$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa File: a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa (raw, json) Hash identifier: 0pRuPXJ5FXcmSCLV8lpzuw5YsGhciExAKcp/ID0+idI= Subject key identifier: 16:E9:16:D4:3A:9B:C8:3E:02:78:32:C0:44:98:0F:14:64:20:21:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842CCA582D2AA663133580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.187.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2c:ca:58:2d:2a:a6:63:13:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=55768dcc-2472-4b85-b726-e9e4e484ce34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:58:cc:ff:eb:cd:36:b2:4d:80:30:8e:68: 93:aa:8c:18:0c:8f:00:66:76:f2:91:74:14:a4:4f: af:37:47:49:78:89:7a:b6:75:76:55:87:ba:30:3c: 70:b1:a9:6c:21:80:aa:9c:d4:7c:49:fb:c7:8e:e0: 51:af:76:79:ac:16:09:38:56:cb:d2:8c:14:f6:ba: 52:b0:c2:8a:0f:d5:6c:55:5c:e3:75:20:8e:07:b6: ba:a5:0a:a3:2c:11:6d:7c:b6:74:de:ac:04:63:f9: cb:c8:3b:e3:99:2b:f3:06:d9:09:ae:ee:fd:dc:20: 27:09:f0:59:cb:dc:e7:1c:58:bc:25:3e:08:aa:2d: 2d:02:3b:4f:2a:c4:1f:c9:4c:58:e4:f7:ad:b4:d9: f1:e6:23:2e:44:87:71:44:0a:18:f2:c2:98:62:bc: 78:8b:cb:4f:99:1b:ca:ad:60:a7:f9:6b:e6:55:1d: 2e:05:eb:e3:1c:25:3e:d8:3a:7f:21:84:a9:b6:f6: c8:a6:87:c0:1d:a6:92:9a:63:e0:6c:bc:72:1e:97: ce:2c:a7:e1:3d:ef:c4:3d:25:01:e7:0d:07:f2:e3: 88:02:e7:cb:6e:dc:3d:fd:37:57:b1:c3:71:98:ce: f0:36:3d:9f:f6:d5:35:6d:ec:84:ea:33:19:ef:8e: 05:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E9:16:D4:3A:9B:C8:3E:02:78:32:C0:44:98:0F:14:64:20:21:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9fab9a1-b7b9-3b7f-9fff-a240ee658a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:42:b0:25:59:f5:4f:86:bc:5c:4a:86:43:bc:20:e1:22:5a: 72:2d:6c:67:c7:57:4a:ec:bb:92:30:de:8d:5f:09:f4:ac:a8: 53:03:46:88:41:93:eb:cf:9d:91:ca:49:18:e3:5f:03:be:c2: 0b:0f:dd:9e:51:76:fc:c8:fc:2f:5c:c0:f4:7d:03:19:0e:7e: c2:d9:d4:e6:e6:a3:eb:64:bd:4e:fd:13:24:02:40:da:6f:7f: 21:5b:69:8c:d4:c9:92:bd:d0:94:49:ca:41:de:dd:d8:af:58: c2:04:16:3a:5c:86:72:7c:d8:5d:88:69:5c:99:0f:60:e5:bb: f2:bb:b7:a0:26:a7:73:94:d6:70:90:36:a3:58:1b:b1:4e:ae: e3:39:94:8b:f3:15:18:59:3f:27:12:2d:6f:30:e2:d1:45:c1: 02:21:46:1e:54:20:67:af:5e:ea:e9:e4:11:89:2a:88:b8:cb: ac:e9:ed:fc:4a:06:2e:a2:04:d2:8e:f0:a0:46:16:f2:b1:25: b2:69:84:6f:ae:be:2e:2d:48:74:7e:db:ec:55:e0:6d:52:2e: 13:f6:da:8f:64:2d:1c:8a:60:bf:4e:54:a2:68:3a:4e:de:7b: 47:6f:64:2a:4a:04:77:b7:e8:f5:78:98:61:ce:90:3d:7c:a0: 18:00:23:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCzKWC0qpmMTNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NTU3NjhkY2MtMjQ3Mi00Yjg1LWI3MjYtZTllNGU0ODRjZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7xYzP/rzTayTYAwjmiTqowYDI8AZnbykXQU pE+vN0dJeIl6tnV2VYe6MDxwsalsIYCqnNR8SfvHjuBRr3Z5rBYJOFbL0owU9rpS sMKKD9VsVVzjdSCOB7a6pQqjLBFtfLZ03qwEY/nLyDvjmSvzBtkJru793CAnCfBZ y9znHFi8JT4Iqi0tAjtPKsQfyUxY5PettNnx5iMuRIdxRAoY8sKYYrx4i8tPmRvK rWCn+WvmVR0uBevjHCU+2Dp/IYSptvbIpofAHaaSmmPgbLxyHpfOLKfhPe/EPSUB 5w0H8uOIAufLbtw9/TdXscNxmM7wNj2f9tU1beyE6jMZ744F8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbpFtQ6m8g+AngywESYDxRkICEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlmYWI5YTEtYjdiOS0z YjdmLTlmZmYtYTI0MGVlNjU4YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbu/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVCsCVZ9U+GvFxKhkO8IOEiWnItbGfHV0rsu5Iw3o1fCfSsqFMDRohB k+vPnZHKSRjjXwO+wgsP3Z5RdvzI/C9cwPR9AxkOfsLZ1Obmo+tkvU79EyQCQNpv fyFbaYzUyZK90JRJykHe3divWMIEFjpchnJ82F2IaVyZD2Dlu/K7t6Amp3OU1nCQ NqNYG7FOruM5lIvzFRhZPycSLW8w4tFFwQIhRh5UIGevXurp5BGJKoi4y6zp7fxK Bi6iBNKO8KBGFvKxJbJphG+uvi4tSHR+2+xV4G1SLhP22o9kLRyKYL9OVKJoOk7e e0dvZCpKBHe36PV4mGHOkD18oBgAI0Q= -----END CERTIFICATE-----Generated at Sat Jun 13 21:08:22 2026 by rpki-client