$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cca3069e-b5be-3faf-a15b-d0f1b9ae1601.roa File: cca3069e-b5be-3faf-a15b-d0f1b9ae1601.roa (raw, json) Hash identifier: AjK9n97Gx2ByemSJLCPtjKKRYdQgla0KCAdw/x4ctWg= Subject key identifier: C3:D0:8A:FD:F3:4B:F2:EF:4A:BE:53:D6:37:80:DF:2A:EC:E6:19:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E08D32E7C89A58122F7352B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cca3069e-b5be-3faf-a15b-d0f1b9ae1601.roa Signing time: Tue 02 Jun 2026 04:40:29 +0000 ROA not before: Tue 02 Jun 2026 04:40:29 +0000 ROA not after: Mon 31 Aug 2026 04:40:29 +0000 asID: 7029 IP address blocks: 174.131.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:d3:2e:7c:89:a5:81:22:f7:35:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 2 04:40:29 2026 GMT Not After : Aug 31 04:40:29 2026 GMT Subject: CN=d096c948-a837-4ec6-be5f-d9a6a150111d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:90:22:73:a8:b2:2f:17:33:bf:f9:1b:18: 88:5a:59:f6:0a:7b:eb:2a:69:ec:fd:76:17:2b:13: 98:5a:6b:c5:b7:88:da:e2:80:df:58:8a:94:9c:ac: 42:c9:49:41:48:1e:50:3c:f6:7e:77:ef:67:b6:69: 63:13:41:72:73:50:2e:17:1f:3e:fd:d9:d1:f9:d6: 3a:70:ee:1d:70:30:cb:5c:8e:e4:d7:00:a5:4d:3e: bf:ab:d1:02:00:ae:29:00:6c:cd:65:6c:24:69:3c: 58:b5:ad:13:fc:7c:8e:6e:d4:0f:06:cb:f1:b2:f9: 9e:ae:96:ff:c6:54:52:9a:31:f9:e9:86:11:54:48: 8e:40:3c:40:d3:ff:7e:4f:a2:8c:48:9d:37:05:5a: 21:5a:b1:a0:14:1e:54:42:c4:c5:bf:d9:8f:79:df: 2f:e8:b2:a6:e6:17:36:0b:8f:c4:48:50:2e:9c:16: ee:dd:bd:a5:45:7d:ba:32:8b:c9:9d:75:b3:66:59: 09:f1:1b:8f:02:4a:87:da:28:76:62:72:d9:1d:4d: 7b:89:53:cb:f7:ec:71:56:30:11:6c:98:ec:b9:20: 80:af:3a:10:e1:03:f5:74:10:3f:80:e5:3f:92:de: 24:ca:02:e3:7a:79:6c:6b:da:9b:84:52:76:9c:fd: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:8A:FD:F3:4B:F2:EF:4A:BE:53:D6:37:80:DF:2A:EC:E6:19:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cca3069e-b5be-3faf-a15b-d0f1b9ae1601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6c:53:c2:29:37:1b:a2:d8:ec:5b:21:c5:33:6a:5b:7d:ef: a9:37:ee:f5:42:b0:fe:0e:39:5f:7d:9e:d4:ee:13:9a:c3:39: ee:88:de:b8:b7:4c:a0:f9:16:31:e0:1a:11:58:52:80:77:f1: 35:21:60:6d:dd:e6:2e:1d:c0:f6:80:da:f0:c1:69:d0:e2:98: e5:47:34:a9:29:8e:c4:47:72:6c:08:8b:60:b3:81:e7:63:37: 13:f8:39:4e:04:e0:4a:e4:00:4b:a2:35:db:42:d5:c1:7d:84: f8:d1:4c:6c:87:93:fa:8e:70:26:a8:9c:7f:87:f5:b0:db:37: 66:db:29:69:ef:be:c2:34:a1:22:48:be:fb:d8:be:12:16:6e: 1c:6b:14:bc:64:7b:09:84:19:83:52:4b:08:37:8b:e9:d7:52: 58:6d:31:b6:09:99:fc:d0:c1:c5:35:15:ef:07:a2:66:bf:00: cd:1c:a4:45:fa:81:c2:2c:54:8a:23:b4:0e:b4:b1:c5:13:20: 48:a1:95:28:b3:1e:b4:f2:86:20:75:23:f2:67:b1:20:0a:b8: cf:b1:1b:11:35:25:13:30:67:25:e5:72:63:6e:43:96:c2:42: e3:bf:b2:21:59:31:cd:e4:46:a3:18:fb:c4:d3:e4:8d:0e:67: c9:50:99:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4I0y58iaWBIvc1KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMjA0NDAyOVoXDTI2MDgzMTA0NDAyOVowLzEtMCsGA1UEAxMk ZDA5NmM5NDgtYTgzNy00ZWM2LWJlNWYtZDlhNmExNTAxMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymiQInOosi8XM7/5GxiIWln2CnvrKmns/XYX KxOYWmvFt4ja4oDfWIqUnKxCyUlBSB5QPPZ+d+9ntmljE0Fyc1AuFx8+/dnR+dY6 cO4dcDDLXI7k1wClTT6/q9ECAK4pAGzNZWwkaTxYta0T/HyObtQPBsvxsvmerpb/ xlRSmjH56YYRVEiOQDxA0/9+T6KMSJ03BVohWrGgFB5UQsTFv9mPed8v6LKm5hc2 C4/ESFAunBbu3b2lRX26MovJnXWzZlkJ8RuPAkqH2ih2YnLZHU17iVPL9+xxVjAR bJjsuSCArzoQ4QP1dBA/gOU/kt4kygLjenlsa9qbhFJ2nP0W8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPQiv3zS/LvSr5T1jeA3yrs5hm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2NhMzA2OWUtYjViZS0z ZmFmLWExNWItZDBmMWI5YWUxNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZsU8IpNxui2OxbIcUzalt976k37vVCsP4OOV99ntTuE5rDOe6I3ri3 TKD5FjHgGhFYUoB38TUhYG3d5i4dwPaA2vDBadDimOVHNKkpjsRHcmwIi2Czgedj NxP4OU4E4ErkAEuiNdtC1cF9hPjRTGyHk/qOcCaonH+H9bDbN2bbKWnvvsI0oSJI vvvYvhIWbhxrFLxkewmEGYNSSwg3i+nXUlhtMbYJmfzQwcU1Fe8Homa/AM0cpEX6 gcIsVIojtA60scUTIEihlSizHrTyhiB1I/JnsSAKuM+xGxE1JRMwZyXlcmNuQ5bC QuO/siFZMc3kRqMY+8TT5I0OZ8lQmaI= -----END CERTIFICATE-----Generated at Tue Jun 2 21:35:58 2026 by rpki-client