$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa File: f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa (raw, json) Hash identifier: Q2GGXxZXHw69JNv3OA9jFuxGuEqNQ4Xq+oihaSfJ8Tg= Subject key identifier: C0:2B:08:1D:88:77:3D:4D:C3:82:E4:41:D9:56:7D:CE:D0:F8:E5:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFBC986515007065E1540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 216.153.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fb:c9:86:51:50:07:06:5e:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=15bafc70-a7d0-4b5d-b91b-d1aeb36143d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:a0:32:f9:0d:d5:ed:a8:48:a6:7d:1e:23: 84:48:15:ea:07:fe:8a:af:15:7a:57:26:34:75:68: a5:04:6d:f8:02:85:91:ed:b0:66:f9:e9:5e:a3:19: de:e5:e0:05:83:de:0e:80:cb:5a:9a:34:68:01:c7: 70:f4:0e:6a:75:09:d0:5b:fa:fd:37:95:57:cd:33: 66:ee:8d:04:05:47:bb:12:c2:43:3f:7e:ae:0b:32: ad:7e:16:be:ea:13:83:ac:15:60:7b:2a:ef:1a:13: bc:49:df:62:e8:54:df:13:b4:09:1e:a2:61:3a:d3: 3d:d1:59:f0:0b:80:22:d2:e6:f3:b6:85:ae:7d:c6: e2:b7:47:ef:85:b3:36:f8:03:4f:31:72:83:d1:4e: 3c:7d:e3:97:72:40:91:7a:58:8c:19:ce:91:85:d0: 3e:01:10:8b:8b:b0:fa:e8:2e:f9:5f:9d:5a:90:d5: bf:cc:e4:1e:02:37:2e:5d:2b:bd:67:ce:11:6e:22: 73:ca:ef:fc:4f:6c:f4:80:40:52:8b:a1:8e:d0:6e: 66:03:14:70:8d:86:91:90:14:0d:fb:79:50:13:59: f3:d9:c9:95:ac:ea:c5:78:c9:34:22:a4:e9:0a:12: a7:45:11:c8:d1:f8:14:73:d0:eb:d8:50:6e:92:7d: 7e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2B:08:1D:88:77:3D:4D:C3:82:E4:41:D9:56:7D:CE:D0:F8:E5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.153.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9f:8b:16:07:31:e3:f4:c4:91:81:f7:61:10:fd:0d:0b:b6: 4b:58:42:f6:44:74:08:c6:ba:92:12:25:f3:99:50:8e:3c:7c: bb:b0:b6:cf:7e:4a:ac:16:21:ee:38:5e:05:c3:2d:f7:da:27: 2e:65:f3:b1:36:de:01:87:3c:c3:a5:2f:ed:06:ac:24:2e:a6: 97:b0:34:1e:a4:9a:18:41:fe:97:65:08:ed:9c:29:b6:c0:bb: 1b:32:4e:41:04:76:a9:48:65:d0:11:64:71:9b:fa:42:10:ff: 5b:1b:8d:cc:7a:11:64:55:e2:b5:b7:b0:c8:0f:d7:91:ec:33: 06:45:89:3f:38:d8:26:2d:07:d0:7e:15:9f:94:6e:ff:9f:98: 39:52:44:8a:4f:0a:25:48:d2:9b:aa:fe:b9:cf:8e:30:95:60: c0:17:31:4b:73:91:19:b3:d9:5b:7c:7f:21:61:e5:2c:3d:36: 8b:a5:b5:0e:88:01:87:30:22:42:c3:d1:2b:12:74:74:5e:da: a6:dd:c8:1d:ab:46:21:38:25:ef:c7:34:f9:0f:04:bb:23:62: e0:67:4b:8b:32:b7:90:d5:77:9d:04:5b:61:cf:86:6d:11:04: f7:bc:02:4b:ca:01:cb:79:29:fc:3f:52:87:b5:53:13:a8:ac: 57:a8:8d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvvJhlFQBwZeFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MTViYWZjNzAtYTdkMC00YjVkLWI5MWItZDFhZWIzNjE0M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwWgMvkN1e2oSKZ9HiOESBXqB/6KrxV6VyY0 dWilBG34AoWR7bBm+eleoxne5eAFg94OgMtamjRoAcdw9A5qdQnQW/r9N5VXzTNm 7o0EBUe7EsJDP36uCzKtfha+6hODrBVgeyrvGhO8Sd9i6FTfE7QJHqJhOtM90Vnw C4Ai0ubztoWufcbit0fvhbM2+ANPMXKD0U48feOXckCReliMGc6RhdA+ARCLi7D6 6C75X51akNW/zOQeAjcuXSu9Z84RbiJzyu/8T2z0gEBSi6GO0G5mAxRwjYaRkBQN +3lQE1nz2cmVrOrFeMk0IqTpChKnRRHI0fgUc9Dr2FBukn1+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMArCB2Idz1Nw4LkQdlWfc7Q+OUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjA0ZGYzZDEtOTRmZC0z ZTg2LWFiMDMtOGIwZGY3NGQwZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2JmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2fixYHMeP0xJGB92EQ/Q0LtktYQvZEdAjGupISJfOZUI48fLuwts9+ SqwWIe44XgXDLffaJy5l87E23gGHPMOlL+0GrCQuppewNB6kmhhB/pdlCO2cKbbA uxsyTkEEdqlIZdARZHGb+kIQ/1sbjcx6EWRV4rW3sMgP15HsMwZFiT842CYtB9B+ FZ+Ubv+fmDlSRIpPCiVI0puq/rnPjjCVYMAXMUtzkRmz2Vt8fyFh5Sw9NoultQ6I AYcwIkLD0SsSdHRe2qbdyB2rRiE4Je/HNPkPBLsjYuBnS4syt5DVd50EW2HPhm0R BPe8AkvKAct5Kfw/Uoe1UxOorFeojQE= -----END CERTIFICATE-----Generated at Sat Jun 13 14:54:16 2026 by rpki-client