$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa File: 45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa (raw, json) Hash identifier: CJg8bvHeJN5nTihwZXxTGvrypMq05VH8nKdIBeOuBBw= Subject key identifier: BD:B5:C9:82:25:A6:F6:ED:89:92:57:AD:D6:A6:53:0F:A9:54:4C:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F0455F594A9E7CD522028 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.191.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:04:55:f5:94:a9:e7:cd:52:20:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=880cfe3c-e4dc-47b0-b809-8d25edada7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:08:29:a8:f6:5e:dd:e8:8f:5f:64:ba:0c:7e: 12:01:70:c0:e2:7b:2d:90:01:fa:b2:54:41:ab:08: 92:f1:56:20:d5:33:99:22:bc:20:0a:12:dc:96:c8: 3e:9d:e5:1f:09:85:26:a5:0e:1e:ad:cf:0c:a8:77: a2:a0:69:b7:11:48:cb:fb:3f:01:0e:eb:74:2f:33: 5b:82:e7:99:44:d7:b2:e9:aa:89:1b:c1:56:19:dc: c8:f8:1d:5d:89:4f:4f:6f:80:20:2a:6e:c9:11:3f: 89:eb:de:18:4f:18:6d:99:37:2d:a6:95:ab:c6:68: 6c:d5:6c:bc:85:6f:e9:f8:19:67:5b:31:87:e1:5f: 65:e7:25:3f:07:38:6d:c1:54:e7:2a:8f:e3:cd:71: 58:ef:00:e3:b9:19:32:be:2d:2d:3c:fa:b7:59:57: 45:48:b4:c8:e6:fd:fb:01:c9:51:6b:14:b7:3d:cb: 1e:24:1b:93:1f:6f:79:e3:06:6e:2c:72:19:0c:81: 7e:97:98:12:78:00:3f:1a:d5:1c:1a:a9:10:a4:cd: be:18:0e:1e:00:0f:6b:8b:bb:56:61:c2:80:6c:00: 69:ea:c8:0f:7f:3c:80:e2:57:5b:81:43:d9:f0:d6: 13:10:4d:0a:c0:fe:cc:02:a5:18:c3:0f:9e:90:9e: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B5:C9:82:25:A6:F6:ED:89:92:57:AD:D6:A6:53:0F:A9:54:4C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:67:29:0c:b3:46:9e:2d:fe:98:f8:04:6e:d6:7d:2a:7e:53: 88:8c:27:76:f8:c3:e9:73:22:e8:b8:22:70:fd:1d:51:79:da: e9:5a:02:b7:8d:ba:07:a7:d0:e3:6e:c2:ad:14:81:38:da:a1: bd:38:f7:06:ac:3e:7d:9c:87:60:12:5e:1f:9c:32:67:17:ed: 04:a7:7f:77:4a:88:ba:8a:48:f8:d9:7c:96:1d:d7:68:42:a2: a0:d5:9e:fd:db:f2:e9:29:5e:71:5b:24:64:e3:70:ab:c8:64: 4c:f4:6b:eb:4e:c9:7f:26:30:49:a4:3c:74:77:b7:cd:0b:a6: 4a:35:11:5f:1f:9b:7a:2d:d1:b0:ae:51:1f:70:70:38:11:a4: e8:c5:ec:f9:75:07:45:2c:2c:f1:35:73:ac:ee:95:ed:76:00: 5b:8c:d8:2d:36:24:e0:63:a6:cf:af:85:23:c3:81:00:3a:66: c3:5c:6a:49:f4:97:a8:98:3a:e1:a0:c1:73:ea:e9:e6:0f:6e: 0a:93:3e:ba:77:68:46:50:9f:c6:2a:4b:4c:20:cc:11:f6:db: 58:d1:4d:d2:fd:91:a4:c5:d0:b1:e0:c6:ee:cf:32:5b:51:1e: 5f:cd:34:5f:0f:27:78:94:58:2e:7b:25:78:42:08:61:6d:86: 40:2f:4f:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwRV9ZSp581SICgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ODgwY2ZlM2MtZTRkYy00N2IwLWI4MDktOGQyNWVkYWRhN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AgpqPZe3eiPX2S6DH4SAXDA4nstkAH6slRB qwiS8VYg1TOZIrwgChLclsg+neUfCYUmpQ4erc8MqHeioGm3EUjL+z8BDut0LzNb gueZRNey6aqJG8FWGdzI+B1diU9Pb4AgKm7JET+J694YTxhtmTctppWrxmhs1Wy8 hW/p+BlnWzGH4V9l5yU/BzhtwVTnKo/jzXFY7wDjuRkyvi0tPPq3WVdFSLTI5v37 AclRaxS3PcseJBuTH2954wZuLHIZDIF+l5gSeAA/GtUcGqkQpM2+GA4eAA9ri7tW YcKAbABp6sgPfzyA4ldbgUPZ8NYTEE0KwP7MAqUYww+ekJ4y/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL21yYIlpvbtiZJXrdamUw+pVEy9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlMWZjMGYtZjllNC0z MjQzLTgzYTgtNTMwYmE0YTE4ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABnKQyzRp4t/pj4BG7WfSp+U4iMJ3b4w+lzIui4InD9HVF52ulaAreN ugen0ONuwq0UgTjaob049wasPn2ch2ASXh+cMmcX7QSnf3dKiLqKSPjZfJYd12hC oqDVnv3b8ukpXnFbJGTjcKvIZEz0a+tOyX8mMEmkPHR3t80Lpko1EV8fm3ot0bCu UR9wcDgRpOjF7Pl1B0UsLPE1c6zule12AFuM2C02JOBjps+vhSPDgQA6ZsNcakn0 l6iYOuGgwXPq6eYPbgqTPrp3aEZQn8YqS0wgzBH221jRTdL9kaTF0LHgxu7PMltR Hl/NNF8PJ3iUWC57JXhCCGFthkAvTzM= -----END CERTIFICATE-----Generated at Sat Jun 13 23:07:01 2026 by rpki-client