$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81d0f20e-f265-3da1-965e-2d9fcae3fe5a.roa File: 81d0f20e-f265-3da1-965e-2d9fcae3fe5a.roa (raw, json) Hash identifier: hkIgq0ZtyxxVSjqNyfE0PyHfFlS7OBOUB/6WY29E3xw= Subject key identifier: 36:76:58:78:34:51:E3:38:CD:11:83:E7:09:07:AF:3C:4B:E0:4C:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0865E03826715BBE6DB33920 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81d0f20e-f265-3da1-965e-2d9fcae3fe5a.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 7029 IP address blocks: 173.191.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:e0:38:26:71:5b:be:6d:b3:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=6bf092f5-4f5e-40c5-9c6f-8017b945d869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:74:bc:df:ef:eb:8c:7a:8e:17:18:cc:44: c9:a4:87:ee:be:ca:70:b4:a8:1e:88:95:b3:58:c9: 46:f7:b6:9d:ef:7f:99:45:9f:c5:0e:89:62:c0:85: da:0f:ce:a2:ae:21:53:ce:88:d8:8e:71:03:df:b7: 1e:1b:4f:36:3f:f2:45:1c:ac:3c:a4:a1:49:01:ff: 5b:b3:e1:a2:04:f9:34:75:88:be:de:47:55:d5:25: a8:22:9d:72:0b:cb:5a:75:8f:5c:fb:f8:b5:4b:3b: d2:e6:4c:46:2b:59:20:89:58:ca:51:29:03:af:fb: e3:68:02:b6:49:ee:2a:27:cb:a3:8c:5f:65:b1:9b: ee:f9:4c:be:36:8d:52:71:18:cf:14:c6:dd:1c:1a: ae:5f:78:18:2e:76:9b:e1:e7:f2:b8:f5:6b:f5:60: b8:7b:38:ba:a5:a3:4e:3f:9c:9b:dc:83:11:fb:07: 1e:ef:d6:cb:fa:b7:0f:b5:bd:5e:9f:67:b9:ef:8d: 5c:da:d0:3b:04:f1:be:ba:32:3c:b5:4e:1e:a0:81: de:72:3d:eb:19:15:ff:b2:ef:a0:e8:5a:e3:32:1d: b0:63:8d:31:4b:3e:ab:0f:9b:39:3c:5a:9e:51:b2: 29:a2:49:a0:56:26:d8:c7:24:35:1a:3d:d0:a4:dc: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:76:58:78:34:51:E3:38:CD:11:83:E7:09:07:AF:3C:4B:E0:4C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81d0f20e-f265-3da1-965e-2d9fcae3fe5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d9:32:8f:64:78:18:27:ec:45:ba:3a:18:01:12:28:64:2c: 75:74:0a:68:ee:1d:e2:ff:f7:bd:5c:c6:a7:a8:95:33:c7:65: 51:3c:67:4b:00:4c:fb:f7:4e:1c:46:d0:fa:df:59:e0:22:a1: 0d:da:1e:15:4b:a5:e6:0b:31:f2:a5:b8:ce:2a:6a:da:fe:18: 58:bf:64:d5:56:e8:c4:58:14:2c:3e:32:1a:f9:60:5e:92:47: a0:5d:dc:75:9d:73:b3:a1:25:a3:19:22:2d:0b:a5:4b:4a:72: 91:e5:5d:7d:59:58:c0:27:2a:9d:48:c9:69:c0:20:5d:26:a0: 58:b6:81:56:93:dd:55:35:0d:e7:be:95:29:cf:67:ea:80:3d: 95:00:f8:7b:37:5b:71:f9:ea:97:9d:88:28:94:2e:55:9e:dc: 06:4d:71:55:7b:67:8d:8e:52:59:14:d4:ea:3b:7b:46:b0:8a: 44:5d:dc:49:44:fc:9f:79:af:37:71:a5:c2:e8:fa:e9:de:a1: de:97:08:d2:ab:9d:27:2f:a0:a1:fb:7a:04:74:b6:42:19:0f: 3e:82:14:e9:31:54:35:a3:68:73:3c:ba:fa:3d:a6:5c:76:ee: 92:c5:31:70:39:1a:39:f2:93:ef:ff:32:bd:c2:61:de:07:32: ca:5f:ff:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZeA4JnFbvm2zOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk NmJmMDkyZjUtNGY1ZS00MGM1LTljNmYtODAxN2I5NDVkODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxF0vN/v64x6jhcYzETJpIfuvspwtKgeiJWz WMlG97ad73+ZRZ/FDoliwIXaD86iriFTzojYjnED37ceG082P/JFHKw8pKFJAf9b s+GiBPk0dYi+3kdV1SWoIp1yC8tadY9c+/i1SzvS5kxGK1kgiVjKUSkDr/vjaAK2 Se4qJ8ujjF9lsZvu+Uy+No1ScRjPFMbdHBquX3gYLnab4efyuPVr9WC4ezi6paNO P5yb3IMR+wce79bL+rcPtb1en2e5741c2tA7BPG+ujI8tU4eoIHecj3rGRX/su+g 6FrjMh2wY40xSz6rD5s5PFqeUbIpokmgVibYxyQ1Gj3QpNwv4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ2WHg0UeM4zRGD5wkHrzxL4EzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODFkMGYyMGUtZjI2NS0z ZGExLTk2NWUtMmQ5ZmNhZTNmZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrZMo9keBgn7EW6OhgBEihkLHV0CmjuHeL/971cxqeolTPHZVE8Z0sA TPv3ThxG0PrfWeAioQ3aHhVLpeYLMfKluM4qatr+GFi/ZNVW6MRYFCw+Mhr5YF6S R6Bd3HWdc7OhJaMZIi0LpUtKcpHlXX1ZWMAnKp1IyWnAIF0moFi2gVaT3VU1Dee+ lSnPZ+qAPZUA+Hs3W3H56pediCiULlWe3AZNcVV7Z42OUlkU1Oo7e0awikRd3ElE /J95rzdxpcLo+uneod6XCNKrnScvoKH7egR0tkIZDz6CFOkxVDWjaHM8uvo9plx2 7pLFMXA5Gjnyk+//Mr3CYd4HMspf/xs= -----END CERTIFICATE-----Generated at Sat Jun 13 07:23:50 2026 by rpki-client