$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa File: acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa (raw, json) Hash identifier: pa4qAqfgJ/jpxsY0TPo8BZMd0/lJoZNLKKdiVV+17D8= Subject key identifier: A8:E3:89:E8:2B:EE:9D:24:EE:37:6C:1E:8D:01:2C:67:FF:01:83:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB0F3C03DDC547BEF25100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 173.185.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0f:3c:03:dd:c5:47:be:f2:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=d581deb9-c33d-4657-b5c2-399d04d070fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:f2:4f:08:47:29:39:0b:5d:f7:ae:97:9a: e4:5d:6c:7e:be:79:04:12:05:01:be:18:94:1a:1a: 1e:e5:31:f9:6d:29:36:19:83:45:fa:2b:03:3b:e9: c8:4f:53:91:e9:bc:9c:de:0d:25:93:e6:ad:ec:11: 76:f5:44:c4:72:a7:e9:8f:21:33:c0:ff:a6:7d:69: 15:b5:39:29:9b:af:ab:41:df:0c:26:db:31:38:7c: 71:9b:7b:42:34:db:21:04:8b:5f:84:c5:c6:b8:5c: 35:0a:3c:ec:b7:b4:0b:97:ce:21:8b:ec:78:70:a3: c0:b0:a5:e8:ea:c9:46:2b:03:b9:69:bc:7a:f0:66: 44:ff:3b:27:bc:ef:cd:7b:5a:0f:be:e3:46:a8:14: e4:7d:55:6c:8f:2d:fd:32:e0:de:1a:2c:49:91:64: 10:43:c0:c6:31:06:80:a0:cb:34:38:ca:07:48:d6: 00:3a:70:dd:46:7c:0b:cd:a1:23:c1:d9:90:a1:63: db:5a:53:48:0a:d0:ad:a6:26:d4:33:68:03:6a:d9: c8:c4:12:0e:72:8d:1d:2c:29:dc:00:74:05:5b:7f: 86:e6:c0:92:d6:62:4d:80:1c:d3:d8:72:25:93:5f: 3e:ee:46:e1:a1:65:ec:33:e7:db:a7:7e:96:4b:da: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E3:89:E8:2B:EE:9D:24:EE:37:6C:1E:8D:01:2C:67:FF:01:83:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acffbbcb-b6ad-3bcd-b2be-18a54f3cda74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d8:1f:83:07:c5:93:80:7f:f7:a7:77:e3:b1:bb:5f:80:96: f6:b3:20:ff:31:9e:aa:9b:9c:87:4d:07:92:f1:0a:d0:e9:e5: 9d:5b:47:b7:0e:98:8f:ae:8f:5b:ca:23:81:95:c4:fd:17:6a: 75:db:67:e4:b9:4b:65:30:fe:aa:53:64:48:65:a7:38:9c:00: 25:a9:b3:40:15:8a:f1:d6:64:fa:1e:cc:bf:38:62:70:5d:5a: 6b:df:ff:55:d1:f6:35:1c:00:f9:d7:a1:99:6d:b3:58:e3:07: cf:ec:40:a7:5c:46:34:53:f2:3d:28:04:cb:7e:ec:c3:09:5d: 0a:fa:2f:25:37:71:db:ef:32:60:44:34:39:e5:2f:11:64:7d: f5:2d:c7:17:37:8e:34:c3:a3:da:df:c7:a2:31:bd:fb:0d:58: 15:5b:a6:a2:10:3b:00:9f:03:d4:9b:c0:96:93:05:56:e4:35: b7:3c:e1:f8:02:d0:8c:12:f6:7e:47:cf:e9:a7:9a:3e:76:4e: eb:7f:4b:a0:ca:04:47:e8:59:2b:d9:60:8e:09:42:01:d4:8d: 7d:92:79:bd:c2:bb:29:66:ee:88:66:63:53:5e:1d:1d:8e:29: e0:5e:e1:df:d8:c8:38:b7:cc:42:10:a6:4c:a5:8f:5d:8b:63: 16:d7:1a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+w88A93FR77yUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDU4MWRlYjktYzMzZC00NjU3LWI1YzItMzk5ZDA0ZDA3MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fDyTwhHKTkLXfeul5rkXWx+vnkEEgUBvhiU Ghoe5TH5bSk2GYNF+isDO+nIT1OR6byc3g0lk+at7BF29UTEcqfpjyEzwP+mfWkV tTkpm6+rQd8MJtsxOHxxm3tCNNshBItfhMXGuFw1Cjzst7QLl84hi+x4cKPAsKXo 6slGKwO5abx68GZE/zsnvO/Ne1oPvuNGqBTkfVVsjy39MuDeGixJkWQQQ8DGMQaA oMs0OMoHSNYAOnDdRnwLzaEjwdmQoWPbWlNICtCtpibUM2gDatnIxBIOco0dLCnc AHQFW3+G5sCS1mJNgBzT2HIlk18+7kbhoWXsM+fbp36WS9o91wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjjiegr7p0k7jdsHo0BLGf/AYOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNmZmJiY2ItYjZhZC0z YmNkLWIyYmUtMThhNTRmM2NkYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrblkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnYH4MHxZOAf/end+Oxu1+AlvazIP8xnqqbnIdNB5LxCtDp5Z1bR7cO mI+uj1vKI4GVxP0XanXbZ+S5S2Uw/qpTZEhlpzicACWps0AVivHWZPoezL84YnBd Wmvf/1XR9jUcAPnXoZlts1jjB8/sQKdcRjRT8j0oBMt+7MMJXQr6LyU3cdvvMmBE NDnlLxFkffUtxxc3jjTDo9rfx6IxvfsNWBVbpqIQOwCfA9SbwJaTBVbkNbc84fgC 0IwS9n5Hz+mnmj52Tut/S6DKBEfoWSvZYI4JQgHUjX2Seb3Cuylm7ohmY1NeHR2O KeBe4d/YyDi3zEIQpkylj12LYxbXGss= -----END CERTIFICATE-----Generated at Wed May 13 06:24:04 2026 by rpki-client