$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0fbd589-5567-33b4-880b-3db8cdd5df13.roa File: a0fbd589-5567-33b4-880b-3db8cdd5df13.roa (raw, json) Hash identifier: 5KnSobGW6qE1+FOABvh39lI9LfeGVp/gqd55s2owUkA= Subject key identifier: 5D:6E:E5:FC:2C:EF:45:D3:46:A2:51:95:E5:34:39:BA:29:58:3F:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA17A8A307C3081CE5882C820 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0fbd589-5567-33b4-880b-3db8cdd5df13.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 33393 IP address blocks: 66.16.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:8a:30:7c:30:81:ce:58:82:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=cbe9b832-6506-4f01-9c06-7fe9f1721ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:2d:f7:9c:26:b8:f9:9c:f5:87:0b:f0:dc: 10:8e:f1:07:fb:b1:44:ab:9f:a2:20:90:6f:72:f4: ea:b8:00:02:ba:93:eb:52:e6:99:7a:64:a9:1d:15: ba:97:15:c2:b1:0a:c7:cf:c8:e5:29:b6:b5:9e:85: 7b:dc:e7:f8:d0:bb:b1:53:66:17:56:2c:4e:16:77: 0b:f6:8a:45:4c:e7:82:f2:e6:26:c3:6d:96:40:cd: b7:c9:8b:01:95:04:4d:f9:d5:45:44:62:83:80:f4: 21:d1:49:6c:a2:9c:84:44:ec:4d:e6:76:c0:31:aa: 9a:f1:85:af:45:0c:59:9b:e9:51:e0:7e:e4:10:59: ee:ee:6e:e4:1b:b8:da:ee:c1:bb:c5:ca:34:5f:c9: e7:e4:16:7a:d2:e0:35:5b:f0:4a:02:6e:d2:25:ab: b1:03:10:ee:a9:1b:bf:4d:86:06:f7:13:da:31:c5: 4c:dd:e5:d5:5f:f6:eb:29:e0:bd:1c:d9:da:13:1d: 55:b7:53:d7:c5:ab:dc:a2:e6:fa:78:0c:66:09:cf: 28:a1:57:d2:82:b9:87:3b:bf:0b:43:21:8a:86:87: ab:72:27:93:d5:65:0a:fa:86:a0:ab:b7:d0:48:97: a5:7e:6a:d0:92:7b:8f:4c:fe:e2:16:99:e7:a9:40: 60:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:E5:FC:2C:EF:45:D3:46:A2:51:95:E5:34:39:BA:29:58:3F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0fbd589-5567-33b4-880b-3db8cdd5df13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.16.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:af:65:45:7e:d6:45:e7:41:39:18:96:90:83:83:55:08:49: 55:7e:83:b5:fe:0d:fd:2e:c9:ef:08:e4:9f:d4:a1:da:84:2b: dc:13:6f:9d:22:f1:ce:fa:bb:c4:f8:f5:9c:51:4c:05:f2:50: 80:8c:ea:fd:7a:5f:40:28:d2:f5:ff:6d:e2:ec:49:3f:87:f4: f1:eb:a0:1b:cf:16:46:e7:67:6a:66:63:04:30:18:cf:51:17: 39:48:c7:cf:f6:72:14:53:c0:36:6c:f4:67:20:bd:d9:0a:3f: fb:87:64:2f:ac:b2:07:33:fc:f8:f1:95:e3:47:67:bc:32:40: 64:a6:2f:57:39:37:c6:11:5f:e4:7d:84:20:b8:0a:70:c1:5c: a2:20:6e:a3:a0:7e:f6:46:e4:7d:5c:93:d9:67:af:83:a9:e2: 86:ea:a2:d4:76:32:0e:ec:18:93:06:67:22:d9:b4:93:0a:8a: 97:97:f6:fd:42:2b:40:9d:f0:4b:7d:27:08:ea:44:22:ee:5a: 00:30:7f:62:67:06:dc:a1:8c:98:d0:0f:04:18:36:92:96:b0: f0:9a:f2:31:68:34:ac:9d:3e:e2:d8:f3:ed:18:9f:4c:41:41: 50:fe:af:96:3a:85:18:0e:00:ef:de:42:89:d8:cb:3c:e0:f8: e3:b6:e4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heoowfDCBzliCyCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk Y2JlOWI4MzItNjUwNi00ZjAxLTljMDYtN2ZlOWYxNzIxZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokMt95wmuPmc9YcL8NwQjvEH+7FEq5+iIJBv cvTquAACupPrUuaZemSpHRW6lxXCsQrHz8jlKba1noV73Of40LuxU2YXVixOFncL 9opFTOeC8uYmw22WQM23yYsBlQRN+dVFRGKDgPQh0UlsopyEROxN5nbAMaqa8YWv RQxZm+lR4H7kEFnu7m7kG7ja7sG7xco0X8nn5BZ60uA1W/BKAm7SJauxAxDuqRu/ TYYG9xPaMcVM3eXVX/brKeC9HNnaEx1Vt1PXxavcoub6eAxmCc8ooVfSgrmHO78L QyGKhoercieT1WUK+oagq7fQSJelfmrQknuPTP7iFpnnqUBgAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1u5fws70XTRqJRleU0ObopWD8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTBmYmQ1ODktNTU2Ny0z M2I0LTg4MGItM2RiOGNkZDVkZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWvZUV+1kXnQTkYlpCDg1UISVV+g7X+Df0uye8I5J/UodqEK9wTb50i 8c76u8T49ZxRTAXyUICM6v16X0Ao0vX/beLsST+H9PHroBvPFkbnZ2pmYwQwGM9R FzlIx8/2chRTwDZs9GcgvdkKP/uHZC+ssgcz/PjxleNHZ7wyQGSmL1c5N8YRX+R9 hCC4CnDBXKIgbqOgfvZG5H1ck9lnr4Op4obqotR2Mg7sGJMGZyLZtJMKipeX9v1C K0Cd8Et9JwjqRCLuWgAwf2JnBtyhjJjQDwQYNpKWsPCa8jFoNKydPuLY8+0Yn0xB QVD+r5Y6hRgOAO/eQonYyzzg+OO25KE= -----END CERTIFICATE-----Generated at Tue Jul 28 21:02:32 2026 by rpki-client