$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa File: 45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa (raw, json) Hash identifier: vAes3dpaToRig75sJiFOuv47C/B9KU4/J3sHbUgUuDI= Subject key identifier: DE:38:11:03:75:30:A1:7C:8E:77:13:27:31:82:52:55:65:7D:6F:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DE150A64E8CB7B12DC52ED780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 173.189.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:a6:4e:8c:b7:b1:2d:c5:2e:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=64b98bd2-7347-461b-99dc-4ae7f3cefab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:eb:f3:17:60:af:bf:80:b6:a8:07:d2:6b:fd: 79:4f:1d:c2:6f:00:bd:41:ab:4a:8b:94:5b:4c:a2: 65:5a:4b:ca:00:c4:5d:17:e9:28:34:04:8b:84:31: 8a:9c:f6:c7:b1:92:19:f2:86:2a:61:bd:c3:39:65: e4:d6:88:4d:70:71:90:4b:76:18:1f:37:2a:2e:6d: 4b:76:2e:7d:c7:1f:35:11:41:1d:e0:cd:1c:ca:32: eb:68:f8:c5:7f:f0:4d:cf:ce:85:55:70:84:74:d4: 26:65:fc:56:07:f6:3d:89:a5:ed:e3:a5:93:24:74: 15:07:5d:57:52:1a:e4:cd:34:ba:fc:5a:65:09:03: b3:be:97:5f:cd:53:7d:ed:88:55:d1:52:06:ea:e9: 86:e1:97:40:76:1a:75:8f:85:37:38:32:e4:1e:19: 1f:d2:eb:f0:f2:f3:dc:a2:e0:38:26:ee:e7:49:b0: a6:71:04:b2:10:d9:64:22:15:87:58:77:0e:95:e4: c3:f7:af:a5:85:fc:9e:8d:ab:07:36:71:00:44:57: 99:69:06:d1:05:f7:d7:eb:b1:18:02:09:4c:10:ef: 0a:ed:9b:67:eb:a9:2c:3c:99:ee:7a:a5:1d:2b:66: f0:f8:ad:a0:84:ff:6b:a3:35:30:b0:eb:1a:d1:8d: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:11:03:75:30:A1:7C:8E:77:13:27:31:82:52:55:65:7D:6F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:79:30:e1:7f:f1:1f:12:90:04:34:de:07:9a:f2:72:27:63: 50:e4:bf:ff:bb:66:36:09:57:a9:f5:99:5d:ee:79:33:74:55: 67:2d:81:1f:09:da:42:ff:12:5f:a7:cf:f9:c7:08:6d:81:39: f7:77:70:20:31:71:03:55:45:81:8e:a8:58:ee:76:f1:54:f8: 36:28:3a:82:b5:27:4f:e9:74:43:86:7d:04:2f:6e:a0:e8:4b: f7:ad:93:02:31:e3:bd:d9:5a:8b:5f:5a:8c:ac:9f:90:98:80: 3a:e9:e6:b3:57:69:ef:c2:94:ee:88:08:79:57:49:85:eb:9d: 39:3a:bd:d0:cc:08:2e:94:2e:f2:88:8f:16:53:d4:51:bb:e2: 62:04:11:16:49:b1:6b:1a:c7:d5:1f:ee:76:5f:d2:92:6d:52: 9f:89:e4:4c:39:2f:03:7a:92:53:45:bf:90:c3:0c:10:bd:97: ed:b9:2f:82:9e:b5:27:90:5b:20:26:a7:3b:68:ff:4d:a1:38: 29:95:47:d9:f9:2c:9b:00:9c:54:27:b8:49:dc:65:e6:66:98: 61:e6:17:5d:58:d9:62:86:ec:79:8f:c8:8e:26:78:78:cf:1d: 60:43:ad:d1:b4:1a:ac:38:9c:68:a1:26:b0:8f:d7:38:b6:2c: 8a:64:a5:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKZOjLexLcUu14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk NjRiOThiZDItNzM0Ny00NjFiLTk5ZGMtNGFlN2YzY2VmYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuvzF2Cvv4C2qAfSa/15Tx3CbwC9QatKi5Rb TKJlWkvKAMRdF+koNASLhDGKnPbHsZIZ8oYqYb3DOWXk1ohNcHGQS3YYHzcqLm1L di59xx81EUEd4M0cyjLraPjFf/BNz86FVXCEdNQmZfxWB/Y9iaXt46WTJHQVB11X UhrkzTS6/FplCQOzvpdfzVN97YhV0VIG6umG4ZdAdhp1j4U3ODLkHhkf0uvw8vPc ouA4Ju7nSbCmcQSyENlkIhWHWHcOleTD96+lhfyejasHNnEARFeZaQbRBffX67EY AglMEO8K7Ztn66ksPJnueqUdK2bw+K2ghP9rozUwsOsa0Y3BAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN44EQN1MKF8jncTJzGCUlVlfW/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlNDc5NzQtOWMwMy0z NmZiLWJjZjMtYTUzMTVmOGY2MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF95MOF/8R8SkAQ03gea8nInY1Dkv/+7ZjYJV6n1mV3ueTN0VWctgR8J 2kL/El+nz/nHCG2BOfd3cCAxcQNVRYGOqFjudvFU+DYoOoK1J0/pdEOGfQQvbqDo S/etkwIx473ZWotfWoysn5CYgDrp5rNXae/ClO6ICHlXSYXrnTk6vdDMCC6ULvKI jxZT1FG74mIEERZJsWsax9Uf7nZf0pJtUp+J5Ew5LwN6klNFv5DDDBC9l+25L4Ke tSeQWyAmpzto/02hOCmVR9n5LJsAnFQnuEncZeZmmGHmF11Y2WKG7HmPyI4meHjP HWBDrdG0Gqw4nGihJrCP1zi2LIpkpWw= -----END CERTIFICATE-----Generated at Thu May 28 17:11:37 2026 by rpki-client