$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa File: 670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa (raw, json) Hash identifier: IVVx+fqrqFYbPJeTrOJbkNHvtTQnl0HspSMIp8Nw1xc= Subject key identifier: 03:1C:4C:8B:88:89:CC:D6:B7:DF:A8:2E:6F:C4:7F:CE:26:64:8F:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E1E4492F5EE6D444C7F690AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 151.213.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:92:f5:ee:6d:44:4c:7f:69:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=59f018a1-033b-4c2e-9777-a8a0b5251fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4f:20:64:ce:f1:91:2e:d8:c5:f9:04:ad:52: 8d:08:04:b2:6d:4c:70:93:f9:b0:c5:b5:91:3d:04: 33:bb:b2:4f:f4:e2:40:c5:33:95:dd:07:52:5a:a1: cf:cd:3d:0a:31:fc:f8:26:df:ac:fe:3e:54:8e:90: ff:39:68:f8:bf:8a:84:2c:28:65:7c:bc:55:08:fc: bb:ac:60:2b:af:76:9c:cb:d0:df:67:95:1d:35:17: dc:3b:5c:ad:b3:4d:72:80:43:50:b8:ee:cc:cf:4d: 7c:a0:eb:07:df:5b:c8:44:5b:70:45:63:7b:da:f9: 3d:55:a9:3a:a3:e2:6e:94:81:bb:dd:41:2f:71:90: db:ba:d9:a1:c1:d0:04:b4:51:51:1a:1a:19:c1:2c: 5d:c7:51:bf:d6:5f:db:ad:06:cd:22:26:cb:a0:c3: ba:ad:43:63:52:c7:1a:6c:4f:fa:3d:18:68:54:76: e3:87:57:e4:ac:22:f2:fe:2e:84:2b:f0:8a:22:d3: dd:94:be:23:7d:e4:54:71:da:66:26:03:a3:56:f1: 30:92:57:05:a1:ae:9b:8a:d1:c2:2a:26:e7:19:00: ed:94:12:61:5e:14:38:62:b4:0a:6e:4f:a8:55:9e: a7:7a:9e:72:0c:84:12:32:87:82:bc:f5:f9:d5:50: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1C:4C:8B:88:89:CC:D6:B7:DF:A8:2E:6F:C4:7F:CE:26:64:8F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:35:44:96:87:0b:f2:c1:7a:40:47:a4:a1:a1:16:ad:3e:98: 51:52:c6:87:9b:04:96:5b:e8:0e:3a:c7:bb:5f:06:4a:e2:19: 8c:8d:8d:e5:61:73:be:36:cb:79:3b:e5:59:96:0a:b1:cc:7a: b0:b3:9d:df:f0:22:ca:b6:93:04:a1:15:b5:c9:92:64:6c:3d: 23:5f:b0:9a:06:c6:39:05:a1:bd:d0:22:76:03:f5:fb:0e:11: 89:8c:4b:ef:69:ff:f6:ff:ec:2e:24:a8:d2:cb:f6:1d:45:0a: 0f:7d:c9:7b:a0:4e:6f:71:26:0b:48:58:14:e8:4c:ed:51:63: 1a:be:6e:54:f0:2e:46:7e:e7:f4:69:95:e7:c7:70:bc:17:fc: 60:72:b4:fe:c9:27:fc:c7:f4:6c:bd:3e:0e:05:3e:31:e4:4f: c6:a4:86:d7:18:3a:18:15:b0:39:1c:fe:00:75:22:52:9d:4c: 08:fc:56:38:86:e8:f3:7f:cf:0e:0a:8e:29:87:e2:d5:ce:e9: 92:41:67:33:9e:1d:9f:47:f9:a9:e3:23:ba:b6:93:5e:9c:c5: ae:66:e1:30:23:c9:fa:e3:e2:fa:9d:f5:d5:c5:89:7b:23:da: 54:6d:69:a0:6f:05:fc:3e:e0:e3:67:90:83:86:cd:5c:50:e1: 2e:61:23:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJL17m1ETH9pCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NTlmMDE4YTEtMDMzYi00YzJlLTk3NzctYThhMGI1MjUxZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE8gZM7xkS7YxfkErVKNCASybUxwk/mwxbWR PQQzu7JP9OJAxTOV3QdSWqHPzT0KMfz4Jt+s/j5UjpD/OWj4v4qELChlfLxVCPy7 rGArr3acy9DfZ5UdNRfcO1yts01ygENQuO7Mz018oOsH31vIRFtwRWN72vk9Vak6 o+JulIG73UEvcZDbutmhwdAEtFFRGhoZwSxdx1G/1l/brQbNIibLoMO6rUNjUsca bE/6PRhoVHbjh1fkrCLy/i6EK/CKItPdlL4jfeRUcdpmJgOjVvEwklcFoa6bitHC KibnGQDtlBJhXhQ4YrQKbk+oVZ6nep5yDIQSMoeCvPX51VD3SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMcTIuIiczWt9+oLm/Ef84mZI/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjcwZGRmNmUtMjNjYi0z OTYyLWJkYmYtMWMyMGE4YTMyMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl9WwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg1RJaHC/LBekBHpKGhFq0+mFFSxoebBJZb6A46x7tfBkriGYyNjeVh c742y3k75VmWCrHMerCznd/wIsq2kwShFbXJkmRsPSNfsJoGxjkFob3QInYD9fsO EYmMS+9p//b/7C4kqNLL9h1FCg99yXugTm9xJgtIWBToTO1RYxq+blTwLkZ+5/Rp lefHcLwX/GBytP7JJ/zH9Gy9Pg4FPjHkT8akhtcYOhgVsDkc/gB1IlKdTAj8VjiG 6PN/zw4KjimH4tXO6ZJBZzOeHZ9H+anjI7q2k16cxa5m4TAjyfrj4vqd9dXFiXsj 2lRtaaBvBfw+4ONnkIOGzVxQ4S5hI74= -----END CERTIFICATE-----Generated at Sat Jun 13 06:03:40 2026 by rpki-client