$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa File: da9a9401-3f1f-3569-8f05-b7640211ba28.roa (raw, json) Hash identifier: 14knrk1Xc1JcB7Tmt8ANN2VylQ8q9Y8sK7EZ2peeKss= Subject key identifier: 57:78:70:C2:50:35:74:F5:90:0E:97:AF:AA:50:44:0D:74:EC:E6:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E31CF7CB6DA3BCEACC3E30F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 173.184.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:7c:b6:da:3b:ce:ac:c3:e3:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=07e0933e-96c2-4427-8c29-e998b7dc2d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:df:a3:13:0d:4e:a4:8a:bd:c4:40:87:4b: 5e:69:95:20:a6:47:41:05:5e:ad:61:bb:e3:3b:25: c4:37:65:c7:7e:80:5a:8d:af:12:9a:c3:74:47:12: 25:1f:13:90:88:eb:85:5f:0b:8e:6d:12:d3:ac:92: cd:66:2f:52:01:36:2e:77:18:5d:04:6b:b7:33:d8: 51:96:66:0d:46:4f:f1:e3:50:d4:b4:12:be:e7:6d: 2e:a7:a6:93:19:20:bc:f3:de:d8:4e:97:4b:34:c2: 15:14:87:59:15:f8:d5:47:5f:9a:36:61:0d:e6:77: bd:45:eb:27:22:14:33:46:51:7e:23:68:25:db:48: 8f:2e:fb:34:ec:44:e3:73:dc:d9:13:98:8e:83:cd: e9:9b:a7:37:17:81:b9:2c:9b:52:1e:1c:98:7f:1f: 7a:7c:cc:bc:8b:76:06:33:9d:64:4f:0c:e8:47:f3: 54:f2:88:da:8f:a6:fb:73:fe:60:f8:56:b3:a5:e6: 5e:32:46:af:8b:b6:c6:fd:14:cb:9a:46:31:3f:ae: 72:23:d4:b2:67:50:63:b6:51:56:1f:ee:ec:ea:c1: f9:bb:17:69:5d:93:10:99:b9:9c:ce:d7:95:dd:71: 99:15:28:73:86:48:44:10:68:48:4d:cc:fc:a9:b3: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:78:70:C2:50:35:74:F5:90:0E:97:AF:AA:50:44:0D:74:EC:E6:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:65:c8:36:20:3c:43:3a:4c:a2:f9:6c:d2:ef:08:55:8d:bf: f2:57:f0:4a:0d:48:d8:d3:3a:78:05:b6:d9:b7:9a:b0:fb:00: 58:1c:5b:3f:cc:76:cc:09:e8:31:02:92:64:65:b3:39:08:bb: 99:90:08:65:69:6f:2a:2c:0f:ea:05:da:25:5a:d5:3b:60:b6: 60:0c:48:30:a4:27:91:09:eb:f6:23:67:e3:1d:fb:79:f3:87: 36:4e:f5:de:f6:8b:a4:c6:42:4e:3a:ff:0f:13:35:e2:d4:ca: 4d:b7:fc:c5:9c:6c:ed:7e:62:01:c0:53:1d:64:98:d8:c6:91: e8:d3:98:59:94:21:1c:ac:cf:4c:1b:0d:94:f2:13:bd:b7:48: a9:b3:3b:ad:59:24:53:0e:4f:cb:a6:5c:93:75:4d:07:0d:75: af:e7:aa:96:35:1f:89:c8:2d:31:34:4e:8c:c6:64:06:2a:85: df:4d:de:00:64:75:c8:58:59:f2:a6:37:b3:b9:6a:37:44:c1: 41:36:27:60:56:fe:75:17:de:a0:8a:70:36:df:bb:f6:9e:22: 54:33:51:d4:39:40:da:74:7f:42:3c:b4:ff:d4:40:fa:1c:52: 8c:31:48:66:23:b5:e9:02:c3:3f:e7:ab:97:3b:1c:9b:1c:2f: c9:8b:20:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz3y22jvOrMPjDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk MDdlMDkzM2UtOTZjMi00NDI3LThjMjktZTk5OGI3ZGMyZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSLfoxMNTqSKvcRAh0teaZUgpkdBBV6tYbvj OyXEN2XHfoBaja8SmsN0RxIlHxOQiOuFXwuObRLTrJLNZi9SATYudxhdBGu3M9hR lmYNRk/x41DUtBK+520up6aTGSC8897YTpdLNMIVFIdZFfjVR1+aNmEN5ne9Resn IhQzRlF+I2gl20iPLvs07ETjc9zZE5iOg83pm6c3F4G5LJtSHhyYfx96fMy8i3YG M51kTwzoR/NU8ojaj6b7c/5g+FazpeZeMkavi7bG/RTLmkYxP65yI9SyZ1BjtlFW H+7s6sH5uxdpXZMQmbmczteV3XGZFShzhkhEEGhITcz8qbMGyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd4cMJQNXT1kA6Xr6pQRA107OZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE5YTk0MDEtM2YxZi0z NTY5LThmMDUtYjc2NDAyMTFiYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVlyDYgPEM6TKL5bNLvCFWNv/JX8EoNSNjTOngFttm3mrD7AFgcWz/M dswJ6DECkmRlszkIu5mQCGVpbyosD+oF2iVa1TtgtmAMSDCkJ5EJ6/YjZ+Md+3nz hzZO9d72i6TGQk46/w8TNeLUyk23/MWcbO1+YgHAUx1kmNjGkejTmFmUIRysz0wb DZTyE723SKmzO61ZJFMOT8umXJN1TQcNda/nqpY1H4nILTE0TozGZAYqhd9N3gBk dchYWfKmN7O5ajdEwUE2J2BW/nUX3qCKcDbfu/aeIlQzUdQ5QNp0f0I8tP/UQPoc UowxSGYjtekCwz/nq5c7HJscL8mLIFc= -----END CERTIFICATE-----Generated at Mon Jul 13 05:56:45 2026 by rpki-client