$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb48a02a-551b-382a-abd0-23a66116f121.roa File: cb48a02a-551b-382a-abd0-23a66116f121.roa (raw, json) Hash identifier: sLuODItzQIAMCN/TiD+qYXin7ryVwoz0N0WguE76/NM= Subject key identifier: 4D:13:4F:83:6C:E9:1D:A2:28:5B:F1:79:91:0B:AA:04:62:85:36:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842BDBCB03DA578BAB6AD0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb48a02a-551b-382a-abd0-23a66116f121.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.189.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2b:db:cb:03:da:57:8b:ab:6a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=b7a08755-bb6b-450c-b5d3-ee04b7c9eb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:27:83:5d:3b:69:b1:94:8d:8d:78:31:e4: 8a:b1:26:44:40:91:02:9f:ef:c9:a1:00:55:dd:53: bd:52:96:49:9f:cc:ef:ad:37:d4:fa:a2:ba:c4:65: 98:38:1c:48:6b:1a:7c:b6:d5:b1:00:cd:76:27:e6: 5d:34:9d:2e:37:d8:3b:0f:92:cb:2b:5f:54:c2:c6: f4:c1:4d:ae:17:ef:74:c9:66:07:8f:0e:5c:3c:ee: e1:d7:e8:2c:75:a4:8a:7d:c7:de:c9:a7:be:6b:55: f6:68:4e:93:ae:41:9e:ea:19:9b:66:96:90:56:69: 87:3a:bb:c5:ea:02:c5:f3:2c:35:e6:08:97:43:31: 0a:1e:92:7a:90:a7:89:a9:4b:fd:6e:ac:16:48:dd: 40:1b:fa:bc:98:82:8c:f6:ac:ee:51:13:58:76:9b: 75:2e:92:e2:32:1b:a9:0a:81:60:ff:8b:0c:6f:7f: de:e7:2b:c2:ba:f3:be:09:4f:46:05:f8:82:bc:84: f8:ce:a5:ec:fc:0a:2a:3d:02:29:07:89:19:c7:fd: 16:05:fa:c6:ae:25:0d:cf:35:a6:41:c5:bc:d0:1a: c7:6f:4d:f3:f2:ed:a7:1c:18:9e:ba:78:dc:ca:4a: 15:52:63:f3:11:2a:88:ea:fa:68:e7:6e:41:fd:c2: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:13:4F:83:6C:E9:1D:A2:28:5B:F1:79:91:0B:AA:04:62:85:36:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb48a02a-551b-382a-abd0-23a66116f121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4c:d5:16:d8:91:95:0c:2e:fc:98:4b:55:5a:38:1a:2d:00: 4a:39:d4:f4:d8:4a:a3:d3:e0:ae:ad:d7:f2:94:6b:7d:99:80: e3:8a:49:41:12:5c:85:a5:ee:e4:08:22:09:ab:b3:00:73:70: 81:5e:9f:b3:46:65:7f:19:fa:0d:fb:e4:7c:68:21:ab:cc:52: 56:ff:28:9b:9b:39:10:54:c7:1f:1c:05:21:81:4a:28:65:e5: 70:ab:96:bc:31:2a:40:fd:00:9c:0b:0c:fd:14:25:b4:b4:26: cd:c4:2b:51:a0:1a:fd:44:f2:a5:3f:26:a6:03:6f:f4:e7:38: 67:3f:12:e3:87:c1:05:4a:6b:09:27:3c:97:77:20:13:c7:21: 11:1b:a5:a3:21:6f:7a:44:21:db:9d:8b:35:b6:3a:c1:e7:9c: 4d:fa:c8:3f:6a:d9:fe:a5:ff:9c:dc:52:7c:e4:8c:25:d8:c6: 89:8e:d1:5f:03:33:a3:32:ca:3a:86:a5:7b:56:45:4c:b1:b7: 7e:4e:8f:1e:04:cf:d2:7b:33:2a:5a:47:c1:16:7a:58:46:27: 6e:68:3d:32:eb:3d:70:96:f7:41:49:ce:9a:5a:c6:64:56:35: 05:4f:a2:b8:e8:c1:cc:4e:70:e1:2d:32:09:dc:ed:01:98:b5: a0:a2:ff:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCvbywPaV4uratAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk YjdhMDg3NTUtYmI2Yi00NTBjLWI1ZDMtZWUwNGI3YzllYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF4ng107abGUjY14MeSKsSZEQJECn+/JoQBV 3VO9UpZJn8zvrTfU+qK6xGWYOBxIaxp8ttWxAM12J+ZdNJ0uN9g7D5LLK19Uwsb0 wU2uF+90yWYHjw5cPO7h1+gsdaSKfcfeyae+a1X2aE6TrkGe6hmbZpaQVmmHOrvF 6gLF8yw15giXQzEKHpJ6kKeJqUv9bqwWSN1AG/q8mIKM9qzuURNYdpt1LpLiMhup CoFg/4sMb3/e5yvCuvO+CU9GBfiCvIT4zqXs/AoqPQIpB4kZx/0WBfrGriUNzzWm QcW80BrHb03z8u2nHBieunjcykoVUmPzESqI6vpo525B/cJCGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0TT4Ns6R2iKFvxeZELqgRihTZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2I0OGEwMmEtNTUxYi0z ODJhLWFiZDAtMjNhNjYxMTZmMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVM1RbYkZUMLvyYS1VaOBotAEo51PTYSqPT4K6t1/KUa32ZgOOKSUES XIWl7uQIIgmrswBzcIFen7NGZX8Z+g375HxoIavMUlb/KJubORBUxx8cBSGBSihl 5XCrlrwxKkD9AJwLDP0UJbS0Js3EK1GgGv1E8qU/JqYDb/TnOGc/EuOHwQVKawkn PJd3IBPHIREbpaMhb3pEIdudizW2OsHnnE36yD9q2f6l/5zcUnzkjCXYxomO0V8D M6MyyjqGpXtWRUyxt35Ojx4Ez9J7MypaR8EWelhGJ25oPTLrPXCW90FJzppaxmRW NQVPorjowcxOcOEtMgnc7QGYtaCi/yg= -----END CERTIFICATE-----Generated at Sat Jun 13 20:53:42 2026 by rpki-client