$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fe2032b-02a1-37ad-a386-655ef1884c8c.roa File: 9fe2032b-02a1-37ad-a386-655ef1884c8c.roa (raw, json) Hash identifier: pWmrt5xBomG9lBAI12VYGyeIreV0QaSYioh93IP9BTI= Subject key identifier: 90:D8:64:C9:AD:31:C9:08:57:DF:12:74:23:E3:D3:95:23:12:09:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB133467DE60557521A8B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fe2032b-02a1-37ad-a386-655ef1884c8c.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 173.184.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:13:34:67:de:60:55:75:21:a8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=8c817d00-f656-469a-8dbf-4f85e2c353bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:35:32:27:4e:a7:74:a1:87:68:32:39:f5:d0: 56:30:1e:38:4d:e3:62:9d:53:1a:7e:38:71:80:30: 44:c0:05:3e:d2:ec:68:06:0c:9c:21:dc:86:a1:ea: b8:c5:d1:8a:ea:35:58:cb:d1:fe:47:64:ed:bb:45: 3d:f2:22:9f:50:44:65:de:a8:23:d0:5e:fd:2f:0f: 0e:f3:cd:5c:d2:ef:bd:2c:d5:b6:5b:1b:d4:70:e9: 1d:d8:e3:b2:72:63:95:73:17:49:a8:be:02:ac:60: 8b:33:5c:f4:c2:48:cc:88:6b:25:76:ad:4c:60:78: 90:f7:79:37:3c:b9:70:5d:9c:f9:20:1a:a8:29:88: d9:2a:3b:de:99:10:9d:c7:11:f4:27:f7:51:4b:03: ec:b7:95:6a:85:7b:76:4b:30:23:61:f6:48:ac:82: c6:93:55:2f:81:2d:43:36:5e:6c:f2:e7:f6:03:28: a3:6b:71:9c:fe:d3:d2:8a:76:d9:3e:c1:0f:4f:b1: 54:23:bf:dc:38:1b:d6:70:2f:b0:70:4f:c8:4b:28: e7:38:1d:bd:b6:96:ec:b9:e1:94:a1:2d:bb:48:22: 59:64:c2:ee:67:85:7a:b7:2f:ad:d1:f0:82:23:77: 49:45:da:45:4a:14:9e:ee:06:6a:20:cb:27:41:27: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:64:C9:AD:31:C9:08:57:DF:12:74:23:E3:D3:95:23:12:09:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fe2032b-02a1-37ad-a386-655ef1884c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:47:d1:43:3a:32:03:c8:61:1e:7f:b9:4c:38:88:2a:29:87: 81:6e:9f:7e:06:c0:08:46:9e:1a:35:5d:48:95:8e:f2:14:8a: 97:10:46:b1:1a:c9:50:34:01:eb:b6:d5:bc:55:42:bb:5c:47: 83:17:6f:8e:13:03:fc:b7:b5:c1:d9:39:6e:36:74:f6:c9:63: df:a5:64:29:bb:4f:46:75:89:f9:21:24:7d:fc:59:20:8e:62: e0:92:61:54:5a:a1:0f:50:16:84:24:4f:4f:57:2e:50:cd:c2: eb:30:50:57:f0:f4:66:3e:d2:db:37:01:96:21:35:10:28:4f: f3:38:a4:5f:a3:98:6f:dc:b5:dc:0b:21:29:90:d5:42:db:8b: e6:4e:ce:b0:3c:a5:e4:60:5c:35:ad:83:83:c2:70:db:5a:af: aa:1f:c1:fd:ab:a2:6d:28:a3:27:54:cc:95:6c:cf:d9:47:05: 39:e1:78:57:b3:c0:84:9f:02:41:47:ca:b2:62:9c:82:ca:94: 52:fe:53:7e:50:0e:d7:20:7c:11:87:7e:01:14:31:41:c5:45: a3:96:9f:4f:dd:3e:b8:d7:6a:18:6b:2c:b4:f1:7c:5f:60:d3: 98:ff:74:14:28:f2:37:95:80:ad:c4:68:0d:ed:a7:11:3b:64: f5:36:6a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xM0Z95gVXUhqLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk OGM4MTdkMDAtZjY1Ni00NjlhLThkYmYtNGY4NWUyYzM1M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTUyJ06ndKGHaDI59dBWMB44TeNinVMafjhx gDBEwAU+0uxoBgycIdyGoeq4xdGK6jVYy9H+R2Ttu0U98iKfUERl3qgj0F79Lw8O 881c0u+9LNW2WxvUcOkd2OOycmOVcxdJqL4CrGCLM1z0wkjMiGsldq1MYHiQ93k3 PLlwXZz5IBqoKYjZKjvemRCdxxH0J/dRSwPst5VqhXt2SzAjYfZIrILGk1UvgS1D Nl5s8uf2Ayija3Gc/tPSinbZPsEPT7FUI7/cOBvWcC+wcE/ISyjnOB29tpbsueGU oS27SCJZZMLuZ4V6ty+t0fCCI3dJRdpFShSe7gZqIMsnQSf04QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDYZMmtMckIV98SdCPj05UjEgmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZlMjAzMmItMDJhMS0z N2FkLWEzODYtNjU1ZWYxODg0YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBH0UM6MgPIYR5/uUw4iCoph4Fun34GwAhGnho1XUiVjvIUipcQRrEa yVA0Aeu21bxVQrtcR4MXb44TA/y3tcHZOW42dPbJY9+lZCm7T0Z1ifkhJH38WSCO YuCSYVRaoQ9QFoQkT09XLlDNwuswUFfw9GY+0ts3AZYhNRAoT/M4pF+jmG/ctdwL ISmQ1ULbi+ZOzrA8peRgXDWtg4PCcNtar6ofwf2rom0ooydUzJVsz9lHBTnheFez wISfAkFHyrJinILKlFL+U35QDtcgfBGHfgEUMUHFRaOWn0/dPrjXahhrLLTxfF9g 05j/dBQo8jeVgK3EaA3tpxE7ZPU2aqE= -----END CERTIFICATE-----Generated at Wed May 13 10:37:21 2026 by rpki-client