$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80428da3-ea04-34df-82ba-36d0ecb96301.roa File: 80428da3-ea04-34df-82ba-36d0ecb96301.roa (raw, json) Hash identifier: UrpXL2eLMtUyogXO32LJotPW4V1IePUPVT3BIIrWEjM= Subject key identifier: B9:16:E6:BC:C0:3D:2C:E0:FA:E8:F4:CB:9F:44:8E:AC:7B:A6:3E:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DC8305D5F0BEDD301C7BCBE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80428da3-ea04-34df-82ba-36d0ecb96301.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 173.187.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:5d:5f:0b:ed:d3:01:c7:bc:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=11af7fbb-fb66-463e-921a-1ae8551c04e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6f:83:39:94:2f:f3:b9:20:ab:a2:ea:4c:fa: a9:8e:e5:14:ef:67:59:5f:04:b7:79:d2:43:f8:b2: 9e:44:a2:4b:40:24:d5:0f:94:9c:b5:79:3d:27:a7: 30:df:3d:28:2c:03:80:52:5f:2b:3a:c0:a3:11:5c: 7a:4a:2b:4d:f9:d3:9b:e2:19:20:60:79:21:0a:69: c5:7a:5e:1b:89:f5:eb:c1:b0:62:af:08:bf:71:f7: 06:b1:19:5a:44:eb:90:44:24:46:a4:56:0c:84:08: e1:f8:62:8b:74:7c:4d:78:c9:70:e6:05:09:88:d2: 4b:48:7d:bd:67:55:50:a2:5d:86:9f:a5:28:aa:da: 0b:d6:af:cd:ed:1c:a6:d0:c8:cd:9a:ec:78:f3:1e: 52:61:19:49:4a:d3:16:8c:fc:35:17:b2:99:ae:98: 40:47:ac:20:79:47:1f:07:b6:aa:42:4c:13:8f:45: a1:51:0c:37:6e:13:9e:1f:5b:1e:9e:f9:30:f8:bb: 70:35:ed:f0:51:75:00:f4:78:7e:3c:a2:90:d1:e1: 48:cd:ad:e9:cd:39:51:cf:44:0f:e4:6e:5a:e9:79: 2e:d9:e2:f7:99:e4:23:db:b3:ac:3b:1a:4b:2a:b2: 95:3a:c0:dd:f9:d9:2e:59:f1:72:a3:1f:ea:bb:01: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:16:E6:BC:C0:3D:2C:E0:FA:E8:F4:CB:9F:44:8E:AC:7B:A6:3E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80428da3-ea04-34df-82ba-36d0ecb96301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:11:59:f8:8d:0d:08:f3:03:d1:f2:89:a5:bb:60:69:b9:c2: 72:d3:ca:29:a0:8e:71:91:65:aa:ee:d6:21:9b:b9:78:19:22: 4c:d0:f3:28:fd:19:09:54:7c:59:e3:4a:07:37:3e:94:d7:43: 6f:0e:f5:4c:53:39:3f:46:95:5c:0d:54:be:ef:c6:61:d9:65: 58:cb:29:f0:77:62:26:21:f6:2b:99:ef:f7:99:c0:7e:85:50: a8:6e:a8:5f:b7:93:05:5e:ab:cd:41:87:9b:c8:4a:3c:77:43: d7:5f:26:13:c0:1d:01:8d:07:72:9f:97:5b:d9:16:d7:dc:41: 53:e7:e5:30:6b:73:db:3f:c4:6f:b5:3d:c6:3b:cc:42:fc:2c: 15:3a:da:6d:18:d9:5c:bc:04:a3:1d:3f:ec:60:93:f5:eb:d2: ae:88:f7:d3:9e:20:f8:1a:f3:98:be:50:a5:51:2a:8f:ea:21: de:4e:c0:33:21:0e:76:01:64:fa:d5:79:f6:4b:5e:57:09:20: 04:8b:36:3a:55:64:0c:25:28:eb:e8:b4:5d:24:e5:36:f1:48: 8e:64:a2:be:41:9f:bc:b8:70:e4:3b:0a:0d:1c:c2:c3:af:be: a6:cd:27:73:1a:8a:ee:80:6b:34:16:44:a7:33:92:fc:25:d2: fc:0e:bc:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMF1fC+3TAce8voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk MTFhZjdmYmItZmI2Ni00NjNlLTkyMWEtMWFlODU1MWMwNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22+DOZQv87kgq6LqTPqpjuUU72dZXwS3edJD +LKeRKJLQCTVD5SctXk9J6cw3z0oLAOAUl8rOsCjEVx6SitN+dOb4hkgYHkhCmnF el4bifXrwbBirwi/cfcGsRlaROuQRCRGpFYMhAjh+GKLdHxNeMlw5gUJiNJLSH29 Z1VQol2Gn6UoqtoL1q/N7Rym0MjNmux48x5SYRlJStMWjPw1F7KZrphAR6wgeUcf B7aqQkwTj0WhUQw3bhOeH1senvkw+LtwNe3wUXUA9Hh+PKKQ0eFIza3pzTlRz0QP 5G5a6Xku2eL3meQj27OsOxpLKrKVOsDd+dkuWfFyox/quwEcEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkW5rzAPSzg+uj0y59Ejqx7pj5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODA0MjhkYTMtZWEwNC0z NGRmLTgyYmEtMzZkMGVjYjk2MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoRWfiNDQjzA9HyiaW7YGm5wnLTyimgjnGRZaru1iGbuXgZIkzQ8yj9 GQlUfFnjSgc3PpTXQ28O9UxTOT9GlVwNVL7vxmHZZVjLKfB3YiYh9iuZ7/eZwH6F UKhuqF+3kwVeq81Bh5vISjx3Q9dfJhPAHQGNB3Kfl1vZFtfcQVPn5TBrc9s/xG+1 PcY7zEL8LBU62m0Y2Vy8BKMdP+xgk/Xr0q6I99OeIPga85i+UKVRKo/qId5OwDMh DnYBZPrVefZLXlcJIASLNjpVZAwlKOvotF0k5TbxSI5kor5Bn7y4cOQ7Cg0cwsOv vqbNJ3Maiu6AazQWRKczkvwl0vwOvDI= -----END CERTIFICATE-----Generated at Wed May 13 09:22:34 2026 by rpki-client