$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64ac9497-103c-301c-a483-d5e403daa85e.roa File: 64ac9497-103c-301c-a483-d5e403daa85e.roa (raw, json) Hash identifier: e6ARnnfS2xWOxflTPMyUlTyc+UeEG6aiAnDRtbpIKSg= Subject key identifier: 6E:DC:82:A1:CB:40:03:40:90:EF:FD:8B:A4:4E:C4:89:B2:C1:35:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DBA3B0845441230582586E0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64ac9497-103c-301c-a483-d5e403daa85e.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 7029 IP address blocks: 151.213.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:08:45:44:12:30:58:25:86:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=8e6de4eb-ac7b-4e9b-be98-0ab2c8550312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e4:36:a6:72:4c:b9:51:fd:bb:aa:39:28:5b: 06:b0:e1:d7:55:07:41:5e:71:42:04:77:72:56:97: ff:09:d1:2e:dd:cd:a6:75:6b:80:96:57:43:3d:e8: 05:e9:1d:a2:7a:ae:e8:dd:ec:23:30:65:87:02:ac: 21:05:d0:fb:23:49:32:72:e0:f2:5e:8c:99:08:5c: 4f:04:f3:99:de:98:41:9a:df:f7:2d:95:ef:9f:0a: c8:31:52:b6:c5:27:8d:01:fa:c2:e2:c8:8f:b1:db: 18:d4:24:95:f9:4a:10:67:53:96:04:62:0c:39:4e: 69:bc:a4:9f:ac:a0:e7:8d:1b:31:7f:7b:ad:b2:9e: e5:40:f8:db:93:4a:8b:e0:41:ba:62:d9:8d:b0:bf: 59:0f:2a:30:d1:bd:81:16:00:f7:74:e4:e0:2a:81: ee:47:fd:c0:1c:01:c7:4a:72:5e:ca:f5:b6:9c:37: ac:26:e5:9a:8d:76:3a:62:b9:a9:3f:c7:8b:10:8e: c4:00:78:6c:4e:96:91:0c:97:88:00:8a:c0:16:7f: 08:10:d4:6e:75:2d:51:97:73:a8:46:e7:53:51:24: 2a:ee:b2:32:4b:29:77:61:cf:77:78:21:03:4d:7a: ca:70:db:7f:5f:54:1e:60:d8:0a:e1:ec:b6:5e:25: 4a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DC:82:A1:CB:40:03:40:90:EF:FD:8B:A4:4E:C4:89:B2:C1:35:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64ac9497-103c-301c-a483-d5e403daa85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5b:91:13:50:6f:c2:02:11:23:4e:78:a7:ba:fe:bf:fa:23: 61:4c:72:a3:f0:86:3b:00:aa:37:be:37:f6:ae:fa:bb:89:55: 5f:37:2a:0e:7e:49:87:b1:d2:cd:74:7c:b9:0e:c1:14:05:03: e0:52:c6:ab:63:00:ce:7a:78:db:23:9d:04:96:bb:76:9a:5b: 9e:ca:35:54:2d:c5:cb:17:03:b2:99:9d:ee:ff:61:c5:b8:44: 90:e1:83:37:44:57:7e:1d:dc:d4:10:6f:f3:ad:34:d7:3f:e7: 57:99:75:a8:5a:8f:ef:50:e2:73:52:57:67:7c:8b:69:80:de: f7:47:ff:0e:84:45:5d:91:b9:55:fc:3e:ec:09:82:b6:c4:fb: 2b:d8:09:a0:45:fa:79:7d:10:fa:1a:43:74:e5:5f:ea:f1:e8: 78:93:81:7a:15:a8:9a:f6:4b:ae:bb:67:dc:b0:06:2b:34:7d: 28:fb:73:85:5c:bb:73:71:54:61:e0:56:32:6b:5d:2f:09:a4: b6:6b:a1:40:44:25:75:be:f4:16:90:99:58:61:02:79:d4:1f: 91:11:9b:9f:75:63:51:77:58:4a:47:97:39:a2:eb:f4:09:c4: f2:64:4f:dc:86:cc:d8:a6:3e:d1:eb:72:01:16:10:47:41:81: 67:d6:d0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OwhFRBIwWCWG4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk OGU2ZGU0ZWItYWM3Yi00ZTliLWJlOTgtMGFiMmM4NTUwMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOQ2pnJMuVH9u6o5KFsGsOHXVQdBXnFCBHdy Vpf/CdEu3c2mdWuAlldDPegF6R2ieq7o3ewjMGWHAqwhBdD7I0kycuDyXoyZCFxP BPOZ3phBmt/3LZXvnwrIMVK2xSeNAfrC4siPsdsY1CSV+UoQZ1OWBGIMOU5pvKSf rKDnjRsxf3utsp7lQPjbk0qL4EG6YtmNsL9ZDyow0b2BFgD3dOTgKoHuR/3AHAHH SnJeyvW2nDesJuWajXY6YrmpP8eLEI7EAHhsTpaRDJeIAIrAFn8IENRudS1Rl3Oo RudTUSQq7rIySyl3Yc93eCEDTXrKcNt/X1QeYNgK4ey2XiVKVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7cgqHLQANAkO/9i6ROxImywTUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRhYzk0OTctMTAzYy0z MDFjLWE0ODMtZDVlNDAzZGFhODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBbkRNQb8ICESNOeKe6/r/6I2FMcqPwhjsAqje+N/au+ruJVV83Kg5+ SYex0s10fLkOwRQFA+BSxqtjAM56eNsjnQSWu3aaW57KNVQtxcsXA7KZne7/YcW4 RJDhgzdEV34d3NQQb/OtNNc/51eZdahaj+9Q4nNSV2d8i2mA3vdH/w6ERV2RuVX8 PuwJgrbE+yvYCaBF+nl9EPoaQ3TlX+rx6HiTgXoVqJr2S667Z9ywBis0fSj7c4Vc u3NxVGHgVjJrXS8JpLZroUBEJXW+9BaQmVhhAnnUH5ERm591Y1F3WEpHlzmi6/QJ xPJkT9yGzNimPtHrcgEWEEdBgWfW0NA= -----END CERTIFICATE-----Generated at Wed May 13 08:49:46 2026 by rpki-client