$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae53193a-5028-35cc-b3d0-cec8eba63c94.roa File: ae53193a-5028-35cc-b3d0-cec8eba63c94.roa (raw, json) Hash identifier: hVTaUfhFd8Bbj6+mBAm48XgBKUkrJ1rdAlrCAh7Kdpw= Subject key identifier: 93:A6:33:D4:B4:22:54:5F:42:F6:C0:57:3A:EF:A6:9A:B7:FE:F3:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF9CD9847F76B80DA5000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae53193a-5028-35cc-b3d0-cec8eba63c94.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 174.131.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f9:cd:98:47:f7:6b:80:da:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=8c30b608-af1a-42b2-84ae-585d1e95a970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:58:f4:9e:91:b6:6d:53:7a:8a:0e:85:c6:56: a5:6d:e8:a8:ed:32:b9:a3:30:ec:58:d4:19:26:50: 19:1c:bc:07:12:e0:28:75:4f:2c:01:18:fc:f3:d2: 09:e0:2e:12:71:1a:d6:09:44:3b:79:c2:2f:11:6b: 97:b1:ee:05:e0:98:34:77:23:59:53:12:59:71:ad: 1c:c8:d0:70:18:db:c1:09:4a:79:a4:e3:65:18:ce: f4:42:3e:78:ba:a3:ec:b6:cc:e4:c3:87:65:3b:b1: a3:c8:23:b3:64:49:df:1c:66:ca:48:a0:f8:a9:9d: e7:a3:00:95:8a:6f:12:61:2e:90:e0:f0:cc:80:91: bd:72:be:e3:da:95:b2:6e:93:98:a9:58:5e:25:86: 36:00:17:90:77:72:48:12:95:a6:29:68:39:36:d3: 01:e7:d6:c0:b0:e3:30:70:2f:4a:12:c1:93:1f:62: b7:78:2a:af:24:90:76:71:94:e4:9a:72:71:7a:ea: cb:94:64:e5:49:33:1b:63:a7:a5:a8:a1:2d:b8:1f: 6e:4e:88:66:41:e6:1c:97:7c:6f:e8:ff:81:d7:4f: 10:5b:ae:c3:82:6c:a9:83:90:bd:97:b8:0a:38:81: 66:3c:b7:62:a8:a4:48:44:77:cd:16:b7:3e:3f:3a: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A6:33:D4:B4:22:54:5F:42:F6:C0:57:3A:EF:A6:9A:B7:FE:F3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae53193a-5028-35cc-b3d0-cec8eba63c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:94:cf:57:a8:0a:92:95:9c:68:d9:5c:63:59:0a:38:90:43: 3f:0d:14:2f:82:55:36:72:e6:2f:9b:17:40:19:04:78:5f:04: eb:1e:8a:8f:83:dc:cf:98:f6:50:1b:fd:e9:56:5c:f3:73:0d: 38:cf:94:ff:92:81:d0:79:c4:fd:21:9b:c9:4b:0d:ee:c4:c2: 1d:e8:1c:ad:f9:c3:ad:6a:5a:b9:68:d9:f0:ce:57:5a:a0:e9: e1:a5:ad:99:ab:95:f0:c2:81:46:97:1a:a8:5c:34:96:62:2d: 27:9e:e3:fe:0d:70:0e:da:7a:6f:3d:0b:c3:ec:57:76:7a:70: b9:ee:e0:42:78:03:3f:70:3c:5c:e5:a1:4e:94:a5:c9:6f:65: 88:e7:7e:5e:6e:58:47:8a:40:5d:b0:e8:19:01:ce:29:40:8e: d9:19:7f:57:1f:b9:a2:87:12:a0:4f:41:3a:0c:a8:c5:85:86: ed:e5:16:4e:fa:40:54:58:94:1d:43:3c:d5:8b:5a:1b:8d:39: e5:21:9d:b9:46:1b:9d:05:79:05:b0:61:ca:5a:f4:bf:cf:47: 1f:37:2e:5b:39:f9:78:d3:53:6b:6b:e0:7d:43:7e:fd:ad:fb: 53:85:1e:4d:84:9f:bf:c3:4a:23:d4:f9:eb:8e:1f:81:3e:b8: 18:ce:c1:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvnNmEf3a4DaUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk OGMzMGI2MDgtYWYxYS00MmIyLTg0YWUtNTg1ZDFlOTVhOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVj0npG2bVN6ig6Fxlalbeio7TK5ozDsWNQZ JlAZHLwHEuAodU8sARj889IJ4C4ScRrWCUQ7ecIvEWuXse4F4Jg0dyNZUxJZca0c yNBwGNvBCUp5pONlGM70Qj54uqPstszkw4dlO7GjyCOzZEnfHGbKSKD4qZ3nowCV im8SYS6Q4PDMgJG9cr7j2pWybpOYqVheJYY2ABeQd3JIEpWmKWg5NtMB59bAsOMw cC9KEsGTH2K3eCqvJJB2cZTkmnJxeurLlGTlSTMbY6elqKEtuB9uTohmQeYcl3xv 6P+B108QW67Dgmypg5C9l7gKOIFmPLdiqKRIRHfNFrc+Pzow4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOmM9S0IlRfQvbAVzrvppq3/vOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWU1MzE5M2EtNTAyOC0z NWNjLWIzZDAtY2VjOGViYTYzYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroOkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqUz1eoCpKVnGjZXGNZCjiQQz8NFC+CVTZy5i+bF0AZBHhfBOseio+D 3M+Y9lAb/elWXPNzDTjPlP+SgdB5xP0hm8lLDe7Ewh3oHK35w61qWrlo2fDOV1qg 6eGlrZmrlfDCgUaXGqhcNJZiLSee4/4NcA7aem89C8PsV3Z6cLnu4EJ4Az9wPFzl oU6UpclvZYjnfl5uWEeKQF2w6BkBzilAjtkZf1cfuaKHEqBPQToMqMWFhu3lFk76 QFRYlB1DPNWLWhuNOeUhnblGG50FeQWwYcpa9L/PRx83Lls5+XjTU2tr4H1Dfv2t +1OFHk2En7/DSiPU+euOH4E+uBjOweo= -----END CERTIFICATE-----Generated at Sat Jun 13 10:13:03 2026 by rpki-client