$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4461f94-6bf6-3512-a2f6-6cb7f912938a.roa File: b4461f94-6bf6-3512-a2f6-6cb7f912938a.roa (raw, json) Hash identifier: D9dl/CsL1j1MykHb1l/BWWIk17yiqYJcjEZPpN3kSWQ= Subject key identifier: 0F:79:3C:01:F8:4D:14:A3:0C:FE:08:71:FD:8D:9F:0F:5C:73:A6:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F18C6518163056117F52C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4461f94-6bf6-3512-a2f6-6cb7f912938a.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.191.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:18:c6:51:81:63:05:61:17:f5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=cc7e6fcc-13bd-4773-9d64-20c89855ef5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ae:d4:76:14:3a:1f:22:9b:b6:a4:be:ca:92: 4b:08:f4:1d:b0:26:ce:af:60:80:96:77:97:d8:d6: 5e:69:28:00:b4:7e:42:d6:d7:fc:8f:64:5d:33:74: f1:14:93:8a:7c:c7:82:23:42:2e:5e:56:cf:68:c9: 90:ef:f4:ca:a1:8c:a4:c1:90:77:8c:d4:3d:b5:2e: cc:5f:9a:73:b1:d6:a6:15:c6:9f:35:5e:41:fa:d0: ff:77:97:05:9b:03:86:a9:e6:54:94:1d:03:81:e9: 3c:d1:60:3f:37:1d:5d:ea:91:6e:94:45:56:4c:19: 2d:fd:fd:46:d2:33:4c:76:cb:74:65:84:45:bb:95: f5:a2:78:ed:ca:86:8f:b2:62:d1:9c:9c:6e:45:bc: 56:2b:10:27:c1:32:31:10:3b:8f:09:2f:93:d2:80: 58:57:08:d7:03:e6:29:d2:82:11:ac:63:0c:c4:e7: 40:1c:86:68:8e:8d:d6:76:e8:b1:63:20:fa:bc:b8: 62:30:d2:98:3e:be:e2:a5:fb:9f:6c:43:f3:b6:5a: 1d:7b:2d:88:db:2e:3d:25:12:94:37:c0:f3:d9:0c: 07:33:4b:61:d5:1a:dd:98:50:1b:bd:e5:b9:6e:38: c1:82:1a:23:58:ef:9f:14:26:63:c1:88:3e:ea:f8: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:79:3C:01:F8:4D:14:A3:0C:FE:08:71:FD:8D:9F:0F:5C:73:A6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4461f94-6bf6-3512-a2f6-6cb7f912938a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ce:e7:1e:36:18:d1:a0:a9:d8:99:e7:80:28:50:ca:ca:84: 99:59:0e:61:19:0b:68:df:80:f5:7f:da:9e:55:04:50:19:2b: 72:5f:5e:d1:6b:d8:e3:c4:ca:1c:0e:8f:84:6a:e0:65:1d:07: e0:7d:bb:59:ca:af:61:08:0b:b7:45:7a:aa:ac:9a:9a:c7:d4: c0:91:d5:20:46:77:99:9d:98:89:a0:f3:6e:88:af:3e:15:f3: 74:f6:0f:9c:fc:a7:08:17:1f:0a:1d:08:80:79:19:84:66:82: 3d:22:1d:dc:fa:a6:bc:c2:5b:1c:1f:14:83:19:2f:95:23:e7: 4b:6a:1b:4a:f5:69:c8:a4:d2:e9:6f:a3:6f:72:aa:16:51:51: d8:5d:72:1d:91:0b:38:9d:2f:a5:85:ef:cf:8e:8f:47:a6:ca: eb:e1:b0:35:f2:70:f7:9c:58:20:38:d1:04:1e:18:4f:f3:1d: 78:2f:d7:cf:6f:31:85:0f:80:8d:ea:f4:53:76:9d:50:0c:dd: 31:d5:fb:0d:41:70:c8:c9:83:36:27:1b:89:16:e5:d6:6e:6c: 48:2a:6f:bb:60:20:2f:3f:27:00:80:eb:0a:35:15:d1:91:9a: 74:d7:4e:30:06:23:c8:c3:74:b1:03:39:7e:3e:a6:ea:72:cb: d2:dc:48:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxjGUYFjBWEX9SwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2M3ZTZmY2MtMTNiZC00NzczLTlkNjQtMjBjODk4NTVlZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA567UdhQ6HyKbtqS+ypJLCPQdsCbOr2CAlneX 2NZeaSgAtH5C1tf8j2RdM3TxFJOKfMeCI0IuXlbPaMmQ7/TKoYykwZB3jNQ9tS7M X5pzsdamFcafNV5B+tD/d5cFmwOGqeZUlB0Dgek80WA/Nx1d6pFulEVWTBkt/f1G 0jNMdst0ZYRFu5X1onjtyoaPsmLRnJxuRbxWKxAnwTIxEDuPCS+T0oBYVwjXA+Yp 0oIRrGMMxOdAHIZojo3WduixYyD6vLhiMNKYPr7ipfufbEPztlodey2I2y49JRKU N8Dz2QwHM0th1RrdmFAbveW5bjjBghojWO+fFCZjwYg+6vgZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA95PAH4TRSjDP4Icf2Nnw9cc6ZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQ0NjFmOTQtNmJmNi0z NTEyLWEyZjYtNmNiN2Y5MTI5MzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTO5x42GNGgqdiZ54AoUMrKhJlZDmEZC2jfgPV/2p5VBFAZK3JfXtFr 2OPEyhwOj4Rq4GUdB+B9u1nKr2EIC7dFeqqsmprH1MCR1SBGd5mdmImg826Irz4V 83T2D5z8pwgXHwodCIB5GYRmgj0iHdz6przCWxwfFIMZL5Uj50tqG0r1acik0ulv o29yqhZRUdhdch2RCzidL6WF78+Oj0emyuvhsDXycPecWCA40QQeGE/zHXgv189v MYUPgI3q9FN2nVAM3THV+w1BcMjJgzYnG4kW5dZubEgqb7tgIC8/JwCA6wo1FdGR mnTXTjAGI8jDdLEDOX4+pupyy9LcSNM= -----END CERTIFICATE-----Generated at Sat Jun 13 06:07:58 2026 by rpki-client