$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa File: 871d8d50-3938-3054-a9bb-27338048e4d9.roa (raw, json) Hash identifier: kM7ovNoQF7tsCS84r/g0BIxl4pP/cMhLVgtE0qDjeYM= Subject key identifier: F5:CF:BA:8D:5F:8E:F7:9B:8D:63:0B:76:28:C3:E8:36:9E:15:B7:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F22EFE406654C03737E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.213.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:22:ef:e4:06:65:4c:03:73:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=cf3be1bc-422f-4de0-a011-9be1f57758da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b2:f0:06:b3:b3:00:58:75:7a:94:3e:ad:83: a0:dd:fb:8e:01:42:71:23:b8:27:10:54:d4:05:7c: 21:62:c8:67:91:77:b4:23:d3:b2:c4:52:f3:31:4b: ef:50:ca:af:d8:81:27:46:fd:e3:38:a1:5e:35:59: 55:dc:45:eb:43:35:49:a3:2d:56:24:d4:6c:c9:0e: 02:b4:c2:3b:34:ab:df:81:ea:d4:79:55:05:79:dd: e9:3c:11:f9:a7:b4:50:9b:44:75:51:28:85:5c:e4: f6:53:6a:1e:81:ed:12:4a:af:90:75:7c:31:55:bd: e9:6d:ca:4b:da:33:d3:4b:d4:c0:88:5a:5a:84:65: 4e:34:d0:da:89:38:34:86:b7:ea:e8:29:11:b3:f1: aa:63:87:34:68:85:1e:d1:cb:2c:6a:87:40:4b:9e: 51:a5:b7:d6:81:2f:2b:27:90:24:ad:e9:dc:15:e2: ac:87:e6:d2:cc:5a:86:57:14:79:97:4b:cf:7d:37: 30:29:ba:86:58:72:83:b3:05:79:37:25:38:bf:b5: 41:bd:22:7c:9a:0d:74:ec:e6:8e:ea:ac:2b:e8:fe: 0b:27:53:4a:b2:0f:c2:34:34:ed:13:19:17:34:dd: 75:2d:4b:91:c3:a9:bf:56:28:68:da:96:cf:37:79: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CF:BA:8D:5F:8E:F7:9B:8D:63:0B:76:28:C3:E8:36:9E:15:B7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c9:ab:b1:90:e5:66:f6:99:7c:6f:fd:fe:95:4b:86:e3:e0: 24:fd:cb:69:48:f5:95:83:12:69:f4:8c:f5:b2:da:5f:48:b9: 3d:1d:97:74:93:4d:50:89:de:65:37:8d:e3:04:5e:ef:76:ff: 82:60:69:7b:8f:54:09:5a:88:0f:e4:ce:9a:04:d2:47:fe:de: 2e:b0:63:19:ec:1a:2b:49:f4:01:06:db:1e:4e:11:e3:e1:9f: 7a:41:74:aa:e1:ae:4e:5b:59:4c:cb:16:b2:6e:1c:92:b6:e6: 97:c1:0f:d1:fb:33:84:f5:93:bc:b4:1c:d8:72:e7:36:ec:39: b3:16:37:a6:1f:f9:8f:ed:d2:84:af:85:dc:b3:cd:b0:bc:ef: 49:75:73:c6:3c:02:61:99:7f:7f:d0:92:90:dc:6f:47:29:ce: 8f:a6:fe:6a:1a:2d:ff:79:f5:39:06:43:38:d2:b7:3a:93:ee: 14:5a:06:a4:58:5c:25:99:02:7a:e2:54:e9:30:97:8e:4a:af: 21:5a:1c:00:48:72:41:1c:39:d4:16:94:4b:b0:d0:c3:da:89: 84:d2:01:8c:52:9e:76:35:eb:d7:37:c5:31:f7:63:d5:d0:b4: 83:a3:99:af:6d:57:27:6b:5c:e3:34:d4:f5:20:1c:e4:0c:b4: 4d:b7:7d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyLv5AZlTANzfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2YzYmUxYmMtNDIyZi00ZGUwLWEwMTEtOWJlMWY1Nzc1OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrLwBrOzAFh1epQ+rYOg3fuOAUJxI7gnEFTU BXwhYshnkXe0I9OyxFLzMUvvUMqv2IEnRv3jOKFeNVlV3EXrQzVJoy1WJNRsyQ4C tMI7NKvfgerUeVUFed3pPBH5p7RQm0R1USiFXOT2U2oege0SSq+QdXwxVb3pbcpL 2jPTS9TAiFpahGVONNDaiTg0hrfq6CkRs/GqY4c0aIUe0cssaodAS55RpbfWgS8r J5AkrencFeKsh+bSzFqGVxR5l0vPfTcwKbqGWHKDswV5NyU4v7VBvSJ8mg107OaO 6qwr6P4LJ1NKsg/CNDTtExkXNN11LUuRw6m/Viho2pbPN3kKFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXPuo1fjvebjWMLdijD6DaeFbfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODcxZDhkNTAtMzkzOC0z MDU0LWE5YmItMjczMzgwNDhlNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErdWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILJq7GQ5Wb2mXxv/f6VS4bj4CT9y2lI9ZWDEmn0jPWy2l9IuT0dl3ST TVCJ3mU3jeMEXu92/4JgaXuPVAlaiA/kzpoE0kf+3i6wYxnsGitJ9AEG2x5OEePh n3pBdKrhrk5bWUzLFrJuHJK25pfBD9H7M4T1k7y0HNhy5zbsObMWN6Yf+Y/t0oSv hdyzzbC870l1c8Y8AmGZf3/QkpDcb0cpzo+m/moaLf959TkGQzjStzqT7hRaBqRY XCWZAnriVOkwl45KryFaHABIckEcOdQWlEuw0MPaiYTSAYxSnnY169c3xTH3Y9XQ tIOjma9tVydrXOM01PUgHOQMtE23fQg= -----END CERTIFICATE-----Generated at Sat Jun 13 18:57:28 2026 by rpki-client