$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/029ba1c4-a9aa-3829-af23-f93965a2cdfa.roa File: 029ba1c4-a9aa-3829-af23-f93965a2cdfa.roa (raw, json) Hash identifier: gFJ80Nw8K1eriQur5x6F5dB/ZOgC9NwqM6KiwgltPwQ= Subject key identifier: E1:2F:2A:E9:06:2C:17:81:F5:05:87:1E:7B:92:B0:24:D8:CB:76:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1857C74D1DF49BBF0D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/029ba1c4-a9aa-3829-af23-f93965a2cdfa.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.186.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:18:57:c7:4d:1d:f4:9b:bf:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=2b0c5552-fbc9-4833-b92b-7c4e3a2ccdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:bd:66:32:c3:8e:72:97:9e:04:78:9f:1c: 49:7f:3c:96:bf:b0:6d:01:2e:40:72:3f:53:93:fb: c1:c8:f9:3f:c3:cb:c4:3b:d2:37:18:ed:0c:ec:22: d7:1e:79:07:6e:ea:94:d5:1b:27:50:03:a6:52:f1: fe:d6:bb:c4:83:eb:af:f8:bc:f2:d1:3d:bd:be:db: 08:d0:20:f8:99:cb:82:e7:b5:15:e1:1d:4a:fa:0c: 88:8f:f8:63:ce:21:1d:1c:3b:71:36:08:cc:b5:3a: af:f4:20:e9:6c:25:9e:84:1c:3c:70:ed:56:d6:87: 72:f0:7d:2d:ea:63:0d:3a:c9:70:f8:c3:67:92:c0: 3d:3a:0a:e2:a4:31:7d:ea:0d:41:27:4f:4a:8b:26: 05:8a:1b:74:b2:9d:0b:c2:44:4b:78:0e:ec:5e:ea: 46:41:81:fa:6e:bf:39:98:46:69:f0:7b:93:4f:bc: 2f:e3:f4:90:f9:22:49:a3:84:86:9a:f9:96:d2:71: c5:da:40:ca:3d:d9:ba:ee:3e:b5:dd:f9:f9:44:9f: 96:a6:34:6d:4b:4b:01:ad:c3:9f:c0:86:71:91:9a: 7d:6b:1d:5d:fb:ba:ff:d6:a5:a1:f2:d7:d7:1b:9b: 70:f4:f3:03:b5:27:2a:b7:ed:31:cf:c5:84:36:7b: e9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2F:2A:E9:06:2C:17:81:F5:05:87:1E:7B:92:B0:24:D8:CB:76:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/029ba1c4-a9aa-3829-af23-f93965a2cdfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:43:f7:71:3a:ae:1d:02:c6:4b:4c:a3:10:2f:0f:10:c2:ab: 92:9d:18:06:96:46:8b:69:d0:d3:68:59:07:d1:63:ac:28:e5: 37:81:7b:8c:87:af:6b:f5:d8:be:bc:a6:39:b7:1a:d4:8a:06: 39:79:1f:23:94:00:f3:c8:08:cd:55:84:c2:0b:b5:e6:61:f1: 4c:42:12:aa:21:2f:62:7b:ef:e4:16:c1:7d:15:32:c7:7d:88: 3e:40:8c:13:31:22:75:40:86:b8:2f:02:e9:d3:51:9c:a0:70: b7:cd:8a:05:2b:34:95:12:b1:fb:27:6b:e2:71:25:d0:29:85: fd:5c:57:a8:ea:80:38:60:eb:f3:68:b1:6f:ca:49:4e:0d:f2: f1:51:fb:ea:f8:e4:62:17:31:dd:b0:b9:c7:c7:48:a8:64:a7: 78:a7:01:0b:cd:81:ed:f8:c3:61:b6:07:04:12:d6:7b:e1:a7: d7:db:3e:0d:7c:c2:b3:51:18:c6:a7:d2:b1:40:80:29:71:31: e7:99:7e:d4:cd:ff:a4:11:d3:4a:0d:07:cc:39:e3:b1:0e:fa: 0f:37:60:41:b1:f6:45:39:91:2e:77:00:e3:23:10:5f:7a:92: aa:84:53:97:3c:15:86:4e:fe:4b:6d:1e:a6:16:3b:7c:b5:cd: 52:1f:ba:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxhXx00d9Ju/DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MmIwYzU1NTItZmJjOS00ODMzLWI5MmItN2M0ZTNhMmNjZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8K9ZjLDjnKXngR4nxxJfzyWv7BtAS5Acj9T k/vByPk/w8vEO9I3GO0M7CLXHnkHbuqU1RsnUAOmUvH+1rvEg+uv+Lzy0T29vtsI 0CD4mcuC57UV4R1K+gyIj/hjziEdHDtxNgjMtTqv9CDpbCWehBw8cO1W1ody8H0t 6mMNOslw+MNnksA9OgripDF96g1BJ09KiyYFiht0sp0LwkRLeA7sXupGQYH6br85 mEZp8HuTT7wv4/SQ+SJJo4SGmvmW0nHF2kDKPdm67j613fn5RJ+WpjRtS0sBrcOf wIZxkZp9ax1d+7r/1qWh8tfXG5tw9PMDtScqt+0xz8WENnvpawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEvKukGLBeB9QWHHnuSsCTYy3aWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDI5YmExYzQtYTlhYS0z ODI5LWFmMjMtZjkzOTY1YTJjZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtD93E6rh0CxktMoxAvDxDCq5KdGAaWRotp0NNoWQfRY6wo5TeBe4yH r2v12L68pjm3GtSKBjl5HyOUAPPICM1VhMILteZh8UxCEqohL2J77+QWwX0VMsd9 iD5AjBMxInVAhrgvAunTUZygcLfNigUrNJUSsfsna+JxJdAphf1cV6jqgDhg6/No sW/KSU4N8vFR++r45GIXMd2wucfHSKhkp3inAQvNge34w2G2BwQS1nvhp9fbPg18 wrNRGMan0rFAgClxMeeZftTN/6QR00oNB8w547EO+g83YEGx9kU5kS53AOMjEF96 kqqEU5c8FYZO/kttHqYWO3y1zVIfumQ= -----END CERTIFICATE-----Generated at Sat Jun 13 06:07:45 2026 by rpki-client