$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa File: a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa (raw, json) Hash identifier: Fzyhm5K2WTh4E1ItCfjiaHHqellBMLtL+Qwx4VsL0j8= Subject key identifier: C8:2A:10:76:6F:14:2E:4C:B3:43:DD:91:01:6C:15:04:E2:2B:87:E8 Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Certificate serial: 010D0C9F4328584DD35B123DEC657BA31EA8CD80 Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 992 IP address blocks: 198.169.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:12:3d:ec:65:7b:a3:1e:a8:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=b823bd57-19cf-482d-a7d2-a7777bbf1527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:52:cb:ba:31:6d:a7:02:a2:8e:29:0d:cd: e5:95:ab:b3:37:ae:0b:0e:d7:18:b8:1f:98:f6:c3: b4:b6:d1:31:68:96:a6:48:cd:be:d8:9e:a0:8d:f2: 0b:69:58:fd:b4:20:b8:8b:1e:bf:be:c2:9a:39:e4: 4e:30:96:bc:23:52:8f:8e:5d:a1:39:e2:03:5e:d4: b8:27:44:9f:e4:e5:42:d2:1d:8c:3e:ed:03:46:7e: 49:cd:46:f4:d1:57:4b:11:6f:ca:22:6f:fd:d2:0a: fd:1c:79:84:6b:1f:5e:20:0c:fa:e9:76:f8:46:69: e8:56:81:3d:cb:99:a5:a4:c0:b8:64:c2:7e:3b:7b: d4:3b:d4:58:94:9f:ef:1c:1d:16:9b:4c:d5:12:68: e9:6c:ab:0b:7b:29:3b:b0:01:78:fd:b8:6b:f3:69: b1:a6:0a:0c:03:9e:87:82:8c:ab:29:3b:f4:6c:bd: 6b:f9:c9:83:41:51:23:4d:79:a6:85:7b:f8:64:a8: 78:35:cb:3f:75:98:48:86:24:99:45:a5:89:80:26: 44:e3:4d:02:02:dc:26:7b:3a:fc:53:74:cd:d0:37: bc:70:15:9c:c6:7f:c9:26:75:54:73:4a:b6:d8:b4: b1:38:c5:bc:73:93:53:bf:26:48:10:1f:8a:7f:be: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2A:10:76:6F:14:2E:4C:B3:43:DD:91:01:6C:15:04:E2:2B:87:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl X509v3 Authority Key Identifier: keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer sbgp-ipAddrBlock: critical IPv4: 198.169.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:93:88:d1:81:7e:a7:3b:9e:27:8c:4b:90:ac:04:2f:1d:1a: d1:9e:8f:a5:cb:39:41:3c:1d:48:5f:91:93:68:ba:bf:b6:12: db:22:e2:2a:22:53:80:8b:f5:a6:70:f7:21:60:8e:d4:7b:a7: 7a:42:8d:cb:03:99:f1:77:8e:83:fc:b2:16:7d:8d:32:ec:ad: 0b:0e:15:fe:f8:14:4c:57:02:e0:87:aa:8b:ac:ab:01:ab:19: 96:df:96:ba:b1:c1:8e:5f:7e:40:33:e8:f4:3a:dd:22:e5:96: 65:2e:d2:8a:de:c2:93:a2:95:db:76:f2:13:cd:e8:fa:25:68: eb:fe:fc:dd:1a:4d:cd:4c:85:d0:a7:f2:42:45:70:8e:6d:0a: eb:7d:59:05:5c:7d:61:c2:12:28:31:3c:46:8c:50:84:d3:89: 1c:0e:74:7d:2c:b5:53:6a:65:c3:95:11:15:69:fb:cd:e9:85: 78:e2:d6:ed:fd:de:28:7b:7a:be:33:a7:be:7d:8c:7c:d7:f3: 77:97:16:66:13:40:99:d9:a7:7e:d0:39:11:fa:23:cb:29:80: 94:7f:84:fc:4f:d5:64:e7:7e:a0:de:9e:a2:f8:a5:91:4c:8a: fe:2d:9c:1a:59:4f:0d:46:a7:67:88:70:77:29:7e:72:a7:6a: 7b:cf:79:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWxI97GV7ox6ozYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl NmI0MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk YjgyM2JkNTctMTljZi00ODJkLWE3ZDItYTc3NzdiYmYxNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnxSy7oxbacCoo4pDc3llauzN64LDtcYuB+Y 9sO0ttExaJamSM2+2J6gjfILaVj9tCC4ix6/vsKaOeROMJa8I1KPjl2hOeIDXtS4 J0Sf5OVC0h2MPu0DRn5JzUb00VdLEW/KIm/90gr9HHmEax9eIAz66Xb4RmnoVoE9 y5mlpMC4ZMJ+O3vUO9RYlJ/vHB0Wm0zVEmjpbKsLeyk7sAF4/bhr82mxpgoMA56H goyrKTv0bL1r+cmDQVEjTXmmhXv4ZKh4Ncs/dZhIhiSZRaWJgCZE400CAtwmezr8 U3TN0De8cBWcxn/JJnVUc0q22LSxOMW8c5NTvyZIEB+Kf74+wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgqEHZvFC5Ms0PdkQFsFQTiK4foMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3 NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvYTI3ZmM2MjEtNWMwMi0z MjZjLTgxYWUtYzllOWUyYzY2OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3 NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1 NTRiMGU2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqmtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyTiNGBfqc7nieMS5CsBC8dGtGej6XLOUE8HUhfkZNour+2Etsi4ioi U4CL9aZw9yFgjtR7p3pCjcsDmfF3joP8shZ9jTLsrQsOFf74FExXAuCHqousqwGr GZbflrqxwY5ffkAz6PQ63SLllmUu0orewpOildt28hPN6PolaOv+/N0aTc1MhdCn 8kJFcI5tCut9WQVcfWHCEigxPEaMUITTiRwOdH0stVNqZcOVERVp+83phXji1u39 3ih7er4zp759jHzX83eXFmYTQJnZp37QORH6I8spgJR/hPxP1WTnfqDenqL4pZFM iv4tnBpZTw1Gp2eIcHcpfnKnanvPeTs= -----END CERTIFICATE-----Generated at Sat Jun 13 09:40:15 2026 by rpki-client