$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f78ec3-bef5-3e67-aac9-7f57e4e6c23d.roa File: a6f78ec3-bef5-3e67-aac9-7f57e4e6c23d.roa (raw, json) Hash identifier: eDCZYNuxW+yX+TDSjkSWlLvyGTvSwglykcbDDOAciXI= Subject key identifier: 4F:19:56:7C:2D:7F:13:D1:64:73:6A:A5:B6:4C:89:D0:4A:3B:FD:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E18AF06D5CF6CDFA3035D0F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f78ec3-bef5-3e67-aac9-7f57e4e6c23d.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.189.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:af:06:d5:cf:6c:df:a3:03:5d:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=6208ba2a-f907-4f5c-9e36-395a4574183c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:d5:46:7e:45:0e:86:96:70:e0:b0:e5:74: 9f:29:7b:fc:5d:08:b0:a9:fa:19:ff:a8:48:c6:82: 02:83:23:09:00:83:c3:30:62:a4:1a:c9:b7:2c:d2: 08:fd:52:4d:86:17:72:dd:32:37:a3:f0:1f:0d:1c: 5f:b7:8f:e3:25:e2:d0:91:32:f9:50:ca:1f:b2:6d: c1:e7:52:7b:bd:5e:13:b3:92:99:53:4b:79:f2:bc: 93:21:88:42:95:bd:bd:4b:93:46:3a:9b:6e:8b:60: 0d:70:25:24:ef:6d:79:5f:82:01:cc:88:35:1c:6a: 77:48:97:86:63:17:85:02:8b:20:54:91:87:cd:e8: 65:cd:34:f9:ba:b1:30:4d:ce:29:b6:d9:0b:72:cb: 09:7a:f2:c6:13:c1:36:f9:eb:d6:e2:61:1d:2b:e0: 84:f2:ec:b0:3b:1b:d3:21:79:2e:5e:57:00:46:db: 96:d4:50:1d:fa:2c:c9:ad:1b:63:0e:57:07:4e:2b: 61:d6:ef:cc:e8:1e:2b:ed:97:b4:4f:b3:9a:73:2f: 57:ac:dd:c0:ba:58:6f:c8:a3:24:2d:12:ba:4f:30: 83:94:3d:8e:da:6b:3d:d1:53:d1:c1:53:67:7a:73: 84:cb:6e:81:6b:68:af:d8:0c:32:c7:9d:15:71:58: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:19:56:7C:2D:7F:13:D1:64:73:6A:A5:B6:4C:89:D0:4A:3B:FD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f78ec3-bef5-3e67-aac9-7f57e4e6c23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a9:28:03:3b:27:2b:7a:49:f8:7c:a5:06:34:a1:98:a7:ae: 3b:85:2c:c3:f3:03:de:b5:28:62:66:cc:0d:41:c8:1f:0f:76: 82:72:12:38:7c:fb:95:8a:f3:7d:e8:f3:90:c8:85:dc:5d:c8: 4d:9c:40:79:5c:c2:e2:da:26:a6:83:63:2a:ed:02:d8:0c:58: 42:86:e2:b0:10:1f:50:12:51:b0:0a:24:45:af:c2:0e:60:4e: 93:77:2c:48:02:4a:e6:03:28:99:cc:55:87:ab:97:3a:44:27: ea:0e:1d:8d:e1:12:c5:7a:3f:9f:6b:0e:62:d7:52:5a:bf:00: c9:0d:a7:24:88:fc:f0:0e:84:20:46:f0:1e:99:f0:cf:88:eb: 51:72:81:48:3e:66:19:62:52:f9:f9:de:89:ed:52:c3:30:cd: 5d:5f:bb:ac:23:95:e0:91:0a:46:04:10:d8:cf:e5:be:24:89: 73:6a:bc:8c:66:5a:64:b1:00:2b:6f:9b:8b:d0:43:15:49:db: 6e:7c:f2:c5:56:c4:0c:0b:6a:60:cf:00:68:0d:43:9f:e3:7f: 6f:d9:42:7d:fd:d0:36:cb:37:7e:b8:e8:64:e3:ad:54:fd:3c: c7:c1:c6:c0:e3:99:dc:37:49:9f:5c:67:9e:e9:87:ee:c8:b7: b2:8b:26:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrwbVz2zfowNdD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk NjIwOGJhMmEtZjkwNy00ZjVjLTllMzYtMzk1YTQ1NzQxODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11PVRn5FDoaWcOCw5XSfKXv8XQiwqfoZ/6hI xoICgyMJAIPDMGKkGsm3LNII/VJNhhdy3TI3o/AfDRxft4/jJeLQkTL5UMofsm3B 51J7vV4Ts5KZU0t58ryTIYhClb29S5NGOptui2ANcCUk7215X4IBzIg1HGp3SJeG YxeFAosgVJGHzehlzTT5urEwTc4pttkLcssJevLGE8E2+evW4mEdK+CE8uywOxvT IXkuXlcARtuW1FAd+izJrRtjDlcHTith1u/M6B4r7Ze0T7Oacy9XrN3AulhvyKMk LRK6TzCDlD2O2ms90VPRwVNnenOEy26Ba2iv2Awyx50VcVi33wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8ZVnwtfxPRZHNqpbZMidBKO/2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTZmNzhlYzMtYmVmNS0z ZTY3LWFhYzktN2Y1N2U0ZTZjMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb3SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABapKAM7Jyt6Sfh8pQY0oZinrjuFLMPzA961KGJmzA1ByB8PdoJyEjh8 +5WK833o85DIhdxdyE2cQHlcwuLaJqaDYyrtAtgMWEKG4rAQH1ASUbAKJEWvwg5g TpN3LEgCSuYDKJnMVYerlzpEJ+oOHY3hEsV6P59rDmLXUlq/AMkNpySI/PAOhCBG 8B6Z8M+I61FygUg+ZhliUvn53ontUsMwzV1fu6wjleCRCkYEENjP5b4kiXNqvIxm WmSxACtvm4vQQxVJ22588sVWxAwLamDPAGgNQ5/jf2/ZQn390DbLN3646GTjrVT9 PMfBxsDjmdw3SZ9cZ57ph+7It7KLJnA= -----END CERTIFICATE-----Generated at Sat Jun 13 08:38:48 2026 by rpki-client