$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49491938-1a07-3c4b-b6d2-9420d5d5d089.roa File: 49491938-1a07-3c4b-b6d2-9420d5d5d089.roa (raw, json) Hash identifier: /BTsafuRi6985YEIsCp5iEugmbXvlvZ8K722P6joUDw= Subject key identifier: CA:11:52:9D:A9:1C:7B:3D:11:7E:E4:F8:4D:23:1D:6F:DB:F2:32:42 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584E1E4468404D8CAABE6A3C9880 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49491938-1a07-3c4b-b6d2-9420d5d5d089.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 33588 IP address blocks: 172.221.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:68:40:4d:8c:aa:be:6a:3c:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=8409dde0-40b2-4a0d-91d8-1ba429c178ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:da:f8:4c:07:7f:1d:aa:e5:27:ea:6c:e4: cd:b4:25:c6:a0:15:50:44:10:82:6d:80:4c:ef:96: e2:36:63:be:d6:93:05:7d:90:20:98:87:f1:03:ac: 90:b8:68:2c:3b:f5:e3:ab:04:09:f0:6b:2a:42:61: 8d:bb:cb:51:de:cf:77:8c:40:23:08:a1:bd:5a:1f: e6:12:be:f4:f7:06:3d:ac:c1:9f:25:dd:7d:73:a6: 2a:ff:ae:34:55:e0:5d:f4:9e:c7:14:01:66:12:46: 4e:6e:db:34:20:d9:40:f1:a1:b6:0b:b2:21:90:aa: 45:23:df:d3:09:9c:20:99:4d:78:97:1a:92:cc:3b: e6:00:82:79:60:8e:eb:de:d9:16:ed:9c:59:da:4c: 4a:62:4a:15:4f:4c:9b:18:c1:5a:45:ce:14:5f:c7: 9e:94:52:3a:a0:0b:85:8a:49:43:03:5a:e2:85:dc: ca:ad:34:4c:2c:6c:24:68:5c:41:61:ad:a1:a8:8a: 02:0d:b1:2e:aa:37:25:8b:85:85:5b:cd:07:09:b2: ed:d0:39:af:f4:7d:50:68:91:d6:dc:99:97:e6:5c: 84:0a:50:63:63:d1:06:ea:96:1f:18:ed:1e:e7:8b: 09:35:b7:72:bf:64:47:54:5e:16:8a:b5:42:0d:b7: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:11:52:9D:A9:1C:7B:3D:11:7E:E4:F8:4D:23:1D:6F:DB:F2:32:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49491938-1a07-3c4b-b6d2-9420d5d5d089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.221.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e2:a2:7b:b7:f1:35:5e:69:26:b6:67:0c:3f:9e:ad:60:96: 4a:d2:21:63:78:8b:67:7f:f7:b5:5a:b0:ee:45:c9:d3:54:c9: a4:4c:f3:d2:c1:25:95:58:5f:4b:79:a4:27:d9:3c:74:2f:96: 87:d0:b3:ef:4d:eb:1f:d5:cd:0d:6a:c1:30:5d:60:3a:91:ac: cc:52:57:3d:9f:05:88:13:e3:7e:71:dc:b5:57:52:db:18:13: 9b:bf:61:f5:35:ca:b0:d4:cc:cc:db:bc:99:bb:72:b5:3a:6c: e6:8d:86:6f:be:14:16:d6:7e:29:1c:2f:be:e6:e4:4e:dd:47: 3e:fb:20:d9:5c:cd:c4:74:a7:70:83:70:a6:75:0c:69:5f:1e: 3c:fd:8e:92:02:c4:b4:b1:a0:bc:eb:c0:09:18:a6:ec:74:ab: 35:c9:6f:79:b4:1b:e7:e2:ff:7d:ad:c2:b7:c6:eb:c7:3d:31: f4:67:2d:b7:16:18:51:fb:33:a5:d8:2c:ed:d4:50:ca:95:c3: 76:59:91:1c:bb:79:a4:d2:a8:34:85:8c:20:16:fb:d3:61:de: 98:c8:df:83:b9:5e:48:11:39:ca:7b:6a:31:10:4b:65:dd:67: c3:a7:1b:99:58:e2:d4:4c:83:29:ed:09:ee:5a:55:9e:93:72: 60:8c:8a:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRGhATYyqvmo8mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ODQwOWRkZTAtNDBiMi00YTBkLTkxZDgtMWJhNDI5YzE3OGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi7a+EwHfx2q5SfqbOTNtCXGoBVQRBCCbYBM 75biNmO+1pMFfZAgmIfxA6yQuGgsO/XjqwQJ8GsqQmGNu8tR3s93jEAjCKG9Wh/m Er709wY9rMGfJd19c6Yq/640VeBd9J7HFAFmEkZObts0INlA8aG2C7IhkKpFI9/T CZwgmU14lxqSzDvmAIJ5YI7r3tkW7ZxZ2kxKYkoVT0ybGMFaRc4UX8eelFI6oAuF iklDA1rihdzKrTRMLGwkaFxBYa2hqIoCDbEuqjcli4WFW80HCbLt0Dmv9H1QaJHW 3JmX5lyEClBjY9EG6pYfGO0e54sJNbdyv2RHVF4WirVCDbcJIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoRUp2pHHs9EX7k+E0jHW/b8jJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDk0OTE5MzgtMWEwNy0z YzRiLWI2ZDItOTQyMGQ1ZDVkMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrionu38TVeaSa2Zww/nq1glkrSIWN4i2d/97VasO5FydNUyaRM89LB JZVYX0t5pCfZPHQvlofQs+9N6x/VzQ1qwTBdYDqRrMxSVz2fBYgT435x3LVXUtsY E5u/YfU1yrDUzMzbvJm7crU6bOaNhm++FBbWfikcL77m5E7dRz77INlczcR0p3CD cKZ1DGlfHjz9jpICxLSxoLzrwAkYpux0qzXJb3m0G+fi/32twrfG68c9MfRnLbcW GFH7M6XYLO3UUMqVw3ZZkRy7eaTSqDSFjCAW+9Nh3pjI34O5XkgROcp7ajEQS2Xd Z8OnG5lY4tRMgyntCe5aVZ6TcmCMiqc= -----END CERTIFICATE-----Generated at Sat Jun 13 20:24:49 2026 by rpki-client