$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c74043ed-4082-3f49-ab4b-81998e9cedf5.roa File: c74043ed-4082-3f49-ab4b-81998e9cedf5.roa (raw, json) Hash identifier: IB3oJot+I1+23kAoIKIuvnG3Yksxf8jmYDsyZrbASEQ= Subject key identifier: 4D:65:0D:96:B3:7E:52:9B:F5:97:E7:4E:D7:9F:6F:B9:EC:C8:F7:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF8DBCFAA473DA47D1100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c74043ed-4082-3f49-ab4b-81998e9cedf5.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 151.213.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f8:db:cf:aa:47:3d:a4:7d:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=60a23a60-2441-4856-9035-e1607ac7dd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7d:6c:6e:8a:bc:54:f1:0e:76:2a:06:5f:97: 1e:07:9d:9c:cb:8d:91:b1:8c:95:9a:d4:51:54:4d: 53:9b:37:fb:66:4d:a4:de:27:f6:eb:f3:1c:da:7d: af:42:74:8b:f1:7e:06:77:82:45:61:05:2b:e0:2c: 53:6c:70:21:ae:3e:64:a9:99:a8:05:52:d6:15:6a: 11:c2:4b:5c:40:7f:f6:0b:33:af:81:8c:56:5f:f8: 1a:19:5b:eb:b5:d5:d2:39:df:c2:45:71:82:a4:a2: 47:f9:c6:c4:11:39:2d:26:c1:e5:f4:9e:22:b6:cb: 20:23:cb:9c:05:6b:68:e8:2b:83:35:e3:1f:7f:42: c7:0e:c2:18:48:b6:2e:19:2e:d7:33:71:ee:46:60: 59:a9:f8:be:ea:c4:89:15:49:94:e5:83:b4:8e:10: fc:93:cc:a6:1c:61:b1:32:e5:e2:7b:ed:da:54:24: 22:fa:82:2b:5d:c8:ff:53:06:91:7b:16:16:39:1d: 23:7a:b2:01:96:ba:ce:77:05:63:1c:01:c2:75:27: 8a:01:18:21:22:d4:28:80:cf:9a:56:9b:13:f6:1d: 48:a4:86:00:79:f2:1d:79:5c:80:8b:19:05:d2:ab: 2c:e2:6e:ea:4a:f9:8a:14:97:5a:a9:23:46:03:b2: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:65:0D:96:B3:7E:52:9B:F5:97:E7:4E:D7:9F:6F:B9:EC:C8:F7:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c74043ed-4082-3f49-ab4b-81998e9cedf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fc:9c:0b:a8:2b:13:16:e4:d0:ae:44:52:5d:e5:9f:16:4d: f3:96:31:63:5f:c2:2e:4e:9e:c2:0a:66:09:18:67:77:43:ce: d0:ce:93:43:39:99:70:f3:e5:52:84:cb:a2:45:0b:fe:b4:93: c2:e0:e2:9d:53:3b:ac:f8:80:29:0a:97:19:4e:f2:25:a1:fb: 6e:f8:3b:67:ad:01:72:0a:05:3d:4f:9f:fc:0c:2d:9b:f0:79: 20:de:e2:0e:c1:e9:8a:2b:eb:75:3c:0b:24:a6:9e:7d:cf:20: 69:59:f6:e2:43:1c:3a:46:a8:ca:78:c1:33:e4:4d:16:73:a0: 8c:a9:b5:24:da:9c:b9:7a:e1:5b:04:27:60:3b:8c:73:bf:c1: 40:0f:97:dd:28:0c:6c:2b:e0:0f:e0:e7:45:f5:9e:cd:e1:e1: 8a:ab:aa:5b:0a:24:96:8b:b9:ad:1d:02:79:57:1f:dc:c7:6d: 76:9f:ba:00:fc:76:77:38:d7:97:35:6a:49:a1:e6:58:eb:52: 0e:03:70:ed:34:15:45:35:f5:63:b9:c2:91:e6:85:73:00:db: 03:d0:4a:bf:68:7e:3b:07:a9:47:1f:d2:b2:e1:79:22:31:4f: ed:f4:86:a0:66:ce:56:18:f4:01:19:e1:b1:b9:b9:98:39:7d: b7:22:25:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvjbz6pHPaR9EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NjBhMjNhNjAtMjQ0MS00ODU2LTkwMzUtZTE2MDdhYzdkZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n1sboq8VPEOdioGX5ceB52cy42RsYyVmtRR VE1Tmzf7Zk2k3if26/Mc2n2vQnSL8X4Gd4JFYQUr4CxTbHAhrj5kqZmoBVLWFWoR wktcQH/2CzOvgYxWX/gaGVvrtdXSOd/CRXGCpKJH+cbEETktJsHl9J4itssgI8uc BWto6CuDNeMff0LHDsIYSLYuGS7XM3HuRmBZqfi+6sSJFUmU5YO0jhD8k8ymHGGx MuXie+3aVCQi+oIrXcj/UwaRexYWOR0jerIBlrrOdwVjHAHCdSeKARghItQogM+a VpsT9h1IpIYAefIdeVyAixkF0qss4m7qSvmKFJdaqSNGA7KGywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1lDZazflKb9ZfnTtefb7nsyPe5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzc0MDQzZWQtNDA4Mi0z ZjQ5LWFiNGItODE5OThlOWNlZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9XYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD8nAuoKxMW5NCuRFJd5Z8WTfOWMWNfwi5OnsIKZgkYZ3dDztDOk0M5 mXDz5VKEy6JFC/60k8Lg4p1TO6z4gCkKlxlO8iWh+274O2etAXIKBT1Pn/wMLZvw eSDe4g7B6Yor63U8CySmnn3PIGlZ9uJDHDpGqMp4wTPkTRZzoIyptSTanLl64VsE J2A7jHO/wUAPl90oDGwr4A/g50X1ns3h4YqrqlsKJJaLua0dAnlXH9zHbXafugD8 dnc415c1akmh5ljrUg4DcO00FUU19WO5wpHmhXMA2wPQSr9ofjsHqUcf0rLheSIx T+30hqBmzlYY9AEZ4bG5uZg5fbciJXw= -----END CERTIFICATE-----Generated at Sat Jun 13 17:50:11 2026 by rpki-client