$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63e94886-7b47-39ca-8ce4-36137348d8c2.roa File: 63e94886-7b47-39ca-8ce4-36137348d8c2.roa (raw, json) Hash identifier: CsmrLAziKgX5GpXSJjzjUpvixo34Db+TLTKh7SccdKg= Subject key identifier: 73:DF:98:42:DC:9A:3A:01:FA:44:DF:9F:0E:F5:2C:DB:6E:ED:A1:2C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB0F300A89DA319078CC10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63e94886-7b47-39ca-8ce4-36137348d8c2.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 173.184.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0f:30:0a:89:da:31:90:78:cc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=3488c60a-cbe8-4ac5-a0e8-4f6382202f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:a6:db:bb:3e:2c:40:aa:7e:fe:3b:8d:2b: 39:3d:88:5d:89:4c:00:7f:fc:96:01:90:1c:b7:1d: e0:52:88:92:c8:3b:f8:38:ff:4c:7e:7e:17:65:26: ec:b2:77:89:5e:8e:41:6d:96:f0:e8:a8:41:37:63: 44:c3:3e:6e:1d:28:32:ae:8e:9a:67:8b:f2:77:51: e6:c5:a8:93:b1:9c:69:c6:1c:83:a2:85:89:ec:cd: c3:c3:2e:74:e0:48:32:d0:3c:73:1a:b4:ca:0c:f0: 62:bd:f2:07:db:54:a0:79:4b:cd:09:57:18:ba:73: 61:cc:ec:eb:e2:1c:56:3a:40:03:4f:2d:f1:70:89: 63:d4:de:de:77:1f:dd:30:1a:d9:f3:d3:64:7e:5a: 49:9a:08:8e:47:af:2a:a2:e6:6b:d5:0b:b7:45:40: 14:db:16:c7:17:a4:3e:bf:e3:39:ba:df:41:9f:4b: f4:07:61:6d:cd:a6:b6:61:2a:83:10:ce:47:d3:be: 43:4a:b0:19:b6:a5:62:31:07:78:c5:f7:63:61:21: af:bd:a7:8c:a9:0d:27:7e:ed:93:63:ed:59:1b:e0: 4d:1c:f5:9a:14:ca:e3:b5:b4:1b:a6:31:28:5c:75: f7:fe:3f:b4:a5:f7:e3:4e:ac:ed:48:47:e3:d5:6c: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DF:98:42:DC:9A:3A:01:FA:44:DF:9F:0E:F5:2C:DB:6E:ED:A1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63e94886-7b47-39ca-8ce4-36137348d8c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e0:5d:21:24:a8:f6:ed:cf:21:c1:43:86:2d:35:8d:69:de: b4:ad:91:6c:16:e8:4d:9b:57:bb:d0:47:4c:04:82:eb:98:ef: 9f:58:96:57:de:d9:d3:08:c4:fd:a2:c0:99:df:7d:1e:ec:eb: 85:ca:6b:b3:72:14:55:00:77:61:25:7f:23:bb:19:5d:87:fe: cb:fe:49:31:23:36:2a:04:3b:a2:56:23:e3:11:ed:3c:be:60: 31:ed:f3:3a:4b:82:ef:e0:96:21:9a:3c:13:a8:a9:1a:b0:fc: 00:0c:04:8c:cf:88:e2:b3:b9:79:43:a4:e0:58:d0:6d:dc:2d: d1:4c:a7:ee:68:f8:f8:02:b4:dd:e9:75:4e:b6:97:06:02:ff: ff:0e:fb:d2:fe:bc:a1:19:b4:38:a1:8f:97:31:af:8e:9f:3d: c7:2a:07:cf:53:d2:ad:f4:a6:bd:ed:af:ab:86:7d:ad:da:32: e7:31:92:c3:65:c2:46:bf:14:79:88:cb:2d:27:c0:ee:aa:c5: a4:ef:1c:ab:19:04:41:28:ad:f8:30:33:56:45:da:ba:4b:5d: 18:ae:88:87:60:00:a4:fa:01:fb:ad:b5:bd:26:44:a9:59:19: 10:b3:56:a4:71:ae:d2:fc:f5:60:d9:8f:28:30:ac:ed:ba:4a: 4f:dd:ab:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+w8wConaMZB4zBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MzQ4OGM2MGEtY2JlOC00YWM1LWEwZTgtNGY2MzgyMjAyZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAqm27s+LECqfv47jSs5PYhdiUwAf/yWAZAc tx3gUoiSyDv4OP9Mfn4XZSbssneJXo5BbZbw6KhBN2NEwz5uHSgyro6aZ4vyd1Hm xaiTsZxpxhyDooWJ7M3Dwy504Egy0DxzGrTKDPBivfIH21SgeUvNCVcYunNhzOzr 4hxWOkADTy3xcIlj1N7edx/dMBrZ89NkflpJmgiOR68qouZr1Qu3RUAU2xbHF6Q+ v+M5ut9Bn0v0B2Ftzaa2YSqDEM5H075DSrAZtqViMQd4xfdjYSGvvaeMqQ0nfu2T Y+1ZG+BNHPWaFMrjtbQbpjEoXHX3/j+0pffjTqztSEfj1Wy/7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPfmELcmjoB+kTfnw71LNtu7aEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjNlOTQ4ODYtN2I0Ny0z OWNhLThjZTQtMzYxMzczNDhkOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDgXSEkqPbtzyHBQ4YtNY1p3rStkWwW6E2bV7vQR0wEguuY759Yllfe 2dMIxP2iwJnffR7s64XKa7NyFFUAd2ElfyO7GV2H/sv+STEjNioEO6JWI+MR7Ty+ YDHt8zpLgu/gliGaPBOoqRqw/AAMBIzPiOKzuXlDpOBY0G3cLdFMp+5o+PgCtN3p dU62lwYC//8O+9L+vKEZtDihj5cxr46fPccqB89T0q30pr3tr6uGfa3aMucxksNl wka/FHmIyy0nwO6qxaTvHKsZBEEorfgwM1ZF2rpLXRiuiIdgAKT6Afuttb0mRKlZ GRCzVqRxrtL89WDZjygwrO26Sk/dq3E= -----END CERTIFICATE-----Generated at Wed May 13 11:15:30 2026 by rpki-client