$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa File: 9318fe24-60e4-3b51-8fce-61b094e34012.roa (raw, json) Hash identifier: rmqP/fM9jWOK63rhzmaDXe2gtAaSGcu9pMDt5NcJiF8= Subject key identifier: E8:85:59:D8:C3:8F:B0:69:F6:93:E6:AD:A7:93:04:13:40:69:33:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DE1506A2FC11F93046B6A8080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 208.101.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:6a:2f:c1:1f:93:04:6b:6a:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=28e6058a-98c6-4690-9ec2-07d2b56ea541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:81:a5:08:1b:4e:f3:6b:1e:e9:8a:cb:e3:13: 85:77:d4:41:d4:82:bd:07:d1:3f:7b:5a:c6:50:da: f4:75:23:06:86:ec:4e:f1:d8:2f:99:fc:7e:f1:31: 39:ee:b3:53:ac:0c:1d:e8:bd:bc:28:5c:bd:50:6f: 7d:d2:6c:76:b2:08:4d:ae:1a:7d:e7:0b:e6:3d:a8: 28:19:a8:27:29:4b:69:61:70:dc:b7:d6:0c:2d:ad: 73:aa:c9:6f:4b:a8:5e:7e:64:b1:e2:f8:c0:50:cc: fd:20:78:c0:05:bd:f9:09:90:2e:f9:3d:05:95:da: 4a:9f:4d:72:dc:29:d0:e9:93:cd:f6:ec:d6:93:31: 04:17:0a:9b:ee:42:2f:60:8e:fa:1d:c2:b3:d5:a1: 14:9f:96:4b:d0:5c:63:ba:e4:2c:2e:d5:12:af:6d: d7:43:6f:23:1d:ec:a7:58:15:32:3c:24:84:46:98: 39:99:31:64:19:84:31:dd:68:da:f3:73:06:c5:dd: b7:a2:97:2b:88:41:54:77:be:84:43:a9:0f:e5:d7: c8:e9:72:d6:7a:8a:52:bf:79:07:c4:18:47:46:a1: 6c:b4:cf:a0:91:e9:d0:c8:2e:d0:50:60:84:9b:d1: 81:6b:d7:bd:32:df:a4:5a:90:d5:a1:f4:04:82:cf: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:85:59:D8:C3:8F:B0:69:F6:93:E6:AD:A7:93:04:13:40:69:33:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:93:5f:3b:00:30:37:38:35:99:79:6b:4a:e6:aa:db:6d:35: 07:fa:1e:cd:2f:86:0d:b2:97:0e:06:a7:93:64:ee:d5:fc:4b: ed:df:5b:c4:ea:11:10:78:d7:35:28:b4:76:d3:eb:14:dd:b1: 53:db:35:81:03:f6:7e:8c:9d:35:37:ec:a2:11:88:c0:cd:66: 75:7e:83:68:b0:86:c2:53:81:84:59:06:38:57:8b:b5:aa:01: e1:e7:1c:e6:ef:7a:77:ce:03:26:4e:06:38:03:5d:f6:f0:42: c8:a0:f8:dc:09:9f:43:20:02:18:60:8e:83:16:60:4b:86:cc: a1:a4:4a:11:1b:dc:3b:3c:a5:b9:6b:8c:96:3e:ef:1f:0b:1c: e1:7f:90:17:44:53:33:5c:54:04:e2:a3:4d:47:f2:3f:60:33: c4:1b:e5:8d:f4:36:f8:93:04:c4:80:10:c3:7b:14:59:2b:81: e0:3f:1d:ec:f0:bc:30:5a:a7:d2:4b:7f:e5:37:85:8d:27:3d: 43:97:b2:ff:81:29:96:52:02:bc:71:84:43:d3:eb:57:da:46: 08:54:77:22:d6:37:2e:a9:24:4d:03:75:43:b6:5c:2a:77:fb: d1:6e:ac:87:3e:47:73:55:14:8c:da:b9:0a:c4:3f:fb:7e:53: ba:50:64:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUGovwR+TBGtqgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk MjhlNjA1OGEtOThjNi00NjkwLTllYzItMDdkMmI1NmVhNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4GlCBtO82se6YrL4xOFd9RB1IK9B9E/e1rG UNr0dSMGhuxO8dgvmfx+8TE57rNTrAwd6L28KFy9UG990mx2sghNrhp95wvmPago GagnKUtpYXDct9YMLa1zqslvS6hefmSx4vjAUMz9IHjABb35CZAu+T0FldpKn01y 3CnQ6ZPN9uzWkzEEFwqb7kIvYI76HcKz1aEUn5ZL0FxjuuQsLtUSr23XQ28jHeyn WBUyPCSERpg5mTFkGYQx3Wja83MGxd23opcriEFUd76EQ6kP5dfI6XLWeopSv3kH xBhHRqFstM+gkenQyC7QUGCEm9GBa9e9Mt+kWpDVofQEgs+XPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiFWdjDj7Bp9pPmraeTBBNAaTNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMxOGZlMjQtNjBlNC0z YjUxLThmY2UtNjFiMDk0ZTM0MDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiTXzsAMDc4NZl5a0rmqtttNQf6Hs0vhg2ylw4Gp5Nk7tX8S+3fW8Tq ERB41zUotHbT6xTdsVPbNYED9n6MnTU37KIRiMDNZnV+g2iwhsJTgYRZBjhXi7Wq AeHnHObvenfOAyZOBjgDXfbwQsig+NwJn0MgAhhgjoMWYEuGzKGkShEb3Ds8pblr jJY+7x8LHOF/kBdEUzNcVATio01H8j9gM8Qb5Y30NviTBMSAEMN7FFkrgeA/Hezw vDBap9JLf+U3hY0nPUOXsv+BKZZSArxxhEPT61faRghUdyLWNy6pJE0DdUO2XCp3 +9FurIc+R3NVFIzauQrEP/t+U7pQZOc= -----END CERTIFICATE-----Generated at Thu May 28 17:10:54 2026 by rpki-client