$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d44dd644-7272-3372-be1b-4b120ee4030a.roa File: d44dd644-7272-3372-be1b-4b120ee4030a.roa (raw, json) Hash identifier: rgCGtn307bWlu3DhV8CSnUA7WNNPimNPlJvMNGwVXX4= Subject key identifier: 10:65:6E:BA:95:68:4E:49:F4:F9:24:91:A0:0C:3E:C9:31:3A:4A:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D6C7ABA2A0EB658F12C8D3B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d44dd644-7272-3372-be1b-4b120ee4030a.roa Signing time: Tue 07 Apr 2026 04:36:09 +0000 ROA not before: Tue 07 Apr 2026 04:36:09 +0000 ROA not after: Mon 06 Jul 2026 04:36:09 +0000 asID: 7029 IP address blocks: 173.191.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:7a:ba:2a:0e:b6:58:f1:2c:8d:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 7 04:36:09 2026 GMT Not After : Jul 6 04:36:09 2026 GMT Subject: CN=58dedc92-7e77-4a54-ae50-acf0dff04ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:10:71:33:12:ae:3d:79:c0:1c:21:54:98:a7: 61:b3:cc:da:cc:df:9d:06:a5:e5:d8:06:8d:f3:fb: 87:be:5d:93:f8:54:7a:c3:97:c6:f7:61:6b:85:ae: 1d:06:e0:ba:f7:f6:42:ed:bb:4e:9f:9d:8b:83:31: cc:55:de:a6:9a:d6:bd:44:49:3b:61:0d:16:6e:dc: 4e:db:07:72:a1:98:75:92:12:92:47:39:81:ba:9d: eb:4c:62:2c:bd:b1:5f:86:1a:88:5a:e0:16:8a:9f: e2:b4:16:7b:f8:75:2b:a6:4f:6a:0a:25:fc:e8:88: e8:ac:f8:2e:60:cb:bb:d1:8e:54:ec:6a:33:9d:70: ea:37:1f:52:0f:fa:41:b8:86:17:97:67:ca:a7:a9: ef:87:9d:00:20:c8:28:4e:8a:29:b6:f6:19:74:de: 32:1f:1b:09:87:09:97:3d:3e:d7:41:47:65:29:9b: 96:aa:14:dc:e8:8a:15:82:63:11:4e:c6:6e:51:8d: 17:37:93:f9:50:d9:bf:a0:59:14:e7:2a:11:db:bb: 8d:d5:ca:a5:5f:ab:39:72:41:b7:12:22:f7:0b:07: f0:37:cd:e7:fe:fd:87:10:e8:0b:b0:c6:a4:d2:49: 84:04:50:41:4b:36:45:c1:11:d4:07:70:40:b1:bf: 79:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:65:6E:BA:95:68:4E:49:F4:F9:24:91:A0:0C:3E:C9:31:3A:4A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d44dd644-7272-3372-be1b-4b120ee4030a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:39:cc:d9:4c:9a:54:0f:04:a9:24:58:b5:85:2a:02:1b:a4: 8e:99:01:57:ba:fe:d0:cd:42:9d:7c:ec:95:b2:1b:e9:04:0c: 00:c6:81:cc:e3:c3:12:da:a3:28:fb:f9:54:ae:32:ec:1d:b1: 5d:bb:0b:fa:10:91:12:e8:2c:af:c1:2f:e2:2c:d4:5b:3c:b9: 31:21:bd:45:98:5f:30:6c:87:31:d8:35:8b:bc:be:a1:b3:be: 26:a1:e1:f4:92:8f:cd:10:ba:75:dc:c3:0b:04:d5:da:58:67: cc:86:ae:ad:60:ff:c5:6b:40:81:96:f4:4e:da:33:fd:e5:2e: 3e:7b:db:78:25:80:45:12:64:63:3b:95:61:b1:b1:b0:2d:60: 2d:87:c3:21:c0:2a:b3:e2:f3:e4:5a:96:6c:a0:18:35:b8:e1: bd:86:fe:19:7b:bc:d4:90:b0:e0:99:bc:c0:17:da:ea:ec:7c: d7:46:33:7b:57:22:00:91:09:dd:2a:06:50:20:d8:cd:f0:fe: 82:4b:86:fa:ee:05:9f:d9:05:5d:8c:4d:9b:bb:70:99:b7:f2: fd:ac:fb:e8:91:e8:35:db:fb:d3:4d:34:29:c9:e0:f6:d1:ba: ad:cf:01:6d:b9:01:40:71:4d:d3:95:ab:71:4b:16:b6:72:9f: c8:84:fd:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1seroqDrZY8SyNO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwNzA0MzYwOVoXDTI2MDcwNjA0MzYwOVowLzEtMCsGA1UEAxMk NThkZWRjOTItN2U3Ny00YTU0LWFlNTAtYWNmMGRmZjA0Y2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBBxMxKuPXnAHCFUmKdhs8zazN+dBqXl2AaN 8/uHvl2T+FR6w5fG92Frha4dBuC69/ZC7btOn52LgzHMVd6mmta9REk7YQ0WbtxO 2wdyoZh1khKSRzmBup3rTGIsvbFfhhqIWuAWip/itBZ7+HUrpk9qCiX86IjorPgu YMu70Y5U7GoznXDqNx9SD/pBuIYXl2fKp6nvh50AIMgoTooptvYZdN4yHxsJhwmX PT7XQUdlKZuWqhTc6IoVgmMRTsZuUY0XN5P5UNm/oFkU5yoR27uN1cqlX6s5ckG3 EiL3CwfwN83n/v2HEOgLsMak0kmEBFBBSzZFwRHUB3BAsb950wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBlbrqVaE5J9PkkkaAMPskxOkqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDQ0ZGQ2NDQtNzI3Mi0z MzcyLWJlMWItNGIxMjBlZTQwMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc5zNlMmlQPBKkkWLWFKgIbpI6ZAVe6/tDNQp187JWyG+kEDADGgczj wxLaoyj7+VSuMuwdsV27C/oQkRLoLK/BL+Is1Fs8uTEhvUWYXzBshzHYNYu8vqGz viah4fSSj80QunXcwwsE1dpYZ8yGrq1g/8VrQIGW9E7aM/3lLj5723glgEUSZGM7 lWGxsbAtYC2HwyHAKrPi8+RalmygGDW44b2G/hl7vNSQsOCZvMAX2ursfNdGM3tX IgCRCd0qBlAg2M3w/oJLhvruBZ/ZBV2MTZu7cJm38v2s++iR6DXb+9NNNCnJ4PbR uq3PAW25AUBxTdOVq3FLFrZyn8iE/Zg= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:37 2026 by rpki-client