$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa File: 7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa (raw, json) Hash identifier: /dWV+t5Z0C0wSnyD6p8zNB0KiWtsSWJw2wDwiiuGFQY= Subject key identifier: 60:66:30:F4:30:A5:FF:A7:74:19:CD:49:19:21:C0:0D:95:7B:E8:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB138870D62FACFE5EEBA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 174.131.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:13:88:70:d6:2f:ac:fe:5e:eb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=d0d4b8c4-6f6f-4b1d-9567-7369b505a0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:14:6a:ae:c1:1b:b8:d4:9f:c2:04:a1:b6: f1:ed:ff:d5:e9:87:1c:07:13:60:d1:80:b7:1a:5d: 31:41:4b:1e:55:f7:6d:6b:a4:58:6d:4f:29:f6:ab: c4:8a:9c:7d:08:6b:82:69:df:83:a8:73:cc:5d:46: c4:95:ee:cd:99:c4:3d:db:91:e9:67:70:e0:89:f6: 59:b5:b0:59:16:1f:a4:fc:fb:7c:f7:9c:81:ea:c4: 3f:a1:63:9d:40:aa:4a:ea:ad:8d:84:3d:93:f5:27: 97:b9:9f:43:d9:d7:57:d3:b2:74:1d:a2:7c:13:ea: 28:f6:d8:8d:29:7c:03:5a:5e:60:b1:82:53:02:a0: 57:87:54:dd:67:96:8f:7e:a4:b5:21:d2:4f:29:ee: 70:94:d1:62:b7:75:b2:6f:7b:ef:a1:76:fb:45:f6: f4:a8:99:48:4d:1d:10:3b:02:f9:b9:b7:34:f3:cf: 15:55:27:98:27:e3:6b:26:95:57:ee:5e:50:42:7f: cb:1f:31:7f:72:ac:31:36:51:da:8a:97:8c:e0:cd: b9:47:46:0d:07:48:36:45:3d:d4:41:44:ce:25:19: 4c:6f:d9:06:9f:12:6e:57:12:cb:7b:d5:5f:c0:b6: 0d:41:aa:ec:04:4f:2c:c0:a6:e9:05:92:f0:cf:43: df:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:66:30:F4:30:A5:FF:A7:74:19:CD:49:19:21:C0:0D:95:7B:E8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a7b0d97-7801-3cb6-8d30-a1c1493f86e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ea:71:38:98:43:e9:05:a2:fe:ad:d1:4e:d0:22:ae:34:41: 06:18:8c:65:d3:85:4a:d2:b2:4c:33:af:63:35:6b:ee:98:ec: 72:62:76:d2:22:31:b5:89:2c:bb:00:02:f9:36:a7:e0:3f:df: c1:e1:ae:d8:67:28:fe:ae:4a:08:7d:68:9d:6a:4b:7d:3c:32: 63:dd:d7:85:1c:09:c2:38:6a:0b:ed:03:e3:50:14:84:0b:49: 82:dd:59:28:ff:f2:4c:85:96:58:e0:32:06:fb:b2:c6:29:b4: 6e:56:4d:28:aa:73:71:52:cb:ff:a9:26:52:3f:e5:d6:23:64: dd:88:90:5a:4a:96:40:66:f6:2a:fe:6b:a0:4c:be:31:bb:0e: 3d:69:2b:77:97:31:a2:87:78:0c:22:1a:af:00:b8:8c:c8:7f: 62:11:c3:ea:7b:bf:90:b2:69:24:2a:55:71:44:39:7f:fa:62: 29:96:4b:f7:bf:00:d1:fe:fa:ae:55:9d:51:f7:ee:2d:57:ae: 06:9b:4e:d4:e4:2e:81:f9:d3:9b:fa:8b:cb:2f:55:79:e2:06: fa:51:82:37:8c:62:75:d2:af:25:e7:3b:82:fd:6e:24:39:24: ef:da:1f:94:88:a2:0b:cc:ca:c3:d4:dd:35:39:3c:fe:a9:3f: f7:2a:44:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xOIcNYvrP5e66AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDBkNGI4YzQtNmY2Zi00YjFkLTk1NjctNzM2OWI1MDVhMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aQUaq7BG7jUn8IEobbx7f/V6YccBxNg0YC3 Gl0xQUseVfdta6RYbU8p9qvEipx9CGuCad+DqHPMXUbEle7NmcQ925HpZ3DgifZZ tbBZFh+k/Pt895yB6sQ/oWOdQKpK6q2NhD2T9SeXuZ9D2ddX07J0HaJ8E+oo9tiN KXwDWl5gsYJTAqBXh1TdZ5aPfqS1IdJPKe5wlNFit3Wyb3vvoXb7Rfb0qJlITR0Q OwL5ubc0888VVSeYJ+NrJpVX7l5QQn/LHzF/cqwxNlHaipeM4M25R0YNB0g2RT3U QUTOJRlMb9kGnxJuVxLLe9VfwLYNQarsBE8swKbpBZLwz0Pf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBmMPQwpf+ndBnNSRkhwA2Ve+gYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2E3YjBkOTctNzgwMS0z Y2I2LThkMzAtYTFjMTQ5M2Y4NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfqcTiYQ+kFov6t0U7QIq40QQYYjGXThUrSskwzr2M1a+6Y7HJidtIi MbWJLLsAAvk2p+A/38HhrthnKP6uSgh9aJ1qS308MmPd14UcCcI4agvtA+NQFIQL SYLdWSj/8kyFlljgMgb7ssYptG5WTSiqc3FSy/+pJlI/5dYjZN2IkFpKlkBm9ir+ a6BMvjG7Dj1pK3eXMaKHeAwiGq8AuIzIf2IRw+p7v5CyaSQqVXFEOX/6YimWS/e/ ANH++q5VnVH37i1XrgabTtTkLoH505v6i8svVXniBvpRgjeMYnXSryXnO4L9biQ5 JO/aH5SIogvMysPU3TU5PP6pP/cqREk= -----END CERTIFICATE-----Generated at Wed May 13 07:08:33 2026 by rpki-client