$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca0fc261-9584-34a4-974c-31bffd768a15.roa File: ca0fc261-9584-34a4-974c-31bffd768a15.roa (raw, json) Hash identifier: 5iaThwYNOl5bEAAcC5urgjZt4OUYm+kzQknVC176GeU= Subject key identifier: 2A:B5:9F:66:DA:C4:69:B5:B5:91:49:43:07:D5:9A:B0:60:37:3B:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DD4C0815C49E578206859E100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca0fc261-9584-34a4-974c-31bffd768a15.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 7029 IP address blocks: 173.187.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:81:5c:49:e5:78:20:68:59:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=a8a76e86-1361-4ff3-a75b-11bcfe969f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fb:0c:45:0f:d3:fd:f1:0e:cc:63:d4:78:1f: e2:bc:c9:86:2d:0b:40:6d:99:37:92:9f:a2:84:9f: a7:df:cd:ac:1c:27:86:41:10:fe:a1:01:dc:b1:6f: fc:ca:c6:95:9c:43:19:8f:d4:34:43:d6:c3:67:5f: 7f:c6:c1:1f:b9:bb:c4:0f:e5:f9:db:75:69:3a:ff: 11:c5:38:30:40:b5:10:55:64:fd:33:b4:1f:8f:f1: f1:b2:06:0d:e9:73:37:a4:4f:75:20:3d:e8:87:ce: 06:ed:90:f8:b8:9b:5c:69:76:63:9c:a8:53:f8:43: c3:72:b3:4e:00:c1:3b:77:f8:8a:6d:38:3f:9d:b5: 45:57:c8:ab:23:f7:46:69:4e:d9:e3:0c:25:c0:dd: 0c:ce:3a:8b:5c:94:a1:b2:02:24:e9:40:a0:7d:c9: c2:04:94:6e:50:aa:e9:42:45:eb:3f:ca:9e:85:28: 3b:5c:c8:3b:9d:d1:68:14:98:50:c7:99:c3:b3:e7: a4:54:c8:b7:f9:d5:54:0c:6d:6e:89:2c:b1:e7:b3: e6:5c:11:16:0e:cd:5c:b6:d8:0c:29:a4:73:7a:a5: 95:9e:f5:38:b9:78:f4:19:69:67:a2:0b:41:4c:7b: d0:34:60:56:8c:3a:2e:90:e6:55:2a:e8:9f:f9:b4: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B5:9F:66:DA:C4:69:B5:B5:91:49:43:07:D5:9A:B0:60:37:3B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca0fc261-9584-34a4-974c-31bffd768a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8f:9c:7d:8d:d3:4c:36:72:e4:7e:ce:ff:41:72:f4:94:dd: a8:c7:4e:f6:42:fd:db:5b:a8:ea:af:b7:f8:a2:3c:9f:c4:5e: bb:a5:e6:de:60:57:2d:30:32:36:24:05:45:4f:a3:f8:d8:24: 0a:d4:74:75:fb:66:5d:d0:e5:84:e2:8c:83:7c:08:dc:82:34: 05:ff:86:d9:e9:9a:d7:57:a3:cd:a6:b4:90:88:14:9c:d2:8d: 87:b5:99:78:0c:3f:90:51:80:84:a3:d6:ee:22:be:2b:49:7e: ea:e7:96:69:ee:81:58:0a:90:0a:18:6b:9b:47:6e:a2:8f:fe: 78:06:09:60:a6:68:c9:9f:69:0f:f7:10:78:a6:3b:52:0e:fa: 0f:fb:e1:e8:23:22:e5:2d:fa:b0:7d:1e:ac:94:64:a6:5a:15: ca:0e:df:9a:80:21:1d:31:d7:33:19:aa:d2:0c:69:0d:ad:a6: 16:18:fe:88:fa:40:41:44:e6:cf:64:9c:6f:08:c9:fe:1d:39: ba:74:97:78:d9:a1:5c:e6:d6:48:81:9e:7a:d5:38:1f:78:b2: fd:eb:64:07:76:16:44:76:15:68:e3:e0:8f:eb:3d:3e:b9:44: 48:92:fc:99:97:7b:d6:78:0c:39:b5:08:fd:5c:56:e8:d0:90: 40:5c:4d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwIFcSeV4IGhZ4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk YThhNzZlODYtMTM2MS00ZmYzLWE3NWItMTFiY2ZlOTY5ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfsMRQ/T/fEOzGPUeB/ivMmGLQtAbZk3kp+i hJ+n382sHCeGQRD+oQHcsW/8ysaVnEMZj9Q0Q9bDZ19/xsEfubvED+X523VpOv8R xTgwQLUQVWT9M7Qfj/HxsgYN6XM3pE91ID3oh84G7ZD4uJtcaXZjnKhT+EPDcrNO AME7d/iKbTg/nbVFV8irI/dGaU7Z4wwlwN0MzjqLXJShsgIk6UCgfcnCBJRuUKrp QkXrP8qehSg7XMg7ndFoFJhQx5nDs+ekVMi3+dVUDG1uiSyx57PmXBEWDs1cttgM KaRzeqWVnvU4uXj0GWlnogtBTHvQNGBWjDoukOZVKuif+bSYEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq1n2baxGm1tZFJQwfVmrBgNztSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2EwZmMyNjEtOTU4NC0z NGE0LTk3NGMtMzFiZmZkNzY4YTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+PnH2N00w2cuR+zv9BcvSU3ajHTvZC/dtbqOqvt/iiPJ/EXrul5t5g Vy0wMjYkBUVPo/jYJArUdHX7Zl3Q5YTijIN8CNyCNAX/htnpmtdXo82mtJCIFJzS jYe1mXgMP5BRgISj1u4ivitJfurnlmnugVgKkAoYa5tHbqKP/ngGCWCmaMmfaQ/3 EHimO1IO+g/74egjIuUt+rB9HqyUZKZaFcoO35qAIR0x1zMZqtIMaQ2tphYY/oj6 QEFE5s9knG8Iyf4dObp0l3jZoVzm1kiBnnrVOB94sv3rZAd2FkR2FWjj4I/rPT65 REiS/JmXe9Z4DDm1CP1cVujQkEBcTfA= -----END CERTIFICATE-----Generated at Thu May 28 17:12:46 2026 by rpki-client