$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa File: a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa (raw, json) Hash identifier: +XRGHvd8g2cd1VMGKlDNsPS3VPsDKaxSsOCYLMrAIUI= Subject key identifier: 2A:20:04:E3:55:17:E3:11:90:D0:F6:C5:7B:34:AA:B7:C8:F0:84:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F02F96FFC53868EDA2100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 53478 IP address blocks: 207.59.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:02:f9:6f:fc:53:86:8e:da:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=0bdd1210-21fb-48d3-aa36-bb5aab59a99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:89:a9:26:7d:5e:9d:7d:fb:88:da:c3:f9:5c: 40:03:6f:9f:b3:54:e0:73:1d:f3:d3:f6:05:e2:aa: a3:7c:cd:7a:cc:da:7c:b3:f2:03:26:50:0d:d7:71: ab:22:4c:02:91:c1:2d:be:66:09:2e:5a:5a:f2:98: 53:79:27:28:38:b8:ae:c0:79:30:40:33:86:cf:9c: ed:d0:5a:82:f2:d5:20:bf:47:3b:c5:e1:e3:f6:6e: 34:b3:86:f4:b9:36:5f:f7:2d:51:33:7c:5c:40:3a: 8c:17:f6:77:81:73:f4:ed:89:51:5b:94:e8:8b:d7: 83:d6:39:bf:82:de:66:e0:91:b1:fc:50:4c:f7:7e: 1c:ce:89:e6:ef:1a:75:92:40:42:e0:9f:83:69:ca: 8b:60:e4:03:8c:c5:87:e5:5c:df:9b:a0:98:0e:a8: 4e:78:2f:c7:0f:da:20:43:53:28:6b:06:cc:32:74: ba:c6:68:bb:65:22:df:59:42:87:3c:bb:7c:01:fd: 34:bd:53:7e:78:dc:e1:13:6e:4e:d5:c0:02:0d:11: 9f:05:7d:7f:bd:d3:e4:8c:02:86:72:06:e9:f4:fc: 58:c3:24:bd:57:95:34:fb:2c:17:dd:58:7d:60:c8: 85:ad:cd:3a:1c:aa:eb:f5:49:5a:a0:a3:59:ad:e9: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:20:04:E3:55:17:E3:11:90:D0:F6:C5:7B:34:AA:B7:C8:F0:84:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9acaaa3-7eb4-3f38-9029-164c7d5b621a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.59.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b4:44:cb:23:84:6e:f8:f7:74:08:28:87:c3:f9:ba:3f:a8: ae:a0:4a:03:af:e9:e3:29:11:00:9a:76:e6:35:05:9a:17:c1: ec:0b:69:0c:ce:a7:cc:f5:50:b6:e4:b7:86:cd:28:61:20:19: 2e:76:a3:69:04:5d:e4:1c:cf:3a:06:ba:fd:e6:e7:23:53:13: a2:94:4c:7c:97:11:53:44:fe:91:43:3c:51:4b:bd:5b:a9:11: f4:96:6e:e5:a4:43:97:83:3d:f4:2b:61:f5:fc:2b:c7:b7:0c: a0:77:c6:53:09:fc:66:e5:5a:63:a7:ff:39:20:1e:ac:e7:57: bf:21:15:d2:5a:36:c8:a1:b3:24:19:21:d6:d1:ce:18:17:c2: 84:be:6c:70:a4:2f:1c:e1:ec:ce:6c:88:b5:b0:96:2b:7b:d4: 31:16:ca:f2:10:54:f9:06:28:57:70:e7:c6:ae:bf:a2:20:b8: 93:e1:1a:5e:31:4a:21:66:43:a7:70:7f:59:61:70:15:21:22: dd:eb:53:ba:20:23:30:fc:9e:0e:d2:33:b2:b6:c1:9b:61:19: 28:29:83:fd:5b:66:c5:25:ac:1a:bb:fc:dc:e3:1b:c2:36:6b: d1:df:98:fc:8c:88:b6:73:80:75:00:04:66:34:0d:c5:e0:48: d7:2d:6c:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwL5b/xTho7aIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MGJkZDEyMTAtMjFmYi00OGQzLWFhMzYtYmI1YWFiNTlhOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4mpJn1enX37iNrD+VxAA2+fs1Tgcx3z0/YF 4qqjfM16zNp8s/IDJlAN13GrIkwCkcEtvmYJLlpa8phTeScoOLiuwHkwQDOGz5zt 0FqC8tUgv0c7xeHj9m40s4b0uTZf9y1RM3xcQDqMF/Z3gXP07YlRW5Toi9eD1jm/ gt5m4JGx/FBM934czonm7xp1kkBC4J+DacqLYOQDjMWH5Vzfm6CYDqhOeC/HD9og Q1MoawbMMnS6xmi7ZSLfWUKHPLt8Af00vVN+eNzhE25O1cACDRGfBX1/vdPkjAKG cgbp9PxYwyS9V5U0+ywX3Vh9YMiFrc06HKrr9UlaoKNZrelfEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCogBONVF+MRkND2xXs0qrfI8ITiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlhY2FhYTMtN2ViNC0z ZjM4LTkwMjktMTY0YzdkNWI2MjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm0RMsjhG7493QIKIfD+bo/qK6gSgOv6eMpEQCaduY1BZoXwewLaQzO p8z1ULbkt4bNKGEgGS52o2kEXeQczzoGuv3m5yNTE6KUTHyXEVNE/pFDPFFLvVup EfSWbuWkQ5eDPfQrYfX8K8e3DKB3xlMJ/GblWmOn/zkgHqznV78hFdJaNsihsyQZ IdbRzhgXwoS+bHCkLxzh7M5siLWwlit71DEWyvIQVPkGKFdw58auv6IguJPhGl4x SiFmQ6dwf1lhcBUhIt3rU7ogIzD8ng7SM7K2wZthGSgpg/1bZsUlrBq7/NzjG8I2 a9HfmPyMiLZzgHUABGY0DcXgSNctbOw= -----END CERTIFICATE-----Generated at Sat Jun 13 17:36:19 2026 by rpki-client