$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/561b3df8-72ca-3293-b162-242024968966.roa File: 561b3df8-72ca-3293-b162-242024968966.roa (raw, json) Hash identifier: kuumLuSAkIDy4YYtYWFioHw53YfwTqdFxvjOLHkGd4o= Subject key identifier: 27:B3:F2:2D:66:8B:D4:13:D2:E9:85:5B:0E:18:9B:F2:AA:4D:E8:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCF2B19AA6E313F841CD46C10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/561b3df8-72ca-3293-b162-242024968966.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 7029 IP address blocks: 173.186.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:19:aa:6e:31:3f:84:1c:d4:6c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=619c2165-1819-4855-9110-ce7f5cf2fedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:9f:57:44:e1:ff:b1:f7:32:cb:1e:10:85: 64:ae:a3:e2:98:ad:e2:38:7b:25:b8:56:c1:66:bd: 8a:2e:0d:9d:47:d3:15:8b:10:e3:a9:42:91:0c:83: 46:46:8d:c6:ef:2c:62:93:98:09:06:91:40:2b:5c: 2e:e3:1d:f7:37:b0:16:79:cf:9e:0e:34:f4:57:e1: 8f:03:df:b0:6d:35:54:5b:e6:94:fc:f7:9f:f6:91: 6b:99:18:7e:21:f3:6b:f2:42:ab:5e:db:b3:15:e7: 1b:4b:c2:7a:21:27:06:34:a0:14:00:3a:50:ba:4b: 41:9a:d9:4f:16:87:92:f4:a7:f4:01:01:a5:66:71: 15:c6:ec:16:e3:73:ce:18:49:4b:c4:ed:1b:68:c7: 44:bd:05:94:9c:c4:fd:00:1b:d0:20:67:25:72:a8: fb:38:be:23:98:c2:78:1a:1f:6d:a6:0d:76:45:a5: 56:7b:d5:37:9f:c0:c3:44:a3:f6:31:77:f1:3f:f9: 65:f7:64:7b:68:af:78:36:64:6b:bb:c8:33:0d:86: 09:46:68:3d:5b:a9:16:87:7a:44:3c:67:e6:73:c5: ce:46:af:1a:d8:e8:99:67:6a:38:ff:9d:94:51:42: 0c:a6:78:6b:13:2b:5c:1f:1a:ad:95:9a:5e:47:30: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B3:F2:2D:66:8B:D4:13:D2:E9:85:5B:0E:18:9B:F2:AA:4D:E8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/561b3df8-72ca-3293-b162-242024968966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c0:61:60:9d:2a:d4:1d:fb:05:72:52:78:f2:cb:81:7a:a7: 62:ce:f0:88:86:ef:64:0e:e8:07:1a:09:f2:8a:3d:bf:e9:49: 73:30:42:b0:ec:05:f6:a3:17:46:62:05:ff:33:6a:a9:a4:5c: 4d:51:c4:c8:99:58:1d:70:0d:b3:85:d8:f1:bc:8b:f0:ba:f1: 82:4e:e6:df:d2:6d:7e:de:b8:4d:52:64:21:83:08:f9:4a:10: 78:9b:a9:2d:65:0c:15:b1:62:8a:65:68:bc:6a:ff:4c:a8:9e: 0e:8c:83:d3:68:ff:88:37:7c:20:fb:31:03:9d:73:a1:f2:a4: 4d:74:d9:e7:8f:f1:6f:d6:13:cd:78:1c:40:8f:99:ba:0f:ec: db:77:08:96:f3:5f:2b:29:30:91:bc:ca:fe:45:e2:d8:cf:ca: e8:77:83:e5:d5:d7:c5:7c:07:6c:5e:e4:f7:a1:a0:75:c8:06: 5a:91:30:14:2d:22:d1:c2:8f:a5:23:d8:49:cd:c7:68:22:ea: fb:b5:d3:25:aa:ce:ef:58:b2:ff:0f:bf:99:7b:2c:94:fe:5d: 10:61:2a:f6:81:06:be:9f:6c:f1:90:2b:56:f3:a4:77:52:88: de:4c:6d:5d:8d:7b:50:de:b2:25:75:95:06:10:49:16:dc:6f: 7b:b8:26:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKxmqbjE/hBzUbBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk NjE5YzIxNjUtMTgxOS00ODU1LTkxMTAtY2U3ZjVjZjJmZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+CfV0Th/7H3MsseEIVkrqPimK3iOHsluFbB Zr2KLg2dR9MVixDjqUKRDINGRo3G7yxik5gJBpFAK1wu4x33N7AWec+eDjT0V+GP A9+wbTVUW+aU/Pef9pFrmRh+IfNr8kKrXtuzFecbS8J6IScGNKAUADpQuktBmtlP FoeS9Kf0AQGlZnEVxuwW43POGElLxO0baMdEvQWUnMT9ABvQIGclcqj7OL4jmMJ4 Gh9tpg12RaVWe9U3n8DDRKP2MXfxP/ll92R7aK94NmRru8gzDYYJRmg9W6kWh3pE PGfmc8XORq8a2OiZZ2o4/52UUUIMpnhrEytcHxqtlZpeRzAqKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCez8i1mi9QT0umFWw4Ym/KqTej6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTYxYjNkZjgtNzJjYS0z MjkzLWIxNjItMjQyMDI0OTY4OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjAYWCdKtQd+wVyUnjyy4F6p2LO8IiG72QO6AcaCfKKPb/pSXMwQrDs BfajF0ZiBf8zaqmkXE1RxMiZWB1wDbOF2PG8i/C68YJO5t/SbX7euE1SZCGDCPlK EHibqS1lDBWxYoplaLxq/0yong6Mg9No/4g3fCD7MQOdc6HypE102eeP8W/WE814 HECPmboP7Nt3CJbzXyspMJG8yv5F4tjPyuh3g+XV18V8B2xe5PehoHXIBlqRMBQt ItHCj6Uj2EnNx2gi6vu10yWqzu9Ysv8Pv5l7LJT+XRBhKvaBBr6fbPGQK1bzpHdS iN5MbV2Ne1DesiV1lQYQSRbcb3u4Jss= -----END CERTIFICATE-----Generated at Wed May 13 05:21:37 2026 by rpki-client