$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a27e3ae5-1dda-3e60-932d-9d75f5322d84.roa File: a27e3ae5-1dda-3e60-932d-9d75f5322d84.roa (raw, json) Hash identifier: GixJRGEjIqq8b9B0C0r7vBeUVdPe504s4XDt3cF4vmM= Subject key identifier: 60:87:23:73:27:92:3D:F7:8C:7A:D4:2A:C8:2A:58:00:24:4D:6B:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D9961B07429339A8B3FB96E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a27e3ae5-1dda-3e60-932d-9d75f5322d84.roa Signing time: Thu 23 Apr 2026 06:37:05 +0000 ROA not before: Thu 23 Apr 2026 06:37:05 +0000 ROA not after: Wed 22 Jul 2026 06:37:05 +0000 asID: 7029 IP address blocks: 174.130.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:99:61:b0:74:29:33:9a:8b:3f:b9:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 23 06:37:05 2026 GMT Not After : Jul 22 06:37:05 2026 GMT Subject: CN=a717cfca-2225-4cff-97cb-442081b1b0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:b2:ba:fa:ee:dd:ea:77:4f:21:39:84:61: 26:77:17:f4:8c:59:0e:08:e8:99:9f:30:55:cf:73: 15:39:2b:e7:b8:45:ce:ac:b4:3a:4a:ca:89:94:4e: f4:d2:d2:15:b2:74:77:9e:a5:81:44:ac:98:4e:bd: 07:ab:04:f5:cb:80:da:1d:d9:b7:5d:52:45:da:86: e4:09:d1:c2:b6:c4:27:cd:0c:9d:89:ed:f1:4f:ed: 21:64:9c:33:4f:6d:aa:e6:1a:2a:cc:c4:3d:38:70: 6f:9a:f3:75:e8:0d:ac:78:9a:55:20:5a:b5:c8:a4: fd:10:f7:aa:bd:c8:45:ab:8f:9b:6b:9b:9f:47:22: ed:9e:8f:78:7d:ea:91:3e:89:15:85:97:06:2c:12: 61:02:5b:fe:75:b2:16:c5:5f:f6:b2:93:7a:4b:e3: 7d:b0:57:90:d6:af:af:83:f4:a5:17:b9:af:3e:55: 77:a9:d8:f9:d1:a7:02:eb:f5:7a:1f:9e:c3:26:bb: be:c3:81:9a:2d:e9:19:35:fc:05:99:d2:d6:4f:51: 35:ef:7e:46:a2:4e:e2:9e:6c:80:81:1a:f1:bd:b6: 72:6a:ef:33:70:77:8c:75:5a:d3:40:32:e1:fe:26: 64:bc:cf:7f:9b:cf:ac:a9:97:39:88:e6:3c:6a:b2: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:87:23:73:27:92:3D:F7:8C:7A:D4:2A:C8:2A:58:00:24:4D:6B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a27e3ae5-1dda-3e60-932d-9d75f5322d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:77:8b:74:d5:80:b4:b5:a0:6f:82:a7:3f:58:e3:6e:12:cd: 73:d2:25:ba:e5:1f:2a:60:0d:26:a6:18:b3:42:cb:9e:9d:ab: 43:34:20:cd:5c:d1:17:a5:e8:58:f9:f7:55:c7:22:26:6b:90: b5:d2:c0:53:b3:ae:25:a6:2f:c2:2e:5f:cc:8d:19:10:f1:8b: 0b:fe:b0:7b:73:74:b4:7d:17:ac:31:d0:18:a9:20:ca:5d:e3: c7:a8:6d:9e:18:e6:87:c2:fe:ce:c4:09:12:c5:38:8f:55:53: 2d:92:48:a3:49:6a:60:df:c6:a3:db:a9:0e:e7:18:a1:f4:15: c5:01:52:71:aa:97:0d:76:4c:12:f3:06:28:4f:5f:9a:e6:9f: 8a:da:8b:fd:1d:f0:06:b4:74:63:ce:b5:51:92:18:40:78:ca: 35:c3:30:c2:8b:66:15:69:14:54:c6:9d:75:96:60:1a:24:ae: 15:23:14:fd:0c:a6:41:d8:d8:ca:a9:a8:ba:07:e1:cc:e8:86: 99:3b:3f:3b:b8:10:23:c6:be:0e:68:d6:93:b6:a3:53:5e:0c: 9c:60:36:1b:0b:7f:af:72:cf:3a:f7:21:4d:ea:98:9c:31:05: 94:c2:4e:34:ce:8c:b9:53:82:12:98:17:52:d7:92:b0:78:2b: e9:24:13:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ZYbB0KTOaiz+5boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQyMzA2MzcwNVoXDTI2MDcyMjA2MzcwNVowLzEtMCsGA1UEAxMk YTcxN2NmY2EtMjIyNS00Y2ZmLTk3Y2ItNDQyMDgxYjFiMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQmyuvru3ep3TyE5hGEmdxf0jFkOCOiZnzBV z3MVOSvnuEXOrLQ6SsqJlE700tIVsnR3nqWBRKyYTr0HqwT1y4DaHdm3XVJF2obk CdHCtsQnzQydie3xT+0hZJwzT22q5hoqzMQ9OHBvmvN16A2seJpVIFq1yKT9EPeq vchFq4+ba5ufRyLtno94feqRPokVhZcGLBJhAlv+dbIWxV/2spN6S+N9sFeQ1q+v g/SlF7mvPlV3qdj50acC6/V6H57DJru+w4GaLekZNfwFmdLWT1E1735Gok7inmyA gRrxvbZyau8zcHeMdVrTQDLh/iZkvM9/m8+sqZc5iOY8arKflQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCHI3Mnkj33jHrUKsgqWAAkTWsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI3ZTNhZTUtMWRkYS0z ZTYwLTkzMmQtOWQ3NWY1MzIyZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroJbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx3i3TVgLS1oG+Cpz9Y424SzXPSJbrlHypgDSamGLNCy56dq0M0IM1c 0Rel6Fj591XHIiZrkLXSwFOzriWmL8IuX8yNGRDxiwv+sHtzdLR9F6wx0BipIMpd 48eobZ4Y5ofC/s7ECRLFOI9VUy2SSKNJamDfxqPbqQ7nGKH0FcUBUnGqlw12TBLz BihPX5rmn4rai/0d8Aa0dGPOtVGSGEB4yjXDMMKLZhVpFFTGnXWWYBokrhUjFP0M pkHY2MqpqLoH4czohpk7Pzu4ECPGvg5o1pO2o1NeDJxgNhsLf69yzzr3IU3qmJwx BZTCTjTOjLlTghKYF1LXkrB4K+kkE6w= -----END CERTIFICATE-----Generated at Wed May 13 08:27:47 2026 by rpki-client