$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4768268f-c950-35a6-997d-7ddaad2b5ac6.roa File: 4768268f-c950-35a6-997d-7ddaad2b5ac6.roa (raw, json) Hash identifier: KwjcIjO3NJBPIgLI3tkjchELqhyQ3NSxwbc6CyX0ASQ= Subject key identifier: FF:A0:6F:69:99:EF:19:AC:8A:FE:83:4D:7A:BC:7C:AB:A6:69:46:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E1E449336F81DFA52416EBC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4768268f-c950-35a6-997d-7ddaad2b5ac6.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.187.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:93:36:f8:1d:fa:52:41:6e:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=5ebabbc0-90a1-4386-ab67-253bf8c10d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1b:e0:e4:fb:0d:3b:81:d7:ef:c6:99:4e:87: 65:a1:f1:e0:64:ef:89:2c:02:f2:b0:3e:79:6a:7d: 19:d9:df:0d:fe:4e:b2:11:fd:5c:03:56:1f:c8:ed: a4:82:0f:fe:d8:f2:18:9a:2f:4d:b8:9b:93:1e:8a: cb:33:8d:a2:d8:fc:55:f4:42:bf:12:c6:c9:d2:66: 85:d6:10:a7:e9:0a:da:66:47:21:4e:fe:83:d8:e3: e3:46:97:7f:99:09:4b:90:c3:f2:86:42:9c:0f:ea: 6f:0d:c0:b0:20:6a:f7:2e:62:eb:8c:d6:e1:2e:d1: 95:d3:c1:30:ef:03:4f:08:bc:14:e8:47:3b:c8:72: 6c:46:24:d1:d9:32:1e:33:8b:79:34:bf:17:64:ba: 22:4a:c5:43:37:f8:c8:21:df:e4:c0:41:52:f0:74: 04:8a:68:98:ee:5a:15:2b:fa:7f:b8:be:fe:a7:3c: 71:38:cf:30:b3:f6:c3:08:91:99:05:58:b2:cb:38: 04:c0:7d:e2:7e:b8:16:be:06:7a:cf:51:78:0a:fa: ab:f3:15:da:b4:ff:d1:da:c4:64:34:2f:fc:14:d2: 98:94:51:0c:63:dd:90:0a:a1:4d:85:4f:c8:fb:64: e0:d2:eb:3c:5f:47:d3:6c:9f:55:20:e5:d3:d3:20: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:6F:69:99:EF:19:AC:8A:FE:83:4D:7A:BC:7C:AB:A6:69:46:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4768268f-c950-35a6-997d-7ddaad2b5ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:76:3f:46:fd:e1:a0:d4:c1:bc:65:b1:6e:4f:48:4e:b8:d6: ca:22:ae:95:24:52:17:ea:e3:42:aa:a6:aa:a5:db:2d:9d:27: e1:80:9a:44:60:81:5b:10:89:42:9c:e7:fa:a5:f6:fc:e5:1d: 2e:a0:5a:44:28:67:bf:c9:c5:46:79:74:08:7c:23:95:62:e0: 46:d0:39:fc:e9:4b:1c:45:49:0e:b3:d9:f2:06:e9:ed:91:d9: 2a:83:d9:b2:77:65:07:fa:99:73:3b:19:15:df:c1:0c:7d:c5: 09:dc:78:76:a8:90:b9:2d:72:fd:f7:46:42:1f:a7:42:27:b4: 09:64:57:aa:c4:75:05:5e:b2:36:93:17:ad:85:ad:ed:2f:49: 65:df:8f:eb:da:38:29:3d:52:23:7a:29:a5:bd:32:a3:59:45: a6:fd:0c:90:48:77:a8:c9:d6:8a:ae:4c:c9:1f:17:b2:bb:15: 4b:76:7f:f5:dc:ac:6d:ab:15:1e:73:09:9b:f3:d6:7b:10:b4: 03:97:ba:68:93:cb:66:00:af:35:c2:e3:bc:04:f5:37:70:5b: 97:2f:b0:61:16:a4:16:57:fb:2c:83:e7:2f:c6:2a:28:ca:60: dd:51:9c:2b:16:28:c3:f5:a9:a0:89:eb:14:fc:c0:92:65:00: 43:ce:0e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJM2+B36UkFuvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NWViYWJiYzAtOTBhMS00Mzg2LWFiNjctMjUzYmY4YzEwZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBvg5PsNO4HX78aZTodlofHgZO+JLALysD55 an0Z2d8N/k6yEf1cA1YfyO2kgg/+2PIYmi9NuJuTHorLM42i2PxV9EK/EsbJ0maF 1hCn6QraZkchTv6D2OPjRpd/mQlLkMPyhkKcD+pvDcCwIGr3LmLrjNbhLtGV08Ew 7wNPCLwU6Ec7yHJsRiTR2TIeM4t5NL8XZLoiSsVDN/jIId/kwEFS8HQEimiY7loV K/p/uL7+pzxxOM8ws/bDCJGZBViyyzgEwH3ifrgWvgZ6z1F4Cvqr8xXatP/R2sRk NC/8FNKYlFEMY92QCqFNhU/I+2Tg0us8X0fTbJ9VIOXT0yBfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+gb2mZ7xmsiv6DTXq8fKumaUaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDc2ODI2OGYtYzk1MC0z NWE2LTk5N2QtN2RkYWFkMmI1YWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbvCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA12P0b94aDUwbxlsW5PSE641soirpUkUhfq40Kqpqql2y2dJ+GAmkRg gVsQiUKc5/ql9vzlHS6gWkQoZ7/JxUZ5dAh8I5Vi4EbQOfzpSxxFSQ6z2fIG6e2R 2SqD2bJ3ZQf6mXM7GRXfwQx9xQnceHaokLktcv33RkIfp0IntAlkV6rEdQVesjaT F62Fre0vSWXfj+vaOCk9UiN6KaW9MqNZRab9DJBId6jJ1oquTMkfF7K7FUt2f/Xc rG2rFR5zCZvz1nsQtAOXumiTy2YArzXC47wE9TdwW5cvsGEWpBZX+yyD5y/GKijK YN1RnCsWKMP1qaCJ6xT8wJJlAEPODuU= -----END CERTIFICATE-----Generated at Sat Jun 13 06:03:47 2026 by rpki-client