$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abd29bd5-d7af-3993-9a25-7daa6b570ac6.roa File: abd29bd5-d7af-3993-9a25-7daa6b570ac6.roa (raw, json) Hash identifier: pF3/1r77ITBSx9tC19lMFO1qXYslr3nAz0tPhlZvYRU= Subject key identifier: 5F:5A:82:CC:F3:3F:AF:8E:67:F0:B1:93:B1:9B:10:82:E5:67:5E:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F02423132E6E087B9847A7C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abd29bd5-d7af-3993-9a25-7daa6b570ac6.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 173.191.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:31:32:e6:e0:87:b9:84:7a:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=3121c771-543a-407d-9b80-d98040042f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:66:6a:30:ef:29:9d:9b:25:be:9a:84:97: 14:b7:ef:00:07:ce:f9:22:b1:2b:59:ed:ac:f3:b0: 46:6e:c4:e9:25:6d:7f:ba:b6:82:0b:e9:2d:48:5e: 8c:87:8c:a5:36:5c:e5:4b:e3:65:85:c1:7f:f3:6a: 2e:7d:c4:df:48:4a:43:42:3d:24:e9:a1:ca:53:4a: ec:3c:93:67:d6:2e:5a:0d:73:ac:7a:2a:6a:88:33: 68:26:e4:06:5d:6c:fb:07:9d:2a:1e:98:8f:f1:4f: 73:a6:97:09:34:9e:cf:01:49:7f:bf:1c:29:99:ed: a0:10:47:ff:e9:7e:5f:bb:b6:86:a2:e0:af:a4:a8: 32:a1:1b:32:89:73:56:b3:54:9b:3a:20:2a:b8:af: e2:0a:27:51:e8:4c:8b:8e:02:39:59:c4:22:35:69: 81:53:8a:7e:4b:da:9a:91:cc:46:2b:6a:fe:92:ca: 0a:15:22:f3:c5:a7:ef:62:0e:d1:46:62:d5:9a:5e: eb:94:f3:f9:aa:16:53:73:d9:0e:ef:3c:7e:11:a8: 2a:50:1e:62:6e:a9:f2:b1:33:c2:00:1c:45:99:57: b3:61:6e:6d:48:25:4c:50:7b:ce:b7:cc:92:5a:59: 47:c1:9c:4d:eb:3f:73:d5:85:3a:c3:94:d5:88:27: 79:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5A:82:CC:F3:3F:AF:8E:67:F0:B1:93:B1:9B:10:82:E5:67:5E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abd29bd5-d7af-3993-9a25-7daa6b570ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7b:f1:5c:83:dd:88:b6:02:bc:0b:ce:dc:51:bb:db:83:76: 48:49:a8:79:6c:35:07:dd:fd:1f:7e:e8:3c:8c:7e:f2:25:4d: 3d:77:2e:a8:93:70:a7:2e:63:4b:1a:ad:a5:d1:e1:47:ec:bd: 25:aa:68:15:cc:d2:ad:ef:b4:32:30:45:90:4e:5c:39:a5:d9: e8:ff:d4:ba:7a:09:2d:2b:d1:91:dd:35:e3:00:63:0d:ac:2f: 8e:44:28:2f:06:ff:3a:2e:21:5e:9e:8b:45:34:dd:3a:dd:7f: 65:d3:b2:56:6f:0f:82:c5:17:94:ae:8a:d8:44:95:ad:8c:f2: fe:7d:11:94:e8:d4:2b:03:c4:ed:da:53:8c:4a:89:21:f9:4f: b1:b8:9c:0e:4e:5d:c8:8c:60:4c:79:9b:44:3a:a0:b4:9f:15: 24:22:83:8c:a6:ad:a6:15:40:9f:26:9a:50:84:14:03:73:9f: c7:89:40:99:2c:99:7b:11:87:30:d6:d9:c1:78:ad:5d:6e:8c: 88:e3:6c:ab:4a:00:1d:d4:aa:fe:77:1d:24:d5:a2:da:26:25: 74:01:2a:fc:9f:45:e8:9f:59:95:b6:b3:a4:39:f4:7f:a2:82: 8c:4f:18:ec:4d:d4:0c:5c:8d:d1:59:12:f0:2a:6c:ad:05:ec: 1d:29:7c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjEy5uCHuYR6fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MzEyMWM3NzEtNTQzYS00MDdkLTliODAtZDk4MDQwMDQyZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk45majDvKZ2bJb6ahJcUt+8AB875IrErWe2s 87BGbsTpJW1/uraCC+ktSF6Mh4ylNlzlS+NlhcF/82oufcTfSEpDQj0k6aHKU0rs PJNn1i5aDXOseipqiDNoJuQGXWz7B50qHpiP8U9zppcJNJ7PAUl/vxwpme2gEEf/ 6X5fu7aGouCvpKgyoRsyiXNWs1SbOiAquK/iCidR6EyLjgI5WcQiNWmBU4p+S9qa kcxGK2r+ksoKFSLzxafvYg7RRmLVml7rlPP5qhZTc9kO7zx+EagqUB5ibqnysTPC ABxFmVezYW5tSCVMUHvOt8ySWllHwZxN6z9z1YU6w5TViCd5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9agszzP6+OZ/Cxk7GbEILlZ146MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWJkMjliZDUtZDdhZi0z OTkzLTlhMjUtN2RhYTZiNTcwYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN78VyD3Yi2ArwLztxRu9uDdkhJqHlsNQfd/R9+6DyMfvIlTT13LqiT cKcuY0saraXR4UfsvSWqaBXM0q3vtDIwRZBOXDml2ej/1Lp6CS0r0ZHdNeMAYw2s L45EKC8G/zouIV6ei0U03Trdf2XTslZvD4LFF5SuithEla2M8v59EZTo1CsDxO3a U4xKiSH5T7G4nA5OXciMYEx5m0Q6oLSfFSQig4ymraYVQJ8mmlCEFANzn8eJQJks mXsRhzDW2cF4rV1ujIjjbKtKAB3Uqv53HSTVotomJXQBKvyfReifWZW2s6Q59H+i goxPGOxN1AxcjdFZEvAqbK0F7B0pfEM= -----END CERTIFICATE-----Generated at Sat Sep 26 09:44:32 2026 by rpki-client