$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fbfc64e-d95d-3cef-a3be-475eb7e6afdb.roa File: 1fbfc64e-d95d-3cef-a3be-475eb7e6afdb.roa (raw, json) Hash identifier: YbRTOs0od9tfGsry8aLDLw/cDTSyw9tfD95h1i4vf9A= Subject key identifier: 79:42:08:13:DD:EA:D5:DC:B9:82:5E:21:D6:D6:BE:14:5D:DC:A7:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E17498C7FF79994786C796700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fbfc64e-d95d-3cef-a3be-475eb7e6afdb.roa Signing time: Sun 07 Jun 2026 09:00:13 +0000 ROA not before: Sun 07 Jun 2026 09:00:13 +0000 ROA not after: Sat 05 Sep 2026 09:00:13 +0000 asID: 7029 IP address blocks: 173.189.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:17:49:8c:7f:f7:99:94:78:6c:79:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 7 09:00:13 2026 GMT Not After : Sep 5 09:00:13 2026 GMT Subject: CN=e8124895-b65e-4495-a9f6-9e49a515cc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:0d:5b:61:35:e0:73:0b:23:a5:5c:93:d3: 0b:17:27:24:2f:25:59:4c:a7:1d:43:cf:65:5f:e7: 2a:02:30:c6:89:22:ff:08:a0:61:7b:60:61:99:c5: 0f:93:e2:0d:cb:34:00:2e:15:f0:ef:d4:9c:09:2d: 45:a4:37:78:74:98:f0:20:61:a3:dd:6e:79:16:49: 73:08:d7:f0:f6:ab:cd:bd:dd:8d:d2:b1:80:81:bf: 0d:6e:77:9a:2a:b2:36:86:e0:f1:c6:c6:b5:f8:07: 7f:fd:38:91:21:99:b5:2e:c4:e7:c7:f0:76:2a:15: 02:82:ba:ef:13:dc:17:0d:76:a1:dd:66:19:80:23: 7d:b9:95:80:bb:77:14:05:f7:16:fe:48:5b:43:ed: 44:7e:5b:5f:6e:a2:23:d9:40:2c:87:8b:aa:a4:0c: d8:0b:84:e7:b8:04:26:a1:e1:4f:bc:69:13:7b:71: 69:f8:8a:e9:1e:6f:4f:5d:c9:bc:f3:bb:c8:da:d8: d9:4d:4d:cc:87:e1:60:dd:a1:42:da:ff:13:96:e9: 6a:1b:88:51:f2:26:25:95:48:23:86:71:e9:7a:a0: 88:33:a1:b3:e4:3f:8d:0c:ee:ba:aa:1a:59:0e:56: 8b:4a:88:3b:1f:48:f9:da:e8:56:d0:13:e0:97:74: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:08:13:DD:EA:D5:DC:B9:82:5E:21:D6:D6:BE:14:5D:DC:A7:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fbfc64e-d95d-3cef-a3be-475eb7e6afdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:61:c5:e7:06:f6:ba:71:7f:63:e4:d6:c5:ae:ca:40:d9:97: 11:34:3a:ea:29:cd:75:4f:ec:f3:91:b3:55:67:da:da:96:2c: 95:f7:4a:98:72:2b:1e:5a:ef:24:19:e9:91:7a:19:92:d8:de: 8b:fb:a4:3a:8a:43:be:60:4c:31:57:7c:c9:a0:5b:2c:61:13: 4c:58:bb:40:06:73:39:c3:d7:d1:e2:28:7c:6a:d4:3c:b3:e0: 89:83:d4:14:cc:1d:24:75:d7:ac:aa:43:63:f2:10:0e:2d:22: 2c:96:c9:28:f2:0f:98:32:52:a6:92:43:9f:d1:9a:fa:f9:8e: 82:6b:81:10:23:b5:88:49:eb:49:6e:ed:9b:b7:0a:a1:90:5d: 23:90:e0:55:a0:f6:27:32:2a:2e:b0:cf:64:40:8f:2f:bc:83: 7f:22:43:1f:51:6b:bf:79:e0:b8:d1:e1:41:dc:83:f7:ef:93: 5d:7c:2a:8b:d4:a7:bb:ef:95:b5:85:ef:f9:39:89:1d:ce:13: ee:c4:b9:95:bf:2d:2d:f9:b8:fd:da:2e:68:47:fe:71:79:b6: 9b:4e:cc:d9:2d:b7:15:0e:50:80:06:27:69:ec:26:6f:ed:2f: 4b:18:91:ca:8e:c6:a9:0f:fa:5e:73:d5:ae:43:15:72:20:b5: cf:b0:3f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4XSYx/95mUeGx5ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNzA5MDAxM1oXDTI2MDkwNTA5MDAxM1owLzEtMCsGA1UEAxMk ZTgxMjQ4OTUtYjY1ZS00NDk1LWE5ZjYtOWU0OWE1MTVjYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYgNW2E14HMLI6Vck9MLFyckLyVZTKcdQ89l X+cqAjDGiSL/CKBhe2BhmcUPk+INyzQALhXw79ScCS1FpDd4dJjwIGGj3W55Fklz CNfw9qvNvd2N0rGAgb8NbneaKrI2huDxxsa1+Ad//TiRIZm1LsTnx/B2KhUCgrrv E9wXDXah3WYZgCN9uZWAu3cUBfcW/khbQ+1EfltfbqIj2UAsh4uqpAzYC4TnuAQm oeFPvGkTe3Fp+IrpHm9PXcm887vI2tjZTU3Mh+Fg3aFC2v8TlulqG4hR8iYllUgj hnHpeqCIM6Gz5D+NDO66qhpZDlaLSog7H0j52uhW0BPgl3QLSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlCCBPd6tXcuYJeIdbWvhRd3KcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZiZmM2NGUtZDk1ZC0z Y2VmLWEzYmUtNDc1ZWI3ZTZhZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACphxecG9rpxf2Pk1sWuykDZlxE0OuopzXVP7PORs1Vn2tqWLJX3Sphy Kx5a7yQZ6ZF6GZLY3ov7pDqKQ75gTDFXfMmgWyxhE0xYu0AGcznD19HiKHxq1Dyz 4ImD1BTMHSR116yqQ2PyEA4tIiyWySjyD5gyUqaSQ5/Rmvr5joJrgRAjtYhJ60lu 7Zu3CqGQXSOQ4FWg9icyKi6wz2RAjy+8g38iQx9Ra7954LjR4UHcg/fvk118KovU p7vvlbWF7/k5iR3OE+7EuZW/LS35uP3aLmhH/nF5tptOzNkttxUOUIAGJ2nsJm/t L0sYkcqOxqkP+l5z1a5DFXIgtc+wP3U= -----END CERTIFICATE-----Generated at Sat Jun 13 07:16:24 2026 by rpki-client