$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa File: 95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa (raw, json) Hash identifier: Dk2CQqGGRTAS591myyGun9pln1se6jqLS9FLbwna5r0= Subject key identifier: F6:A9:CB:45:5B:A5:F0:FE:92:19:3A:27:0F:3F:05:83:6F:F1:FD:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF68381D9630545E84F6B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 173.189.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:68:38:1d:96:30:54:5e:84:f6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=5908c328-c4be-446b-aeaf-061350b901ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:78:20:7d:c0:fc:31:84:f1:2d:dd:8a:37:97: 27:49:f0:d7:ef:17:75:0b:d8:08:21:47:2f:26:94: 46:83:81:4a:9b:b8:69:32:fb:9d:e1:0b:67:9d:7f: ee:27:2d:13:e0:c2:d3:f8:81:d1:d5:2c:66:51:11: 9a:e6:9a:b4:30:2e:15:70:5d:b1:b2:05:7f:0a:70: 39:91:ee:92:31:16:29:76:31:4b:66:04:44:46:2d: 83:d4:8a:5d:40:51:bf:42:9b:1f:f4:50:c2:2b:94: bf:58:88:fb:e3:02:f6:74:7a:4a:a5:59:1f:95:e8: 61:51:59:c9:e6:e3:92:dc:dd:55:cd:4e:21:fb:1e: 6d:7e:33:7f:3d:ba:70:21:71:48:95:c0:03:04:79: ea:1a:24:fe:70:66:c4:8d:9d:02:2f:3a:6c:ff:73: f3:ff:27:63:b9:ed:15:7e:f4:41:b1:d9:7f:62:34: e1:45:de:16:e6:ec:2b:9d:f9:21:99:b1:c9:8e:3f: 5e:fc:41:cf:e6:57:6e:8f:b1:c4:ed:ae:ac:6b:9a: e0:66:f0:94:d7:d4:67:e9:6f:37:0c:35:fa:f3:99: 6a:72:b8:1a:2e:3f:2b:23:5b:e1:e6:a1:42:1a:f1: 1b:6a:11:47:db:7e:96:58:60:84:e3:a2:57:f7:91: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A9:CB:45:5B:A5:F0:FE:92:19:3A:27:0F:3F:05:83:6F:F1:FD:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95c7afd7-ac0c-3c4a-b347-7b43c8a8db5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:19:6a:1c:8d:07:76:af:43:d3:b3:ca:f5:57:21:68:5a:b9: 90:8e:01:e4:53:27:5b:d5:57:87:31:10:e8:90:c7:2f:c0:41: 0e:cd:ad:c1:42:ee:84:78:92:02:e0:bc:c8:cc:68:b5:3c:74: 52:62:d2:5c:05:46:e2:17:ab:3d:60:c7:87:01:cc:0d:7f:97: 6b:7b:77:60:72:bd:66:10:3a:a0:49:33:21:bd:94:40:25:37: 24:c2:0d:71:ad:41:06:d5:ed:6a:9e:d5:e8:7c:01:af:bb:19: 37:bd:66:5f:cb:9f:86:6e:bf:70:f5:17:2b:f1:5c:14:4f:8f: 1d:5a:78:53:ca:28:ee:8e:78:30:ac:bb:61:a4:03:f5:96:3f: 9d:9a:2a:56:64:cf:32:c9:b3:9d:6d:27:fd:41:7c:c2:50:82: f3:58:28:48:c4:dd:6b:9b:a1:34:28:72:7e:c0:bc:78:4a:27: 6d:36:9e:e1:a7:0a:d7:0f:4e:a6:75:43:f5:6e:bd:35:52:ba: 3b:dd:f3:e8:4c:30:76:d3:64:71:8e:fb:73:9c:06:b4:c1:46: 3d:ce:a1:01:b9:35:f0:1c:45:ff:35:3c:49:92:21:e4:c5:3f: b5:41:82:36:98:a0:a2:7b:7a:60:0a:71:b5:36:69:46:b3:51: c3:41:ca:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32g4HZYwVF6E9rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NTkwOGMzMjgtYzRiZS00NDZiLWFlYWYtMDYxMzUwYjkwMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnggfcD8MYTxLd2KN5cnSfDX7xd1C9gIIUcv JpRGg4FKm7hpMvud4QtnnX/uJy0T4MLT+IHR1SxmURGa5pq0MC4VcF2xsgV/CnA5 ke6SMRYpdjFLZgRERi2D1IpdQFG/Qpsf9FDCK5S/WIj74wL2dHpKpVkflehhUVnJ 5uOS3N1VzU4h+x5tfjN/PbpwIXFIlcADBHnqGiT+cGbEjZ0CLzps/3Pz/ydjue0V fvRBsdl/YjThRd4W5uwrnfkhmbHJjj9e/EHP5lduj7HE7a6sa5rgZvCU19Rn6W83 DDX685lqcrgaLj8rI1vh5qFCGvEbahFH236WWGCE46JX95GAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPapy0VbpfD+khk6Jw8/BYNv8f3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVjN2FmZDctYWMwYy0z YzRhLWIzNDctN2I0M2M4YThkYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkZahyNB3avQ9OzyvVXIWhauZCOAeRTJ1vVV4cxEOiQxy/AQQ7NrcFC 7oR4kgLgvMjMaLU8dFJi0lwFRuIXqz1gx4cBzA1/l2t7d2ByvWYQOqBJMyG9lEAl NyTCDXGtQQbV7Wqe1eh8Aa+7GTe9Zl/Ln4Zuv3D1FyvxXBRPjx1aeFPKKO6OeDCs u2GkA/WWP52aKlZkzzLJs51tJ/1BfMJQgvNYKEjE3WuboTQocn7AvHhKJ202nuGn CtcPTqZ1Q/VuvTVSujvd8+hMMHbTZHGO+3OcBrTBRj3OoQG5NfAcRf81PEmSIeTF P7VBgjaYoKJ7emAKcbU2aUazUcNBypk= -----END CERTIFICATE-----Generated at Mon Jul 13 05:50:29 2026 by rpki-client