$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/70c083d2-ef45-357f-be69-1a8b9600938d.roa File: 70c083d2-ef45-357f-be69-1a8b9600938d.roa (raw, json) Hash identifier: CaLZi/GQcg4uoBVtGuYvddBYOyMNl90KVazwOfjH/mM= Subject key identifier: 46:DD:6F:67:C3:CD:17:F1:9F:7B:01:79:35:EF:FB:38:A1:93:8E:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E9AE7F6C8C07165146FBC0860 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/70c083d2-ef45-357f-be69-1a8b9600938d.roa Signing time: Fri 24 Jul 2026 12:30:23 +0000 ROA not before: Fri 24 Jul 2026 12:30:23 +0000 ROA not after: Thu 22 Oct 2026 12:30:23 +0000 asID: 7029 IP address blocks: 173.189.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:e7:f6:c8:c0:71:65:14:6f:bc:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 12:30:23 2026 GMT Not After : Oct 22 12:30:23 2026 GMT Subject: CN=6a5ef007-24dc-459b-8802-f69936514c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:a3:6e:7b:4d:02:cb:86:da:14:90:b0:40: ad:11:18:e6:86:8a:15:72:a6:c6:12:55:5e:93:e1: 53:a5:67:a2:78:bf:43:20:b3:e4:a7:4e:c7:40:6a: f1:b9:d4:99:a2:37:cb:e7:2f:a8:63:6d:ce:3a:d3: 63:c5:06:b8:2a:78:d4:21:97:e7:65:ac:5b:94:35: f5:8c:57:7b:91:46:8c:58:34:45:bc:06:86:30:3a: 09:22:ca:4c:a9:07:fd:4e:3d:35:09:8c:e9:40:82: c5:6d:5c:ed:b1:4d:96:5d:0e:06:03:d7:d3:db:89: 7d:6d:94:c0:f4:91:17:a7:de:8a:36:e2:ba:75:5f: 45:97:d9:fa:f5:6d:64:c0:26:a8:da:fa:7d:63:c8: a9:ac:29:11:43:d9:e4:dd:ba:b9:a0:c0:4f:4d:bf: b8:02:a3:a6:b2:d2:30:6e:26:b1:d0:c4:1b:be:5c: 77:aa:37:c7:a9:02:18:2b:7b:72:e0:3b:0c:b3:48: ca:44:a7:c8:11:ff:cc:e2:d9:4c:00:84:b7:03:87: 86:54:c1:4f:ba:8c:8b:55:54:94:4c:b2:48:55:a5: 38:ca:22:83:0c:dd:42:7c:ed:2c:aa:c2:a1:d1:42: ae:90:f8:1a:a0:49:a4:77:28:47:80:1b:01:69:d8: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DD:6F:67:C3:CD:17:F1:9F:7B:01:79:35:EF:FB:38:A1:93:8E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/70c083d2-ef45-357f-be69-1a8b9600938d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:76:58:07:8c:3c:b4:dc:bd:2e:1a:76:09:0e:5f:d0:95:2f: a7:1f:02:bd:98:15:95:05:1b:45:af:cf:16:7d:80:f3:82:60: 69:cb:b1:59:1d:2f:6c:96:33:8f:b1:b4:e9:a6:c8:84:2b:c4: e0:ce:87:44:e9:3f:69:4c:c6:19:63:34:2c:30:ea:02:a3:06: cf:ad:b4:bc:9d:26:c5:62:4d:e7:04:38:cc:35:35:7a:4c:3c: c0:51:c6:ba:15:31:95:06:78:3d:2c:1f:00:0a:bd:9f:05:71: 84:55:e7:dd:ed:d7:b3:ac:f7:36:57:c0:92:46:b6:3c:20:fe: 6a:82:82:95:2d:8f:ad:f5:26:4c:af:0c:92:da:af:62:12:01: 73:02:71:56:9a:a3:02:0b:41:4c:2d:40:04:61:da:cb:0a:38: 08:99:6e:c6:6a:d4:f0:5a:0b:a8:d9:ea:4e:de:b7:89:e7:2a: e6:bf:c9:6e:ca:89:d6:3f:74:a6:f5:c1:50:9b:5b:b0:16:27: 10:43:8c:8e:17:20:8e:03:49:5b:43:b7:9f:42:08:16:89:4e: 54:56:a3:bc:76:ed:89:43:5a:84:d5:f3:81:7b:20:be:7e:ab: db:98:53:45:41:b4:ba:77:af:f6:08:f4:d4:45:ca:4c:7a:65: 87:ce:76:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6a5/bIwHFlFG+8CGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyNDEyMzAyM1oXDTI2MTAyMjEyMzAyM1owLzEtMCsGA1UEAxMk NmE1ZWYwMDctMjRkYy00NTliLTg4MDItZjY5OTM2NTE0YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubujbntNAsuG2hSQsECtERjmhooVcqbGElVe k+FTpWeieL9DILPkp07HQGrxudSZojfL5y+oY23OOtNjxQa4KnjUIZfnZaxblDX1 jFd7kUaMWDRFvAaGMDoJIspMqQf9Tj01CYzpQILFbVztsU2WXQ4GA9fT24l9bZTA 9JEXp96KNuK6dV9Fl9n69W1kwCao2vp9Y8iprCkRQ9nk3bq5oMBPTb+4AqOmstIw biax0MQbvlx3qjfHqQIYK3ty4DsMs0jKRKfIEf/M4tlMAIS3A4eGVMFPuoyLVVSU TLJIVaU4yiKDDN1CfO0sqsKh0UKukPgaoEmkdyhHgBsBadjQUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbdb2fDzRfxn3sBeTXv+zihk453MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzBjMDgzZDItZWY0NS0z NTdmLWJlNjktMWE4Yjk2MDA5MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF2WAeMPLTcvS4adgkOX9CVL6cfAr2YFZUFG0WvzxZ9gPOCYGnLsVkd L2yWM4+xtOmmyIQrxODOh0TpP2lMxhljNCww6gKjBs+ttLydJsViTecEOMw1NXpM PMBRxroVMZUGeD0sHwAKvZ8FcYRV593t17Os9zZXwJJGtjwg/mqCgpUtj631Jkyv DJLar2ISAXMCcVaaowILQUwtQARh2ssKOAiZbsZq1PBaC6jZ6k7et4nnKua/yW7K idY/dKb1wVCbW7AWJxBDjI4XII4DSVtDt59CCBaJTlRWo7x27YlDWoTV84F7IL5+ q9uYU0VBtLp3r/YI9NRFykx6ZYfOdvE= -----END CERTIFICATE-----Generated at Tue Jul 28 18:28:33 2026 by rpki-client