$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b6794d-5ae8-3a26-af4c-b99404165104.roa File: 99b6794d-5ae8-3a26-af4c-b99404165104.roa (raw, json) Hash identifier: dpyXECIApcsEkRmYaaugWigbddK6BQqlXRfQFpAkeLA= Subject key identifier: 03:DF:49:BC:DF:D0:17:D1:3E:CC:C7:16:23:98:E7:01:4E:D0:D1:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DD4C08249B44079102EDF37C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b6794d-5ae8-3a26-af4c-b99404165104.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 7029 IP address blocks: 173.188.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:82:49:b4:40:79:10:2e:df:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=e3c38a1d-31e8-4d34-9812-cfef511b4384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:e0:f6:ce:eb:43:8e:39:e9:d6:b4:66:c3: de:bc:f5:b5:75:2b:2e:43:c3:ff:a2:b2:f4:52:92: d0:73:e1:a8:98:8c:26:4a:f0:b3:75:b6:51:60:87: 62:f0:04:9c:d8:f7:fa:7e:3f:90:98:b0:4e:ea:34: cb:45:39:ed:19:41:e1:93:e6:41:43:b3:6f:ef:01: f7:fa:c9:2d:45:45:cf:ec:28:d8:46:1e:dc:35:f6: b3:e0:0e:69:aa:02:a2:4d:ad:ef:20:3c:56:28:8d: b6:e4:de:c9:fa:d7:60:50:5c:39:7e:b4:8d:43:ec: 40:99:8a:4a:05:cc:2f:7c:d9:18:e8:82:1b:ae:62: f4:d2:c2:f2:0c:4c:3d:c4:9b:51:62:50:fc:f2:d9: 17:06:18:7d:38:67:3f:51:c2:c0:7a:49:a5:eb:bc: a0:87:b6:fa:77:03:a1:55:ee:f0:c5:c2:76:4a:3c: 21:2e:2c:55:f2:43:bf:9f:0d:96:f6:d4:e9:fc:27: 98:13:90:ca:ec:44:7e:e1:eb:a4:82:b0:ce:5d:45: 1e:2c:65:a7:ca:e1:2a:f5:63:ee:d9:c0:ec:5b:a1: 26:3b:84:a8:9c:85:bf:f2:e2:97:f2:17:05:6e:02: 36:a0:cf:e3:85:c3:0b:59:7d:5a:a5:40:25:12:46: 5a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DF:49:BC:DF:D0:17:D1:3E:CC:C7:16:23:98:E7:01:4E:D0:D1:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b6794d-5ae8-3a26-af4c-b99404165104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3a:d6:33:f4:e2:fb:b7:36:f6:2f:a7:53:26:76:c4:94:8f: 32:fa:0c:de:e6:47:2f:12:bf:0d:30:e7:22:e3:5b:a9:29:d9: ee:94:0b:bf:02:29:38:6b:5e:3f:a2:98:c7:55:d7:72:06:46: f4:72:33:ec:9a:93:f1:41:bd:fe:af:00:f9:c8:04:37:27:99: f0:68:6d:5e:3f:6d:7a:52:78:a9:c7:19:40:24:17:88:2c:37: b8:00:3e:70:40:98:f6:c0:89:e0:31:a9:07:be:af:df:47:95: 70:ff:ef:ad:17:e9:6e:3b:15:bc:4c:17:af:21:65:29:74:79: 74:7e:06:d4:b1:42:d3:be:e5:23:a1:cb:4a:29:4e:c0:6c:be: cc:86:5d:46:60:eb:56:a0:d8:13:a2:65:0f:a9:cc:f8:a1:22: c3:6c:ca:9d:92:3f:a5:23:ed:be:29:a3:5e:c6:bc:bd:15:a3: d4:6d:08:34:8b:11:5f:85:52:e2:5b:5a:41:3a:42:ae:e5:de: 59:51:25:d4:75:4c:37:cf:a0:71:0f:06:6b:0d:86:b9:d3:4b: 31:29:8f:a9:0e:3f:0b:a7:d7:94:56:f8:be:a4:be:f4:12:16: bb:6b:5b:a3:bf:8e:61:75:52:47:e1:ce:8d:f9:e4:49:62:30: b9:22:60:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwIJJtEB5EC7fN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk ZTNjMzhhMWQtMzFlOC00ZDM0LTk4MTItY2ZlZjUxMWI0Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7bg9s7rQ4456da0ZsPevPW1dSsuQ8P/orL0 UpLQc+GomIwmSvCzdbZRYIdi8ASc2Pf6fj+QmLBO6jTLRTntGUHhk+ZBQ7Nv7wH3 +sktRUXP7CjYRh7cNfaz4A5pqgKiTa3vIDxWKI225N7J+tdgUFw5frSNQ+xAmYpK BcwvfNkY6IIbrmL00sLyDEw9xJtRYlD88tkXBhh9OGc/UcLAekml67ygh7b6dwOh Ve7wxcJ2SjwhLixV8kO/nw2W9tTp/CeYE5DK7ER+4eukgrDOXUUeLGWnyuEq9WPu 2cDsW6EmO4SonIW/8uKX8hcFbgI2oM/jhcMLWX1apUAlEkZa0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPfSbzf0BfRPszHFiOY5wFO0NFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTliNjc5NGQtNWFlOC0z YTI2LWFmNGMtYjk5NDA0MTY1MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI61jP04vu3NvYvp1MmdsSUjzL6DN7mRy8Svw0w5yLjW6kp2e6UC78C KThrXj+imMdV13IGRvRyM+yak/FBvf6vAPnIBDcnmfBobV4/bXpSeKnHGUAkF4gs N7gAPnBAmPbAieAxqQe+r99HlXD/760X6W47FbxMF68hZSl0eXR+BtSxQtO+5SOh y0opTsBsvsyGXUZg61ag2BOiZQ+pzPihIsNsyp2SP6Uj7b4po17GvL0Vo9RtCDSL EV+FUuJbWkE6Qq7l3llRJdR1TDfPoHEPBmsNhrnTSzEpj6kOPwun15RW+L6kvvQS FrtrW6O/jmF1Ukfhzo355EliMLkiYHw= -----END CERTIFICATE-----Generated at Thu May 28 17:12:33 2026 by rpki-client