$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa File: 2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa (raw, json) Hash identifier: QVnihaKXe2yqUh6SgmrGKfPC9w8i9TXUrJI9RgtJpb0= Subject key identifier: D2:42:B3:37:81:BC:BB:AF:DB:97:52:62:C6:84:21:2C:07:5F:C2:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E226A3B48317BCB17991A4680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa Signing time: Thu 11 Jun 2026 08:40:02 +0000 ROA not before: Thu 11 Jun 2026 08:40:02 +0000 ROA not after: Wed 09 Sep 2026 08:40:02 +0000 asID: 7029 IP address blocks: 174.131.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:22:6a:3b:48:31:7b:cb:17:99:1a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 11 08:40:02 2026 GMT Not After : Sep 9 08:40:02 2026 GMT Subject: CN=ec685b9c-8af9-43a1-a6dd-b13a43b9cf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4a:28:0f:56:ff:88:ad:b2:d5:f2:10:11:7e: aa:31:9f:a5:87:63:57:61:85:8c:29:be:dd:ec:01: c6:b9:7f:34:9c:5f:21:06:93:16:1e:d0:9b:1e:eb: fc:b4:55:bc:3e:ef:8e:41:61:90:5f:bd:7b:d6:43: 1b:44:cd:d3:49:a8:a1:ff:33:1c:1e:81:db:d9:b5: be:6c:c1:4c:fb:1f:fb:d9:a9:39:11:a5:ee:86:3b: 66:d4:7f:5c:02:59:2d:4e:08:13:6e:98:dc:e0:81: 42:14:cf:18:3c:35:ac:32:7a:da:cc:63:6d:7c:93: 61:91:cd:1f:8f:a7:53:76:70:bc:9f:a3:1a:16:aa: c6:47:a6:59:24:9d:b3:e9:5b:b0:6a:35:fe:b7:1f: e3:fc:17:8e:93:4b:41:bc:f1:7f:d6:f3:2f:5c:b8: 70:96:2e:ad:d1:2e:c9:ec:d0:d0:89:5c:2a:1c:a4: 33:0c:70:2a:03:18:8c:2a:8f:8d:3c:6d:0e:46:c9: f8:ab:8a:cb:f1:c4:4a:73:ff:b6:b8:7c:2d:e6:a4: a3:e3:dd:49:03:25:5a:d5:5a:2e:4a:6d:60:f9:8b: 53:a2:cf:03:44:c1:6e:57:e7:29:97:29:5c:25:bd: 65:3b:8d:4c:98:71:64:64:dc:4e:05:7c:0e:59:83: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:42:B3:37:81:BC:BB:AF:DB:97:52:62:C6:84:21:2C:07:5F:C2:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b1a37da-a6c5-358f-a03b-4a9da814bd50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ea:b7:2f:7d:ed:bb:e4:eb:29:60:4f:3b:2a:61:61:43:a4: 14:68:a4:83:21:17:83:a3:66:96:ce:b2:e2:03:99:10:69:ee: 77:09:3c:65:ab:c2:43:ac:8b:0a:51:51:b5:9b:da:cb:57:64: 47:21:7d:ed:a7:74:a9:88:85:df:d1:80:45:a6:5d:fa:f7:65: bc:4d:f3:62:17:f0:bf:dd:42:47:67:72:d1:92:52:a4:58:ce: 90:d6:2f:8d:78:73:97:e7:bd:bf:0e:31:83:e0:34:68:45:35: 8d:eb:07:33:e8:8a:e8:9a:cd:7d:a5:37:fb:e9:c8:8a:da:bf: bb:9a:3b:f7:16:d0:55:bf:91:ec:24:20:f8:9a:c2:94:85:36: b6:bd:0c:56:3b:bf:b5:15:a3:78:68:3f:8f:99:86:8e:5d:c7: bf:48:07:b1:61:45:09:be:89:ce:b1:34:59:f3:1f:b2:fd:ba: 24:ba:c6:f9:fe:28:eb:ef:ef:1c:8c:65:3f:40:8c:eb:e4:11: 81:1b:7c:e0:34:b4:61:6e:ce:84:d5:bc:21:e2:07:95:6f:e8: e1:74:66:7f:b5:72:96:25:ea:81:c2:0b:92:7a:2e:6e:51:28: 10:c9:ef:93:7c:4c:e7:d2:af:d7:49:b7:90:5b:69:8f:c6:13: 8c:90:2e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4iajtIMXvLF5kaRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxMTA4NDAwMloXDTI2MDkwOTA4NDAwMlowLzEtMCsGA1UEAxMk ZWM2ODViOWMtOGFmOS00M2ExLWE2ZGQtYjEzYTQzYjljZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEooD1b/iK2y1fIQEX6qMZ+lh2NXYYWMKb7d 7AHGuX80nF8hBpMWHtCbHuv8tFW8Pu+OQWGQX7171kMbRM3TSaih/zMcHoHb2bW+ bMFM+x/72ak5EaXuhjtm1H9cAlktTggTbpjc4IFCFM8YPDWsMnrazGNtfJNhkc0f j6dTdnC8n6MaFqrGR6ZZJJ2z6VuwajX+tx/j/BeOk0tBvPF/1vMvXLhwli6t0S7J 7NDQiVwqHKQzDHAqAxiMKo+NPG0ORsn4q4rL8cRKc/+2uHwt5qSj491JAyVa1Vou Sm1g+YtTos8DRMFuV+cplylcJb1lO41MmHFkZNxOBXwOWYMNDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJCszeBvLuv25dSYsaEISwHX8IhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmIxYTM3ZGEtYTZjNS0z NThmLWEwM2ItNGE5ZGE4MTRiZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXqty997bvk6ylgTzsqYWFDpBRopIMhF4OjZpbOsuIDmRBp7ncJPGWr wkOsiwpRUbWb2stXZEchfe2ndKmIhd/RgEWmXfr3ZbxN82IX8L/dQkdnctGSUqRY zpDWL414c5fnvb8OMYPgNGhFNY3rBzPoiuiazX2lN/vpyIrav7uaO/cW0FW/kewk IPiawpSFNra9DFY7v7UVo3hoP4+Zho5dx79IB7FhRQm+ic6xNFnzH7L9uiS6xvn+ KOvv7xyMZT9AjOvkEYEbfOA0tGFuzoTVvCHiB5Vv6OF0Zn+1cpYl6oHCC5J6Lm5R KBDJ75N8TOfSr9dJt5BbaY/GE4yQLsY= -----END CERTIFICATE-----Generated at Sat Jun 13 06:52:04 2026 by rpki-client