:77:7e:0e:39:ce:1c:af:d8:49:30:bf:41: 57:d1:c7:b7:a1:99:e9:e4:6c:93:1a:be:62:52:f3:07:d2:1b: be:eb:fd:18:72:1d:3b:9f:ba:57:ed:6c:23:82:13:ca:bf:5d: 25:91:56:b6:c9:0d:2b:5c:76:d2:41:d1:3d:71:a2:e2:74:b3: 91:88:2b:03:d8:c0:2d:87:ff:92:07:f2:80:13:ed:b3:a9:ed: db:eb:ca:24:73:59:70:46:db:9c:89:87:a9:a2:a0:16:bd:7d: d4:4b:84:a1:6c:10:4c:d9:f1:e1:e6:fd:88:e6:28:0b:4c:e2: cf:19:99:76:2b:29:19:c5:4c:cd:58:27:12:56:1d:cd:8e:aa: e5:c6:e2:20:f3:24:7e:94:e3:62:90:7f:59:49:30:be:3b:df: 38:0f:98:bb:f9:46:60:4e:9e:fe:e0:51:a8:2a:d3:8c:ba:f4: 7b:eb:60:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rLblD8CtjDcYyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MGVmMjJjMTYtMGMxMy00Mjc1LWJlMjUtMDU3NWZiNDIxMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaqzomYZU8GVyC4PBQtM0XfNYg9gZ6DMwPNq f3idQcDGAhT3W+t6kdZ/sJNxY8aMVQVZiXB5lUuiBheiwzB85jmi+OIWJODQLTQF nalx/Nz/rcEPgQ+wj1Ry85U8NlrEFkVBGyT5Kh9BgD4ofWcGXCk+zSmIkaTznjBw 1pHSIhCbzLQDkE0bQJ1vc5w4ZE992vgnBZxj3SZOYEAiKb/SnmTSNKJuOP9BgmRg JbaGh/EPwR2wbEJgWaP8NPz9Ch9UV1dtxrGVcHqfvKTiLZ3dmxH4owN5Xd+ekJLG znZ1ObP4xmF9+LzYafbJSFJ4eHxlSI3svzXZxwSTBWmrx/mm9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKI0IR5lIwseoaovRYqkZb7vExhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNjMWM1MjgtY2E4MS0z MzM2LWJmNGEtMjA0NDJkNmI2ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz5tWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDCszc1JRdj1sWnQjZXhAB+NlJkGDJ+3FFclrIgvJLJKtX8w/YFaoqa gm7BPSNyGjwI0LiKCMk0gVXJx8RlTFixgvQhv06ayqTxzpykY3d+DjnOHK/YSTC/ QVfRx7ehmenkbJMavmJS8wfSG77r/RhyHTufulftbCOCE8q/XSWRVrbJDStcdtJB 0T1xouJ0s5GIKwPYwC2H/5IH8oAT7bOp7dvryiRzWXBG25yJh6mioBa9fdRLhKFs EEzZ8eHm/YjmKAtM4s8ZmXYrKRnFTM1YJxJWHc2OquXG4iDzJH6U42KQf1lJML47 3zgPmLv5RmBOnv7gUagq04y69HvrYBs= -----END CERTIFICATE-----Generated at Sun Sep 20 15:42:35 2026 by rpki-client