$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa File: fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa (raw, json) Hash identifier: cMcHrEwz+9vIZ0/jZ0UiSj6FZCYTEperk2IpFHakn8c= Subject key identifier: E4:CD:24:6E:90:82:D6:3C:C8:F5:62:BA:7E:B2:1E:08:F2:E5:99:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1F716CD264E0470CB200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 22050 IP address blocks: 173.188.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1f:71:6c:d2:64:e0:47:0c:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=49a081d5-23d7-4fd6-998d-55d364e93734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:1d:ae:b7:35:a0:47:7f:42:51:59:29:8a: 6e:01:06:7c:53:00:b7:80:e8:fd:64:2d:c0:f7:74: be:bb:1c:bf:9c:17:ce:2b:1a:9a:ac:f3:77:87:7f: b8:15:ac:ae:84:07:1a:16:ab:a4:d6:8e:50:c6:fe: 7d:77:37:b1:21:57:02:4f:40:21:24:5a:78:fb:36: f1:3f:21:18:ee:b5:49:b5:53:98:4f:b3:d2:d8:e0: 45:72:87:d6:16:6e:f1:d9:d7:0c:4a:73:7f:22:69: 23:fd:e9:88:9b:89:fb:e5:52:24:a5:0a:be:73:d3: d5:00:fd:04:76:d4:c3:02:db:47:8b:40:47:51:25: 20:35:88:f5:a3:18:78:91:4d:6d:4b:21:32:65:4b: 59:b9:bd:3a:71:b6:2f:1b:f7:a5:4d:96:b8:6a:ba: 04:e6:57:af:6e:88:8b:54:0b:13:3b:36:7d:68:4d: 03:77:df:f7:da:7e:e7:72:3c:ae:e0:37:29:22:b9: d7:9b:78:68:2a:66:c8:89:ed:04:18:00:4b:53:16: 96:47:54:46:9d:f1:11:a7:5b:63:d3:fb:da:27:5e: 1d:de:cb:e8:8d:94:78:5e:83:67:04:20:b6:97:e5: 8c:d8:46:50:ea:7f:34:ed:78:6f:0f:83:05:c6:f4: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CD:24:6E:90:82:D6:3C:C8:F5:62:BA:7E:B2:1E:08:F2:E5:99:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:06:35:1a:74:04:cb:c5:44:2b:98:06:99:41:2b:1f:bd:48: 00:2b:f1:1b:88:6a:04:04:64:6b:c9:2f:cd:4d:47:47:39:55: 09:61:22:95:99:ea:c8:34:05:a6:14:99:6a:bb:c0:7c:c5:66: 6f:2e:c7:15:f1:66:75:26:39:37:1d:d1:30:11:3d:73:b8:91: c0:aa:08:b6:0d:a0:e1:92:0b:43:af:90:cc:67:d6:51:54:5f: a4:b1:a7:10:97:ed:8c:e3:c0:04:6d:15:cc:c9:7b:d7:7e:ed: 56:d6:15:cd:3f:d2:a7:7d:0e:da:2f:50:6b:c1:ab:e8:5c:7c: 32:d4:68:db:1d:02:79:26:cb:5c:21:f6:a2:a9:03:5c:3a:91: 53:ea:26:f0:8b:db:4b:80:f2:37:dc:1c:5f:24:8d:03:79:11: 26:a9:9b:e9:e4:a4:9e:28:4c:cd:58:69:08:c6:dc:61:90:19: 9e:f9:65:ed:43:17:8d:ab:61:30:45:26:21:56:17:4d:5d:a5: dd:f6:c4:c9:83:7c:9e:75:7f:f7:35:f5:0b:42:a1:eb:d3:aa: 90:88:e3:57:8f:83:49:85:bd:e7:7e:ad:d5:4d:47:b4:02:9c: e5:f2:b7:28:dc:f7:8c:82:30:18:4d:2c:cb:fb:70:2a:f9:ba: 09:c8:4f:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTx9xbNJk4EcMsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NDlhMDgxZDUtMjNkNy00ZmQ2LTk5OGQtNTVkMzY0ZTkzNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywQdrrc1oEd/QlFZKYpuAQZ8UwC3gOj9ZC3A 93S+uxy/nBfOKxqarPN3h3+4FayuhAcaFquk1o5Qxv59dzexIVcCT0AhJFp4+zbx PyEY7rVJtVOYT7PS2OBFcofWFm7x2dcMSnN/Imkj/emIm4n75VIkpQq+c9PVAP0E dtTDAttHi0BHUSUgNYj1oxh4kU1tSyEyZUtZub06cbYvG/elTZa4aroE5levboiL VAsTOzZ9aE0Dd9/32n7ncjyu4DcpIrnXm3hoKmbIie0EGABLUxaWR1RGnfERp1tj 0/vaJ14d3svojZR4XoNnBCC2l+WM2EZQ6n807XhvD4MFxvRboQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTNJG6QgtY8yPViun6yHgjy5Zl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmNiMGE1ODAtMmZiNC0z ODlmLWE2OGEtOTgzZjk3NmZhOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsGNRp0BMvFRCuYBplBKx+9SAAr8RuIagQEZGvJL81NR0c5VQlhIpWZ 6sg0BaYUmWq7wHzFZm8uxxXxZnUmOTcd0TARPXO4kcCqCLYNoOGSC0OvkMxn1lFU X6SxpxCX7YzjwARtFczJe9d+7VbWFc0/0qd9DtovUGvBq+hcfDLUaNsdAnkmy1wh 9qKpA1w6kVPqJvCL20uA8jfcHF8kjQN5ESapm+nkpJ4oTM1YaQjG3GGQGZ75Ze1D F42rYTBFJiFWF01dpd32xMmDfJ51f/c19QtCoevTqpCI41ePg0mFved+rdVNR7QC nOXytyjc94yCMBhNLMv7cCr5ugnIT9Q= -----END CERTIFICATE-----Generated at Sat Jun 13 16:18:37 2026 by rpki-client