$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/567b714c-d4e2-3e1c-b709-8dad7e7b8cdc.roa File: 567b714c-d4e2-3e1c-b709-8dad7e7b8cdc.roa (raw, json) Hash identifier: aMaOZ1Lc3JFbc8Dg+8oJ0P8BGjgKNLebzMbulY7lmHo= Subject key identifier: 3C:61:C7:14:59:DD:EA:46:E3:5A:88:24:EC:AA:03:87:E5:BE:AB:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB0F8DD2313BA93A3E2CBA Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/567b714c-d4e2-3e1c-b709-8dad7e7b8cdc.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 174.131.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0f:8d:d2:31:3b:a9:3a:3e:2c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=79551a84-65f8-4129-a3e6-3a9b5fcb285a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:7f:89:b9:16:8a:61:9f:24:f3:fe:03:8a: e2:60:39:59:da:99:34:77:5b:12:9b:7e:0d:8e:3d: 70:37:32:a0:64:21:d1:52:ed:4d:46:b6:4b:86:40: bb:e5:f2:92:99:d7:e3:dd:aa:13:2a:8b:13:44:d7: db:81:cd:a8:90:09:5a:37:4b:42:a5:4e:14:96:d6: dc:fe:d7:71:7b:e1:00:94:53:57:f3:4d:e8:77:aa: 9b:09:0e:d1:3c:73:d9:dd:9e:ef:97:ec:87:ca:32: 85:57:57:58:19:9b:d7:bf:96:5c:b6:df:3b:92:32: 28:4c:ff:46:33:da:a5:a0:20:e0:8d:9c:0c:34:9d: 31:2f:de:11:5d:ad:aa:df:a0:61:94:cf:06:b5:8b: 30:3c:9f:cb:c2:7f:87:52:cd:21:cc:e3:8d:11:89: 05:a7:1c:87:4f:24:ea:b3:cc:82:fc:c9:44:20:1b: 86:96:34:f4:3c:ad:74:ca:c5:3e:c0:a2:da:cc:20: a9:41:3e:33:6d:d8:94:43:0f:4b:38:fa:32:75:3c: a2:73:de:10:d8:0e:c7:79:58:e2:07:15:86:8b:bf: 74:a2:5a:24:2c:04:9f:c4:3a:89:e0:2e:8c:77:57: 6a:91:b9:dd:16:95:26:e8:60:d3:07:92:7d:a6:dd: ca:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:61:C7:14:59:DD:EA:46:E3:5A:88:24:EC:AA:03:87:E5:BE:AB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/567b714c-d4e2-3e1c-b709-8dad7e7b8cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:90:42:e1:72:22:2d:ed:3a:ac:5b:97:c3:d3:f2:96:1e:26: 65:12:6a:0d:67:de:0b:35:49:bd:9f:a5:0f:84:51:e1:6c:16: 39:46:28:b8:f5:e2:a4:67:be:61:83:b5:91:fc:46:91:41:da: 08:28:d0:f5:72:46:91:11:76:18:c8:09:f6:58:2f:ab:b5:d4: 5c:f4:cf:a0:e8:6f:36:f4:57:2c:67:b7:72:e8:70:a3:81:23: 6b:03:ea:4c:2b:97:30:fa:51:aa:27:31:91:d8:9c:a4:9f:7d: db:26:02:40:1f:74:f0:93:3a:6f:65:bc:e6:f2:49:93:d5:27: 77:09:42:fa:e1:0e:88:89:32:30:73:3c:b5:6c:27:ad:2c:df: 13:97:d4:55:36:a9:74:3b:9a:0b:d3:81:86:66:df:76:92:ea: 22:aa:df:ff:f7:a7:fb:eb:1b:3c:ab:66:9e:a1:90:e1:c1:de: fd:ad:b7:0c:ec:38:78:a0:76:42:cc:74:a1:e7:72:36:ca:82: 37:7d:22:b4:aa:58:32:48:26:35:94:f5:90:54:60:62:b6:60: 33:49:6b:0d:a8:6e:a4:d5:63:40:9a:74:0a:8d:ce:b2:67:52: 0b:3f:14:89:76:97:91:8f:1b:03:75:48:e8:19:8f:c3:4f:f0: 67:c4:ed:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+w+N0jE7qTo+LLowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk Nzk1NTFhODQtNjVmOC00MTI5LWEzZTYtM2E5YjVmY2IyODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokx/ibkWimGfJPP+A4riYDlZ2pk0d1sSm34N jj1wNzKgZCHRUu1NRrZLhkC75fKSmdfj3aoTKosTRNfbgc2okAlaN0tCpU4Ultbc /tdxe+EAlFNX803od6qbCQ7RPHPZ3Z7vl+yHyjKFV1dYGZvXv5Zctt87kjIoTP9G M9qloCDgjZwMNJ0xL94RXa2q36BhlM8GtYswPJ/Lwn+HUs0hzOONEYkFpxyHTyTq s8yC/MlEIBuGljT0PK10ysU+wKLazCCpQT4zbdiUQw9LOPoydTyic94Q2A7HeVji BxWGi790olokLASfxDqJ4C6Md1dqkbndFpUm6GDTB5J9pt3KDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxhxxRZ3epG41qIJOyqA4flvquIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY3YjcxNGMtZDRlMi0z ZTFjLWI3MDktOGRhZDdlN2I4Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaQQuFyIi3tOqxbl8PT8pYeJmUSag1n3gs1Sb2fpQ+EUeFsFjlGKLj1 4qRnvmGDtZH8RpFB2ggo0PVyRpERdhjICfZYL6u11Fz0z6Dobzb0Vyxnt3LocKOB I2sD6kwrlzD6UaonMZHYnKSffdsmAkAfdPCTOm9lvObySZPVJ3cJQvrhDoiJMjBz PLVsJ60s3xOX1FU2qXQ7mgvTgYZm33aS6iKq3//3p/vrGzyrZp6hkOHB3v2ttwzs OHigdkLMdKHncjbKgjd9IrSqWDJIJjWU9ZBUYGK2YDNJaw2obqTVY0CadAqNzrJn Ugs/FIl2l5GPGwN1SOgZj8NP8GfE7Uc= -----END CERTIFICATE-----Generated at Wed May 13 05:06:08 2026 by rpki-client