$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46aed7aa-f96a-3704-8ba5-da4308b5b0ac.roa File: 46aed7aa-f96a-3704-8ba5-da4308b5b0ac.roa (raw, json) Hash identifier: Nqx8onyzrrwoBaHlD7KT6KERKfngCY7UsIv/CVqEuNM= Subject key identifier: 06:07:7D:96:52:95:C5:93:17:A7:BA:77:B1:EA:E1:CB:97:97:EF:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DE15077914420854F3096E940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46aed7aa-f96a-3704-8ba5-da4308b5b0ac.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 174.131.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:77:91:44:20:85:4f:30:96:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=14ea3134-fb22-4798-b1b6-405a88b3e5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:61:c1:d9:75:25:b1:7d:75:79:0a:77:b8: c9:db:68:46:24:6a:04:66:53:0d:37:24:30:b3:81: 54:3f:0a:d9:cf:a4:b9:18:e8:51:d6:8b:c7:cf:c3: 87:ec:7d:8f:6e:df:ed:81:c4:16:cb:75:7d:f3:47: 16:cb:0a:5e:51:65:da:73:14:01:7f:0c:46:e5:32: a4:92:70:f2:6f:cb:1a:69:54:95:11:65:03:0b:9a: 68:49:85:2d:52:01:21:40:c4:80:d3:fd:2f:ed:5e: e2:4b:69:7a:50:b2:81:c0:12:79:92:1f:17:eb:11: d2:e4:4c:a6:db:6c:1f:cb:b6:03:e8:08:86:30:bc: 1b:8f:15:67:a5:ab:09:d7:ce:b4:3b:ab:30:15:c5: d8:0f:cd:36:d4:5e:ae:f0:dc:58:32:be:c5:cb:f6: 10:43:63:36:42:f0:b4:0f:33:7a:de:92:8a:05:50: c9:37:17:4b:27:b7:54:d3:3e:83:26:7b:a7:b0:ba: f3:90:8c:3e:b9:91:b5:be:a7:73:84:d8:e6:df:85: a4:50:89:b3:11:75:ab:df:6e:cc:64:3c:1f:2d:62: a3:be:e6:cd:64:9d:dc:cb:c5:21:17:90:15:70:08: fc:e0:db:1b:69:61:c3:eb:d5:b4:0d:79:6d:53:4d: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:07:7D:96:52:95:C5:93:17:A7:BA:77:B1:EA:E1:CB:97:97:EF:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46aed7aa-f96a-3704-8ba5-da4308b5b0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:83:bd:f9:43:21:21:b5:b6:3b:c0:77:52:19:44:7b:8d:45: 8e:bf:57:e9:24:8b:79:6f:6f:9d:e5:e7:1f:d3:e7:24:e4:67: 62:f2:d9:69:d9:0c:b1:6a:67:32:da:b9:59:d5:10:84:87:72: 36:6b:1b:81:c4:5a:ba:b3:d1:8e:ac:8f:12:e4:53:38:64:9d: de:85:f4:49:af:da:a2:bb:54:aa:c4:a4:69:0d:b0:bc:03:b0: 1e:3d:65:36:29:eb:fc:a3:2d:dc:cc:05:7e:11:62:b6:d2:bd: fb:60:c9:79:5f:1d:4a:6e:65:3d:36:5f:fe:a6:91:24:31:8c: 9b:fe:cf:d5:6b:83:1d:1b:35:68:18:b1:cf:90:0c:10:89:94: 40:e1:66:ee:f4:84:23:0b:2b:72:8c:37:ff:7b:44:b2:02:54: de:84:33:f6:21:13:d7:68:60:47:6c:4a:c3:98:23:a5:e5:c1: 33:c9:42:dc:52:e0:dc:c5:ad:43:d0:04:38:68:c4:b2:8d:49: 45:4e:43:72:db:79:05:f4:ea:ff:75:a0:99:cd:ca:72:67:ae: fc:f3:37:f5:be:8a:4c:b7:27:7b:e9:5c:f5:18:e7:5c:73:bc: 8f:a3:3e:ab:0e:84:67:2c:f7:2b:58:05:ca:6b:f1:3d:14:29: f7:3c:e2:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUHeRRCCFTzCW6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk MTRlYTMxMzQtZmIyMi00Nzk4LWIxYjYtNDA1YTg4YjNlNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKFhwdl1JbF9dXkKd7jJ22hGJGoEZlMNNyQw s4FUPwrZz6S5GOhR1ovHz8OH7H2Pbt/tgcQWy3V980cWywpeUWXacxQBfwxG5TKk knDyb8saaVSVEWUDC5poSYUtUgEhQMSA0/0v7V7iS2l6ULKBwBJ5kh8X6xHS5Eym 22wfy7YD6AiGMLwbjxVnpasJ1860O6swFcXYD8021F6u8NxYMr7Fy/YQQ2M2QvC0 DzN63pKKBVDJNxdLJ7dU0z6DJnunsLrzkIw+uZG1vqdzhNjm34WkUImzEXWr327M ZDwfLWKjvubNZJ3cy8UhF5AVcAj84NsbaWHD69W0DXltU00XJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYHfZZSlcWTF6e6d7Hq4cuXl+9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDZhZWQ3YWEtZjk2YS0z NzA0LThiYTUtZGE0MzA4YjViMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSDvflDISG1tjvAd1IZRHuNRY6/V+kki3lvb53l5x/T5yTkZ2Ly2WnZ DLFqZzLauVnVEISHcjZrG4HEWrqz0Y6sjxLkUzhknd6F9Emv2qK7VKrEpGkNsLwD sB49ZTYp6/yjLdzMBX4RYrbSvftgyXlfHUpuZT02X/6mkSQxjJv+z9Vrgx0bNWgY sc+QDBCJlEDhZu70hCMLK3KMN/97RLICVN6EM/YhE9doYEdsSsOYI6XlwTPJQtxS 4NzFrUPQBDhoxLKNSUVOQ3LbeQX06v91oJnNynJnrvzzN/W+iky3J3vpXPUY51xz vI+jPqsOhGcs9ytYBcpr8T0UKfc84l4= -----END CERTIFICATE-----Generated at Thu May 28 17:12:39 2026 by rpki-client