$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a91177d-9b51-35ce-a8ab-be7377237223.roa File: 8a91177d-9b51-35ce-a8ab-be7377237223.roa (raw, json) Hash identifier: oVyj5fQgae6lfjCEofAz7AvN/P2pBWHdYvAf3mkJX8U= Subject key identifier: F8:9B:7C:55:F3:2B:19:BA:E1:B4:D4:D4:D2:7B:F1:C9:44:81:9A:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F2218201F3B1B2E20B900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a91177d-9b51-35ce-a8ab-be7377237223.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 393775 IP address blocks: 64.199.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:22:18:20:1f:3b:1b:2e:20:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=37ca6f31-7f6e-49df-b48a-a2e4529c785e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:9b:00:5e:09:1c:17:f4:59:fa:48:19:f2: dc:12:6b:cc:cc:13:34:a9:5e:53:bb:45:2d:43:8b: d9:a1:83:e1:6b:2d:cc:6d:5e:e9:f3:09:7d:a6:f0: 90:ef:b7:fe:ab:43:7b:4b:3d:88:46:a5:ca:68:f7: 02:db:22:c3:54:11:c6:e4:6e:db:c9:2c:e3:60:12: a8:5a:4f:92:c7:80:dc:8b:34:8c:31:c4:22:92:ab: ce:41:72:c0:d3:ec:5a:67:8a:a3:15:72:83:b5:0d: 1b:c7:04:f9:f1:7a:22:23:5a:73:ce:96:5b:93:64: 7d:f3:e8:9a:b8:d6:7c:b1:ad:ad:c0:c6:44:72:47: 78:0b:6c:0f:50:d7:e2:e7:81:2d:3a:8f:65:4a:59: bd:5d:9f:49:e4:e5:23:8d:66:20:c1:e3:3a:04:3e: ee:0d:6f:7f:96:a8:26:ea:1c:c6:87:1e:dd:58:bb: 74:d3:d7:38:24:3c:88:41:f8:74:79:b5:46:8a:3b: 61:6c:44:cc:ff:ae:31:11:75:8d:44:37:b3:1a:35: 5b:a3:ab:43:34:d3:9b:d6:51:68:2e:7b:88:bc:3a: 44:31:20:14:5d:2a:31:f0:36:e5:18:bd:59:eb:86: db:69:b7:5e:b9:ea:4f:b2:d3:e5:dd:28:87:41:52: 8b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9B:7C:55:F3:2B:19:BA:E1:B4:D4:D4:D2:7B:F1:C9:44:81:9A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a91177d-9b51-35ce-a8ab-be7377237223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.199.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:cf:32:e6:e3:49:ea:6f:0f:66:77:19:44:2e:5e:9d:3f:78: 2b:55:6f:9a:9d:65:87:2d:67:8b:ca:7f:d7:37:2c:20:22:fd: 7e:fc:17:1a:db:61:43:2f:5b:eb:6c:83:65:45:0e:6e:87:b7: 0d:5d:f7:4f:f5:bd:ae:ff:83:06:96:db:55:fd:d3:2b:69:68: 1c:52:02:c8:c8:a7:0f:9d:82:57:db:29:eb:17:a1:f3:ef:d2: f4:77:f6:b4:04:ac:a7:a7:5f:29:92:d3:b0:4a:84:cc:8d:3f: a8:98:9a:e7:67:72:27:e1:61:e3:0e:64:6e:24:d1:92:a0:b1: df:29:51:03:82:53:41:d1:3c:04:75:a4:7e:20:9d:68:84:c4: ab:cc:87:1e:0d:61:41:2f:db:c2:4c:1b:18:85:1a:71:a3:47: d8:8c:8d:df:4a:04:0f:6f:1d:e7:ca:07:32:03:e4:20:49:09: 9e:54:eb:52:a9:1e:34:40:b3:3a:11:77:18:ed:73:25:80:2e: 1e:60:a7:37:4b:88:0f:86:5e:10:5b:bd:0a:a5:b1:f8:ab:13: b0:ab:b5:29:65:bb:ea:2e:ae:82:f0:6c:ff:2a:95:33:84:ab: 62:97:df:1e:da:92:3a:06:3d:77:1f:68:51:e0:51:04:26:85: 4b:b2:a3:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyIYIB87Gy4guQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MzdjYTZmMzEtN2Y2ZS00OWRmLWI0OGEtYTJlNDUyOWM3ODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCabAF4JHBf0WfpIGfLcEmvMzBM0qV5Tu0Ut Q4vZoYPhay3MbV7p8wl9pvCQ77f+q0N7Sz2IRqXKaPcC2yLDVBHG5G7bySzjYBKo Wk+Sx4DcizSMMcQikqvOQXLA0+xaZ4qjFXKDtQ0bxwT58XoiI1pzzpZbk2R98+ia uNZ8sa2twMZEckd4C2wPUNfi54EtOo9lSlm9XZ9J5OUjjWYgweM6BD7uDW9/lqgm 6hzGhx7dWLt009c4JDyIQfh0ebVGijthbETM/64xEXWNRDezGjVbo6tDNNOb1lFo LnuIvDpEMSAUXSox8DblGL1Z64bbabdeuepPstPl3SiHQVKLswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPibfFXzKxm64bTU1NJ78clEgZqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGE5MTE3N2QtOWI1MS0z NWNlLWE4YWItYmU3Mzc3MjM3MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7PMubjSepvD2Z3GUQuXp0/eCtVb5qdZYctZ4vKf9c3LCAi/X78Fxrb YUMvW+tsg2VFDm6Htw1d90/1va7/gwaW21X90ytpaBxSAsjIpw+dglfbKesXofPv 0vR39rQErKenXymS07BKhMyNP6iYmudncifhYeMOZG4k0ZKgsd8pUQOCU0HRPAR1 pH4gnWiExKvMhx4NYUEv28JMGxiFGnGjR9iMjd9KBA9vHefKBzID5CBJCZ5U61Kp HjRAszoRdxjtcyWALh5gpzdLiA+GXhBbvQqlsfirE7CrtSllu+ouroLwbP8qlTOE q2KX3x7akjoGPXcfaFHgUQQmhUuyo1w= -----END CERTIFICATE-----Generated at Sat Jun 13 19:38:58 2026 by rpki-client