$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aee77af3-ff0c-38fa-8e21-a10b1215e185.roa File: aee77af3-ff0c-38fa-8e21-a10b1215e185.roa (raw, json) Hash identifier: Kkvk9fD1/H5TH96aU1u44KUvc/Atnfl55aJQckMHM8c= Subject key identifier: 01:C0:33:66:7C:FF:CE:43:B0:91:21:7A:C7:22:1E:D8:FF:69:FE:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F11ABC1CA31B8AF021D10A180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aee77af3-ff0c-38fa-8e21-a10b1215e185.roa Signing time: Sat 05 Sep 2026 01:30:16 +0000 ROA not before: Sat 05 Sep 2026 01:30:16 +0000 ROA not after: Fri 04 Dec 2026 02:30:16 +0000 asID: 7029 IP address blocks: 173.213.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:ab:c1:ca:31:b8:af:02:1d:10:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:30:16 2026 GMT Not After : Dec 4 02:30:16 2026 GMT Subject: CN=2cae841c-2481-47e0-bfc5-366b67aca0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:99:67:fc:88:9f:c4:1e:b5:6b:b4:92:db:04: ba:d5:48:5d:00:74:ae:85:fa:93:28:28:6c:fa:c5: e5:5e:9c:87:66:d6:78:05:e7:77:7f:34:4e:58:81: b8:0e:f4:6e:59:80:f4:3d:50:6b:2b:2e:4b:39:85: dd:4d:00:a9:bf:4a:83:a8:d4:e7:39:6f:c8:c3:59: 3d:0e:05:18:d2:1d:e5:6e:28:c5:27:33:7a:13:8a: 71:eb:ec:71:8a:f3:24:45:d4:f1:96:65:a2:47:c1: 85:cb:6a:9b:37:a0:61:28:93:b5:b4:4b:75:4d:a1: a7:2e:68:25:ff:ff:99:ef:7a:17:a6:41:52:85:ef: 49:5e:45:2b:aa:26:dd:c7:d5:21:96:26:cc:ff:6e: 5d:47:07:43:18:52:67:82:8c:f5:f7:f6:7a:95:18: 46:55:2a:1b:31:57:f3:cb:ac:15:04:56:55:90:23: b2:b3:6d:71:08:e9:03:f4:93:02:62:1b:a2:86:82: 48:06:9a:b7:9e:24:65:aa:24:5b:17:07:02:6e:d6: 37:cd:df:e5:c3:72:a0:52:4f:9e:fc:ea:8a:23:ac: bc:a7:e1:00:0d:0a:21:77:bc:63:48:f8:df:5c:d0: eb:88:61:58:6a:94:61:16:02:6c:bc:33:c8:ee:ec: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C0:33:66:7C:FF:CE:43:B0:91:21:7A:C7:22:1E:D8:FF:69:FE:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aee77af3-ff0c-38fa-8e21-a10b1215e185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7e:db:36:08:6f:c8:ef:7f:04:f6:8f:a3:dd:8c:23:87:59: 04:04:22:95:ad:e2:7c:71:12:a7:d3:a0:2b:1b:d5:8f:56:89: 0c:b3:57:9c:8e:d9:ca:1c:0a:37:4d:f4:8d:d5:22:c8:4b:36: fe:01:27:4e:15:18:8c:b8:75:80:c3:9d:8f:2d:6c:ee:b5:da: c6:81:b3:64:89:74:38:63:6b:c0:58:02:29:17:59:c3:a8:fe: 66:85:80:18:a3:90:ce:f8:07:e2:98:ec:a8:a1:f0:28:e6:c0: 06:50:6e:2a:4a:e4:51:22:12:21:a4:8d:42:fe:2e:e8:5b:bf: 40:47:be:16:5b:4c:8b:5d:ff:06:22:52:39:c4:1c:45:68:36: 2d:1d:66:ff:4b:aa:5e:31:b2:05:c4:41:b4:68:25:b2:fc:88: c4:03:02:2b:8a:04:1a:86:51:08:12:be:d5:4d:7d:fc:52:b9: 56:eb:5a:b6:b4:c4:c3:e9:cf:03:2d:c1:75:3e:95:e4:e0:41: bd:f2:30:2b:34:8e:90:9d:fd:ff:47:e1:7e:ec:a3:c7:f6:ef: 9e:54:f4:4b:9c:6e:d6:1a:c6:0b:d7:7d:b3:6d:0e:10:52:92: 9e:d2:d1:73:2b:79:82:d7:65:f7:a2:3a:c5:19:c3:c2:a0:8d: 35:b7:c8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rq8HKMbivAh0QoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNTAxMzAxNloXDTI2MTIwNDAyMzAxNlowLzEtMCsGA1UEAxMk MmNhZTg0MWMtMjQ4MS00N2UwLWJmYzUtMzY2YjY3YWNhMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jln/IifxB61a7SS2wS61UhdAHSuhfqTKChs +sXlXpyHZtZ4Bed3fzROWIG4DvRuWYD0PVBrKy5LOYXdTQCpv0qDqNTnOW/Iw1k9 DgUY0h3lbijFJzN6E4px6+xxivMkRdTxlmWiR8GFy2qbN6BhKJO1tEt1TaGnLmgl //+Z73oXpkFShe9JXkUrqibdx9UhlibM/25dRwdDGFJngoz19/Z6lRhGVSobMVfz y6wVBFZVkCOys21xCOkD9JMCYhuihoJIBpq3niRlqiRbFwcCbtY3zd/lw3KgUk+e /OqKI6y8p+EADQohd7xjSPjfXNDriGFYapRhFgJsvDPI7uxYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHAM2Z8/85DsJEhesciHtj/af7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVlNzdhZjMtZmYwYy0z OGZhLThlMjEtYTEwYjEyMTVlMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx+2zYIb8jvfwT2j6PdjCOHWQQEIpWt4nxxEqfToCsb1Y9WiQyzV5yO 2cocCjdN9I3VIshLNv4BJ04VGIy4dYDDnY8tbO612saBs2SJdDhja8BYAikXWcOo /maFgBijkM74B+KY7Kih8CjmwAZQbipK5FEiEiGkjUL+Luhbv0BHvhZbTItd/wYi UjnEHEVoNi0dZv9Lql4xsgXEQbRoJbL8iMQDAiuKBBqGUQgSvtVNffxSuVbrWra0 xMPpzwMtwXU+leTgQb3yMCs0jpCd/f9H4X7so8f2755U9EucbtYaxgvXfbNtDhBS kp7S0XMreYLXZfeiOsUZw8KgjTW3yIA= -----END CERTIFICATE-----Generated at Tue Sep 22 18:49:39 2026 by rpki-client