$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81ae6362-f72b-3805-8686-7781df06a9fe.roa File: 81ae6362-f72b-3805-8686-7781df06a9fe.roa (raw, json) Hash identifier: 0I5tmq0JJWi9kAqATQ/XlyCWtluXZ7UBwVk2Ygg8zf4= Subject key identifier: 5B:3C:91:A3:5A:86:3D:98:60:5B:16:0E:38:1F:3B:C4:9F:65:35:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D701697EA48CB1C859A584100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81ae6362-f72b-3805-8686-7781df06a9fe.roa Signing time: Wed 08 Apr 2026 11:37:38 +0000 ROA not before: Wed 08 Apr 2026 11:37:38 +0000 ROA not after: Tue 07 Jul 2026 11:37:38 +0000 asID: 7029 IP address blocks: 173.191.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:16:97:ea:48:cb:1c:85:9a:58:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 8 11:37:38 2026 GMT Not After : Jul 7 11:37:38 2026 GMT Subject: CN=bc9010ae-c41c-46fa-a24d-7560383840f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:a2:2c:c0:e1:e8:6a:70:20:d5:f0:f9:13: cb:64:6b:bf:1c:8c:b7:31:c4:73:bb:94:c1:e4:b2: e5:40:1f:6b:df:e2:c5:2b:ce:d9:3f:dd:7f:22:eb: 03:b5:ba:b6:a4:30:f5:67:4c:cd:f1:f9:f0:6f:5c: c9:e5:49:90:ad:5b:60:95:06:3a:89:9b:72:f7:17: 41:c3:32:e1:a6:8d:75:85:d0:0d:af:71:5d:7d:f2: 42:1f:f7:82:50:96:88:d7:08:22:99:e6:85:5f:73: f4:02:1f:33:fa:9a:15:3a:01:64:27:dd:2d:94:5b: 3c:ba:69:c1:d4:9a:ee:9b:ab:4b:94:0f:7f:e0:d2: 16:c5:d2:67:4b:6d:a2:d9:9a:92:b8:2b:e3:8c:5a: 26:ab:c9:fa:e6:f6:f8:09:bb:e9:09:aa:e2:05:16: 6e:22:88:d1:80:21:b8:b4:a8:ee:66:46:34:c9:db: 1a:9b:61:9d:6e:e4:53:72:1e:41:a5:a3:e7:c7:82: f2:f9:a1:6a:0c:78:27:76:35:97:3b:92:a0:95:9f: 3d:6e:71:df:c9:a8:08:32:5d:77:b3:c8:c4:d3:ff: e7:c4:d3:38:d4:af:76:9a:38:f7:ff:34:5e:f6:e7: e9:1e:7c:4f:8d:10:d0:31:0b:d6:20:2d:df:f9:1c: 37:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3C:91:A3:5A:86:3D:98:60:5B:16:0E:38:1F:3B:C4:9F:65:35:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81ae6362-f72b-3805-8686-7781df06a9fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d8:38:1e:ae:41:19:cb:78:c6:8c:ed:8c:35:89:cc:b5:1e: 69:68:3c:97:fa:89:46:2b:57:ef:1b:79:b6:01:e6:dc:d1:42: d5:6d:c0:14:ac:3c:54:98:0a:7f:0a:14:95:06:aa:13:a5:c7: 0e:a3:54:ae:bb:27:76:04:85:28:e2:f9:b2:8e:61:7e:45:9f: 9d:95:b5:89:62:f9:3d:d5:bb:8d:c8:5e:e4:bf:b1:9a:7c:10: f4:1a:db:86:92:8c:94:f7:57:4a:75:ca:9e:97:46:86:3b:ab: a5:a4:db:f6:5f:d1:d4:d4:fd:f0:0a:9d:34:bd:c6:cf:1f:a9: e0:ba:08:fc:a5:9a:fe:e6:0f:ea:01:4a:93:45:f8:10:8b:87: 38:bf:86:a4:09:22:bf:1a:da:11:52:e1:95:50:ab:1b:e6:76: 61:fa:af:b5:21:0f:64:a8:bc:be:0e:da:a7:d4:73:67:7e:60: 2e:c5:5f:91:01:27:87:4b:ab:11:e7:35:9c:62:43:fe:d3:84: 2f:9f:c6:11:36:11:dc:70:04:43:8d:9d:05:26:98:07:39:20: aa:e9:d9:de:b4:b6:aa:51:e0:73:89:a0:70:37:4f:a4:41:a4: 12:b0:6c:d3:36:ae:84:de:35:97:41:aa:0b:f7:9e:09:2e:18: 10:0e:67:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wFpfqSMschZpYQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwODExMzczOFoXDTI2MDcwNzExMzczOFowLzEtMCsGA1UEAxMk YmM5MDEwYWUtYzQxYy00NmZhLWEyNGQtNzU2MDM4Mzg0MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ+iLMDh6GpwINXw+RPLZGu/HIy3McRzu5TB 5LLlQB9r3+LFK87ZP91/IusDtbq2pDD1Z0zN8fnwb1zJ5UmQrVtglQY6iZty9xdB wzLhpo11hdANr3FdffJCH/eCUJaI1wgimeaFX3P0Ah8z+poVOgFkJ90tlFs8umnB 1Jrum6tLlA9/4NIWxdJnS22i2ZqSuCvjjFomq8n65vb4CbvpCariBRZuIojRgCG4 tKjuZkY0ydsam2GdbuRTch5BpaPnx4Ly+aFqDHgndjWXO5KglZ89bnHfyagIMl13 s8jE0//nxNM41K92mjj3/zRe9ufpHnxPjRDQMQvWIC3f+Rw3kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs8kaNahj2YYFsWDjgfO8SfZTWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODFhZTYzNjItZjcyYi0z ODA1LTg2ODYtNzc4MWRmMDZhOWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzYOB6uQRnLeMaM7Yw1icy1HmloPJf6iUYrV+8bebYB5tzRQtVtwBSs PFSYCn8KFJUGqhOlxw6jVK67J3YEhSji+bKOYX5Fn52VtYli+T3Vu43IXuS/sZp8 EPQa24aSjJT3V0p1yp6XRoY7q6Wk2/Zf0dTU/fAKnTS9xs8fqeC6CPylmv7mD+oB SpNF+BCLhzi/hqQJIr8a2hFS4ZVQqxvmdmH6r7UhD2SovL4O2qfUc2d+YC7FX5EB J4dLqxHnNZxiQ/7ThC+fxhE2EdxwBEONnQUmmAc5IKrp2d60tqpR4HOJoHA3T6RB pBKwbNM2roTeNZdBqgv3ngkuGBAOZ5g= -----END CERTIFICATE-----Generated at Mon Apr 13 11:38:26 2026 by rpki-client