$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1886a2e5-5c93-31c0-b9c9-eece8dfbccf4.roa File: 1886a2e5-5c93-31c0-b9c9-eece8dfbccf4.roa (raw, json) Hash identifier: t1gkZd4EIb8/xxEOaMQBOZesMBSV/+CJ52tKvipxIC0= Subject key identifier: 64:C1:63:15:AD:F3:16:7D:E6:7F:DC:82:C6:84:CF:3B:4E:D8:D7:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78FADB7D5F176331450CB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1886a2e5-5c93-31c0-b9c9-eece8dfbccf4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 173.189.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:ad:b7:d5:f1:76:33:14:50:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1b03dc85-9f51-47f0-bdf2-232f6d1ee279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:48:2e:4d:6e:67:99:c2:a1:ea:59:52:6d: ae:62:22:d4:7c:43:d9:88:4f:b9:49:f9:b9:92:13: 93:a1:62:e8:ae:c5:24:92:52:d0:c1:a7:ce:8c:6e: 48:75:fe:13:04:f0:4e:f2:ed:9c:e1:02:fb:a1:de: 89:34:6e:f3:de:fd:0a:79:73:df:f9:dc:9c:2d:34: 46:2b:df:db:e6:0e:4e:1f:52:be:1c:c1:cd:6f:0d: c5:8d:f7:df:ef:86:73:fd:44:3a:62:e1:5f:0a:50: 88:37:93:ee:e0:f4:d8:6b:4d:fa:dd:d0:3b:4f:bf: 74:9a:f8:70:cf:64:34:75:c7:4d:4d:42:d8:6a:28: 13:34:71:ba:ce:42:74:e1:f9:f8:e8:94:7a:8e:1f: c9:78:24:21:d3:d5:2e:c4:11:cf:27:60:cb:70:06: b1:ad:4b:90:cf:8a:eb:96:47:1c:de:f6:37:c1:0a: 55:70:1e:5b:35:d9:96:81:6c:b9:64:9f:64:88:8a: 59:3f:3b:11:89:e6:a2:86:ea:79:8d:5a:c7:8f:a1: 19:b0:8c:2a:89:fc:58:1f:52:31:08:ce:6a:9b:f4: f8:7f:9c:1d:ce:dd:fb:f9:40:7f:98:5f:36:ad:89: b1:14:58:39:7c:51:f1:c4:bf:45:ba:03:a4:e9:97: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C1:63:15:AD:F3:16:7D:E6:7F:DC:82:C6:84:CF:3B:4E:D8:D7:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1886a2e5-5c93-31c0-b9c9-eece8dfbccf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:67:2a:b5:52:ec:cb:00:9e:24:53:f2:6e:6b:85:20:23:c6: 76:63:88:64:12:46:83:e0:75:32:35:03:39:21:8f:6a:49:40: a2:2f:ca:1e:67:37:65:93:4f:d0:81:94:33:3e:a7:09:f9:ce: a1:17:2a:69:ad:3e:94:09:b3:36:c0:fc:d0:a0:b4:8c:f2:75: 24:2e:3e:49:ab:61:09:8a:84:3a:89:14:c4:3f:ae:03:e4:80: 81:5f:6c:64:fe:09:74:05:4d:e8:e3:ce:b4:27:81:48:9e:a3: b0:ce:ec:a8:f9:8b:0c:87:b4:b6:7e:76:a2:40:5f:7d:6b:93: 61:68:d5:30:9b:34:ca:97:90:02:1e:77:07:77:3c:58:8f:31: 9c:a6:59:8d:e6:f3:8f:91:e1:41:23:40:3c:de:34:c8:cc:bd: b9:34:09:17:77:3c:81:35:38:3c:16:cd:4e:7f:c4:88:08:48: 1e:9f:6b:a5:b8:f3:bb:ba:86:67:92:71:a4:d1:10:f9:5f:13: 24:33:3b:33:b7:e1:79:06:ea:85:79:69:df:ba:2c:1f:63:fe: 81:68:4e:e0:74:77:09:4c:61:b1:df:65:0b:5a:d7:65:2f:6f: 6b:3b:b8:ea:77:13:90:76:16:f1:4b:77:4c:be:a7:14:fb:02: 71:95:9a:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj6231fF2MxRQywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWIwM2RjODUtOWY1MS00N2YwLWJkZjItMjMyZjZkMWVlMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU1ILk1uZ5nCoepZUm2uYiLUfEPZiE+5Sfm5 khOToWLorsUkklLQwafOjG5Idf4TBPBO8u2c4QL7od6JNG7z3v0KeXPf+dycLTRG K9/b5g5OH1K+HMHNbw3Fjfff74Zz/UQ6YuFfClCIN5Pu4PTYa0363dA7T790mvhw z2Q0dcdNTULYaigTNHG6zkJ04fn46JR6jh/JeCQh09UuxBHPJ2DLcAaxrUuQz4rr lkcc3vY3wQpVcB5bNdmWgWy5ZJ9kiIpZPzsRieaihup5jVrHj6EZsIwqifxYH1Ix CM5qm/T4f5wdzt37+UB/mF82rYmxFFg5fFHxxL9FugOk6ZcjbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTBYxWt8xZ95n/cgsaEzztO2NcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTg4NmEyZTUtNWM5My0z MWMwLWI5YzktZWVjZThkZmJjY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItnKrVS7MsAniRT8m5rhSAjxnZjiGQSRoPgdTI1Azkhj2pJQKIvyh5n N2WTT9CBlDM+pwn5zqEXKmmtPpQJszbA/NCgtIzydSQuPkmrYQmKhDqJFMQ/rgPk gIFfbGT+CXQFTejjzrQngUieo7DO7Kj5iwyHtLZ+dqJAX31rk2Fo1TCbNMqXkAIe dwd3PFiPMZymWY3m84+R4UEjQDzeNMjMvbk0CRd3PIE1ODwWzU5/xIgISB6fa6W4 87u6hmeScaTREPlfEyQzOzO34XkG6oV5ad+6LB9j/oFoTuB0dwlMYbHfZQta12Uv b2s7uOp3E5B2FvFLd0y+pxT7AnGVmrM= -----END CERTIFICATE-----Generated at Wed Jul 29 06:56:10 2026 by rpki-client