$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c531690-6d7a-3f29-9d6a-200c8d2a3e9e.roa File: 7c531690-6d7a-3f29-9d6a-200c8d2a3e9e.roa (raw, json) Hash identifier: Bc1yYFJ8dun5cINbAq8xkxS/AMqiY4rUbeWtJpWUal8= Subject key identifier: E4:62:37:5A:4A:82:D0:80:04:CB:F4:73:FF:A1:E8:E3:DB:60:5A:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D82EB13A9019BDABD842CAC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c531690-6d7a-3f29-9d6a-200c8d2a3e9e.roa Signing time: Wed 15 Apr 2026 05:30:19 +0000 ROA not before: Wed 15 Apr 2026 05:30:19 +0000 ROA not after: Tue 14 Jul 2026 05:30:19 +0000 asID: 7029 IP address blocks: 173.213.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:82:eb:13:a9:01:9b:da:bd:84:2c:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 15 05:30:19 2026 GMT Not After : Jul 14 05:30:19 2026 GMT Subject: CN=64a90b33-18df-47cc-afd5-85155f7e62db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b9:92:46:1d:38:41:87:09:c1:90:cf:3a:ac: 78:51:31:62:03:f1:bc:51:ce:f9:63:d1:b0:31:39: 53:43:5c:f7:04:38:6f:8c:db:76:c5:f7:b0:d6:a5: 30:df:3c:dc:ad:07:63:21:ba:5d:13:15:17:61:0d: 60:c2:ff:07:42:a2:c5:bb:94:b5:3b:7f:a1:fb:a6: 64:84:00:c6:32:2f:21:dc:6d:1f:c6:a0:43:92:5c: 19:61:ea:9d:44:44:d9:01:0e:79:30:c6:50:83:9e: 9a:92:83:c9:93:01:0f:a9:49:6d:3f:14:10:3a:b7: e8:00:07:23:09:d2:11:e8:23:40:4e:8b:94:8f:9d: e5:f8:ae:3e:b6:8b:ff:6f:2d:0c:e8:3f:56:b4:30: ef:aa:b9:54:b8:4b:d2:6e:81:7b:76:61:23:68:3f: 43:7c:4f:19:6f:87:e4:0e:f7:98:61:74:62:ab:68: d1:a6:69:5e:c9:9f:37:a0:72:75:6c:9c:79:28:8a: 51:e7:5a:15:0d:b6:9a:71:ec:2c:ab:fd:60:3b:77: fe:46:7b:ed:a3:f7:2d:15:ad:74:64:0f:f2:52:fa: 7e:e7:2f:00:eb:f0:87:a0:0d:10:ad:d1:e3:8d:ee: eb:4a:71:dc:e3:51:d5:f1:71:3b:79:99:55:e8:4d: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:62:37:5A:4A:82:D0:80:04:CB:F4:73:FF:A1:E8:E3:DB:60:5A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c531690-6d7a-3f29-9d6a-200c8d2a3e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4f:29:45:b3:4a:83:ce:3b:ee:de:a3:f3:5f:60:c4:54:b7: 0f:66:10:9c:39:df:c6:15:a6:f8:0a:15:b6:f3:82:b3:b3:cd: 13:cd:29:19:b1:bb:82:5d:7e:07:d4:88:98:f5:22:03:ed:c3: 4a:57:8d:15:1f:05:1c:fd:d1:ac:96:28:e6:35:8f:59:b1:21: 60:32:2f:ab:03:89:76:4e:19:d5:2d:c6:45:43:cc:90:97:e2: ca:d9:10:72:b8:d5:f5:6d:a6:43:25:6e:b9:c0:d1:7b:28:0f: e3:e6:fe:72:1b:7b:97:83:a9:35:4d:41:b1:70:ca:75:40:61: 42:80:68:90:14:64:7e:4e:50:74:67:08:56:af:3d:bd:20:9e: ef:f3:8b:33:c2:4e:6c:12:54:a7:77:a6:f2:71:08:70:e0:89: 3d:f1:82:2a:ee:a6:a4:00:af:f3:d3:63:49:a7:8a:f2:b2:49: 2e:8f:85:4c:f2:c2:51:87:86:e7:d4:c2:e4:04:22:02:92:f7: d4:ac:9e:b8:18:a7:f5:73:0e:7b:2f:29:bd:85:c5:ff:87:4b: c2:fd:d6:23:06:95:98:16:ee:ef:51:8c:b2:cf:90:74:0d:49: 3c:13:88:94:ef:e3:30:13:96:17:4d:35:58:03:a1:dd:3f:b8: 99:44:8b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2C6xOpAZvavYQsrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNTA1MzAxOVoXDTI2MDcxNDA1MzAxOVowLzEtMCsGA1UEAxMk NjRhOTBiMzMtMThkZi00N2NjLWFmZDUtODUxNTVmN2U2MmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbmSRh04QYcJwZDPOqx4UTFiA/G8Uc75Y9Gw MTlTQ1z3BDhvjNt2xfew1qUw3zzcrQdjIbpdExUXYQ1gwv8HQqLFu5S1O3+h+6Zk hADGMi8h3G0fxqBDklwZYeqdRETZAQ55MMZQg56akoPJkwEPqUltPxQQOrfoAAcj CdIR6CNATouUj53l+K4+tov/by0M6D9WtDDvqrlUuEvSboF7dmEjaD9DfE8Zb4fk DveYYXRiq2jRpmleyZ83oHJ1bJx5KIpR51oVDbaacewsq/1gO3f+Rnvto/ctFa10 ZA/yUvp+5y8A6/CHoA0QrdHjje7rSnHc41HV8XE7eZlV6E1RzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORiN1pKgtCABMv0c/+h6OPbYFonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2M1MzE2OTAtNmQ3YS0z ZjI5LTlkNmEtMjAwYzhkMmEzZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrdW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNPKUWzSoPOO+7eo/NfYMRUtw9mEJw538YVpvgKFbbzgrOzzRPNKRmx u4JdfgfUiJj1IgPtw0pXjRUfBRz90ayWKOY1j1mxIWAyL6sDiXZOGdUtxkVDzJCX 4srZEHK41fVtpkMlbrnA0XsoD+Pm/nIbe5eDqTVNQbFwynVAYUKAaJAUZH5OUHRn CFavPb0gnu/zizPCTmwSVKd3pvJxCHDgiT3xgirupqQAr/PTY0mnivKySS6PhUzy wlGHhufUwuQEIgKS99SsnrgYp/VzDnsvKb2Fxf+HS8L91iMGlZgW7u9RjLLPkHQN STwTiJTv4zATlhdNNVgDod0/uJlEiy0= -----END CERTIFICATE-----Generated at Fri Apr 17 09:40:14 2026 by rpki-client