$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa File: 810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa (raw, json) Hash identifier: l06bsZSDDxq1qgKKb6MbKbH/NdIqPyA8Xf1e4WdD3rU= Subject key identifier: DA:93:56:1E:A1:C3:9A:5F:17:FE:8E:7C:AD:72:F0:08:0C:1A:16:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F18421730D46A4A204780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.184.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:18:42:17:30:d4:6a:4a:20:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=6a85bc4d-543b-49f4-81e7-68339df15d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:6e:e0:7c:d6:17:eb:81:65:3c:5c:16:ed: 3d:86:f4:69:37:49:ae:da:a8:32:b7:0a:bd:59:2e: 8d:21:69:3f:d7:2d:22:67:09:c3:b0:3a:23:84:77: 69:19:89:26:54:cc:09:ce:b3:fb:72:44:c7:02:52: 37:82:60:ae:ef:c1:63:26:45:44:81:ea:92:6e:8b: 30:42:b8:da:86:9d:34:85:d4:3c:61:31:13:48:12: d8:23:4a:d2:cc:72:76:af:26:d0:90:7c:bc:72:ec: 1e:f9:60:c7:8e:35:c0:65:35:64:c1:07:cd:92:ed: ed:62:80:f2:5f:23:1a:d8:00:dd:ab:da:50:c8:37: 4f:cf:c8:9b:88:27:e3:80:11:8a:5c:4c:9a:04:1d: 1a:b5:02:ac:37:b8:f7:f1:50:4e:31:2e:02:f2:b6: 0d:6a:e4:37:dc:ba:11:7d:26:b8:bb:5a:fa:5d:bf: 50:50:38:0d:83:ab:7f:2e:83:ee:69:f0:8a:ef:5d: 22:45:b0:10:4b:a2:93:7e:f9:bc:d6:e4:66:3a:df: 5b:8e:b8:c0:ed:58:87:13:9f:29:4e:e4:f0:58:4e: 3b:22:b1:0e:cd:cf:98:97:48:4f:ae:3a:f1:c2:9d: 0e:47:4b:b8:13:3e:79:17:cf:24:77:58:c0:59:b2: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:56:1E:A1:C3:9A:5F:17:FE:8E:7C:AD:72:F0:08:0C:1A:16:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810a915d-1f99-3fb4-b020-a6a8f0fd67b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1e:e5:2d:aa:c5:1f:06:d3:f3:ca:3a:99:0b:4b:1d:ea:c3: 15:1a:70:d2:97:30:b9:80:6d:5e:f9:d6:42:52:f0:9f:d0:33: 8f:36:4f:cc:fa:3a:d7:66:39:c4:d2:77:53:7b:16:68:d5:1b: 2c:88:e3:c7:f9:2e:42:97:f8:1e:1f:de:85:b5:4b:38:63:38: bd:78:01:65:ca:b5:89:88:df:b1:d3:33:e5:f9:66:a1:8a:41: e7:23:f1:e9:b7:c4:80:d1:7a:1a:ef:ce:85:e0:18:56:75:2f: c2:4e:0a:b4:16:66:e8:67:e3:45:f2:df:0a:43:88:8b:13:d3: 5a:6b:6b:94:5c:66:bf:e6:e7:1f:a0:8d:c1:55:bc:b2:4a:4a: 29:82:4e:6f:1e:75:c1:6f:10:a3:ac:ba:c6:a2:03:f2:81:bd: 27:9d:eb:79:93:92:2f:57:10:ef:66:ed:ca:24:e1:5b:c8:44: 5d:84:71:e4:af:fb:21:af:46:d6:87:dc:6f:f9:3a:28:63:5e: 94:99:1b:cf:44:3a:d7:3a:9a:69:eb:20:85:37:39:6d:a2:39: a0:f6:a9:d5:2e:de:d5:d1:e4:55:d0:85:03:2c:fd:f5:97:b8: cc:6d:8d:2b:b1:79:30:1e:9c:89:cb:0b:4d:28:ff:b2:01:b9: 3c:67:79:49 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4QTxhCFzDUakogR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NmE4NWJjNGQtNTQzYi00OWY0LTgxZTctNjgzMzlkZjE1ZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLtu4HzWF+uBZTxcFu09hvRpN0mu2qgytwq9 WS6NIWk/1y0iZwnDsDojhHdpGYkmVMwJzrP7ckTHAlI3gmCu78FjJkVEgeqSbosw Qrjahp00hdQ8YTETSBLYI0rSzHJ2rybQkHy8cuwe+WDHjjXAZTVkwQfNku3tYoDy XyMa2ADdq9pQyDdPz8ibiCfjgBGKXEyaBB0atQKsN7j38VBOMS4C8rYNauQ33LoR fSa4u1r6Xb9QUDgNg6t/LoPuafCK710iRbAQS6KTfvm81uRmOt9bjrjA7ViHE58p TuTwWE47IrEOzc+Yl0hPrjrxwp0OR0u4Ez55F88kd1jAWbIRpQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNqTVh6hw5pfF/6OfK1y8AgMGhbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODEwYTkxNWQtMWY5OS0z ZmI0LWIwMjAtYTZhOGYwZmQ2N2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDrbgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgh7lLarFHwbT88o6mQtLHerDFRpw0pcwuYBtXvnWQlLwn9AzjzZPzPo6 12Y5xNJ3U3sWaNUbLIjjx/kuQpf4Hh/ehbVLOGM4vXgBZcq1iYjfsdMz5flmoYpB 5yPx6bfEgNF6Gu/OheAYVnUvwk4KtBZm6GfjRfLfCkOIixPTWmtrlFxmv+bnH6CN wVW8skpKKYJObx51wW8Qo6y6xqID8oG9J53reZOSL1cQ72btyiThW8hEXYRx5K/7 Ia9G1ofcb/k6KGNelJkbz0Q61zqaaesghTc5baI5oPap1S7e1dHkVdCFAyz99Ze4 zG2NK7F5MB6cicsLTSj/sgG5PGd5SQ== -----END CERTIFICATE-----Generated at Sat Jun 13 22:32:41 2026 by rpki-client