$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5393f245-bf1f-30c5-bb19-7cddb38c81c1.roa File: 5393f245-bf1f-30c5-bb19-7cddb38c81c1.roa (raw, json) Hash identifier: vrmHg2te0AvOI8Okt1f1LXiI9VDz0xd8M9qbpYKjJf0= Subject key identifier: C4:9C:1D:E8:7F:D3:3A:74:31:74:7C:4D:D1:D9:10:E4:59:D1:95:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F028C72FFD679D08A9880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5393f245-bf1f-30c5-bb19-7cddb38c81c1.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 40399 IP address blocks: 74.10.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:02:8c:72:ff:d6:79:d0:8a:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=af1cf31d-56b6-493c-b5e6-62fb2fdd0804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:38:ec:b9:23:6a:76:11:17:45:9b:42:cf: e1:fb:a8:0e:6c:36:db:f5:1b:4a:fe:b3:85:2b:08: d5:50:b7:23:68:3f:a8:17:0e:1c:b7:9f:d9:a1:0c: 09:93:36:17:1c:2f:c9:88:a1:87:0b:53:e3:ca:26: 49:13:81:8e:04:5e:4b:cd:6e:f0:11:16:74:2c:81: 5b:1a:6e:48:1f:37:8e:a8:14:92:ed:81:47:49:33: 24:1d:e3:d3:5e:06:67:c7:a4:02:22:eb:91:83:0c: 51:26:50:45:9d:94:87:ad:0a:3a:a5:b0:05:93:9d: 4f:d7:43:a5:aa:54:a9:fe:5a:f7:d7:59:ee:81:c6: b9:41:f5:11:cc:6c:f3:a5:b5:08:51:76:4d:98:3a: f9:c3:38:78:b1:81:a1:4c:24:21:f3:26:ce:7f:95: c0:f2:ed:ca:42:ba:85:90:08:5c:7d:de:e0:7e:9d: 76:18:3d:88:c1:2a:e4:aa:11:2a:7c:2c:3b:33:db: 81:9a:ab:94:6c:a7:6d:d6:d0:c1:6e:04:6b:6e:40: 68:dc:7e:c9:cc:3c:8a:d9:b0:48:02:d9:50:13:f1: 12:a1:fd:3a:bc:97:38:5a:b8:0f:d8:46:24:40:06: 55:1b:c0:9b:d7:3d:ae:a5:b2:bd:df:6d:ad:58:86: 03:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9C:1D:E8:7F:D3:3A:74:31:74:7C:4D:D1:D9:10:E4:59:D1:95:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5393f245-bf1f-30c5-bb19-7cddb38c81c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.10.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:20:2c:d6:81:8c:5b:4c:89:c2:a5:2d:c2:f9:ed:9a:bf:53: 92:e3:14:92:f7:a7:a1:76:1c:86:e0:3d:0d:70:f1:b5:b7:82: 0e:58:a3:04:42:08:4f:29:fe:46:d0:50:68:ef:40:3d:02:4c: 9e:6d:16:bb:1f:92:64:f6:1b:08:a3:a6:14:7f:34:a2:dc:b2: 17:94:98:d4:7f:8e:67:bd:7e:d7:98:d1:2f:de:cb:c3:28:89: 0e:44:60:cc:f6:26:f8:a8:44:db:01:05:e1:91:a1:f0:b0:ad: 29:e5:07:71:32:5f:90:58:02:03:f1:8b:f0:77:54:b1:00:c7: 02:ad:03:a4:de:be:04:e7:7b:88:ff:90:50:2d:d0:65:a8:ff: 24:b3:01:a4:66:ef:df:da:b0:cb:b6:27:27:76:b1:80:c1:15: 2d:c2:2b:32:cd:ed:c7:15:b5:98:15:19:17:eb:d7:f9:16:a6: ca:ac:43:11:03:0e:1d:7b:19:14:f3:56:5a:79:09:c7:a7:b4: 9e:0a:0a:f5:18:6f:3a:c1:d1:84:52:00:62:d3:f6:67:00:49: 37:0d:7b:fb:92:ca:7c:c5:ca:0f:51:bb:60:96:eb:85:dc:4e: 6d:57:b5:61:2a:1b:19:8b:d4:5c:13:da:5e:50:79:dc:ad:e4: 00:b4:8c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwKMcv/WedCKmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YWYxY2YzMWQtNTZiNi00OTNjLWI1ZTYtNjJmYjJmZGQwODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IU47LkjanYRF0WbQs/h+6gObDbb9RtK/rOF KwjVULcjaD+oFw4ct5/ZoQwJkzYXHC/JiKGHC1PjyiZJE4GOBF5LzW7wERZ0LIFb Gm5IHzeOqBSS7YFHSTMkHePTXgZnx6QCIuuRgwxRJlBFnZSHrQo6pbAFk51P10Ol qlSp/lr311nugca5QfURzGzzpbUIUXZNmDr5wzh4sYGhTCQh8ybOf5XA8u3KQrqF kAhcfd7gfp12GD2IwSrkqhEqfCw7M9uBmquUbKdt1tDBbgRrbkBo3H7JzDyK2bBI AtlQE/ESof06vJc4WrgP2EYkQAZVG8Cb1z2upbK9322tWIYDGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMScHeh/0zp0MXR8TdHZEORZ0ZUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTM5M2YyNDUtYmYxZi0z MGM1LWJiMTktN2NkZGIzOGM4MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgo5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcgLNaBjFtMicKlLcL57Zq/U5LjFJL3p6F2HIbgPQ1w8bW3gg5YowRC CE8p/kbQUGjvQD0CTJ5tFrsfkmT2GwijphR/NKLcsheUmNR/jme9fteY0S/ey8Mo iQ5EYMz2JvioRNsBBeGRofCwrSnlB3EyX5BYAgPxi/B3VLEAxwKtA6TevgTne4j/ kFAt0GWo/ySzAaRm79/asMu2Jyd2sYDBFS3CKzLN7ccVtZgVGRfr1/kWpsqsQxED Dh17GRTzVlp5CcentJ4KCvUYbzrB0YRSAGLT9mcASTcNe/uSynzFyg9Ru2CW64Xc Tm1XtWEqGxmL1FwT2l5Qedyt5AC0jEI= -----END CERTIFICATE-----Generated at Sat Jun 13 20:19:36 2026 by rpki-client