$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa File: 0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa (raw, json) Hash identifier: 7FNiNQBeVyVIJSrW4E8ywMEnrSl469eE17e6N8bKaTM= Subject key identifier: 10:F2:A8:BD:41:90:16:8D:D9:C3:A3:6C:80:2A:11:6F:D6:67:DC:00 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D1F4A8795BFF75552B3A78D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.188.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:87:95:bf:f7:55:52:b3:a7:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=da9014f9-d6f9-4772-b48c-b01025388663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:79:d1:59:12:a0:d9:a6:bf:b9:53:89:dd: c8:1d:f2:00:95:e2:73:09:ed:84:8d:5a:8c:50:e3: ae:b7:f8:09:e5:6e:58:f0:0d:0b:b7:84:4d:4b:3d: 0c:1e:26:f4:74:45:e0:f0:55:7e:0f:07:78:4c:26: 54:58:aa:69:55:9f:86:3a:7c:f5:c8:d9:88:6f:c0: 6d:0b:38:88:85:9b:27:0e:02:79:24:47:fb:c5:20: a6:17:02:53:ec:08:7f:88:be:9c:f3:26:aa:44:da: 6c:e1:73:ad:83:ef:80:f2:7c:4e:d8:34:11:a1:12: 48:e5:b1:54:88:36:73:66:68:77:ab:e1:1b:7a:02: 2e:c8:00:bf:7e:57:83:63:19:4d:38:ea:99:47:ba: 56:2d:a3:39:30:ec:ae:7c:03:f9:f6:fe:fe:5c:a6: e7:48:66:d5:d2:88:15:20:45:02:d8:a2:3f:dd:9c: 2d:d4:b9:f4:29:15:52:f3:cd:6a:33:fa:b8:0b:f6: ad:b6:0f:03:09:a1:32:9a:44:6d:bf:a1:46:49:12: 69:55:b0:fd:75:d7:1d:e6:5c:4c:73:bd:5e:a1:95: 21:2f:a7:d7:33:a5:f2:70:da:34:4b:33:c5:94:14: 23:40:ee:ef:d9:d5:d0:ee:8b:ea:0e:62:1a:ed:45: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F2:A8:BD:41:90:16:8D:D9:C3:A3:6C:80:2A:11:6F:D6:67:DC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:02:67:77:c4:3d:7f:c6:09:a4:0e:e3:0b:d9:45:c2:6b:ec: a8:72:72:8c:45:4a:7c:8e:ac:6b:ac:7a:45:32:b0:cc:83:60: 09:2f:90:2e:04:83:bb:1d:33:fd:f5:d1:10:a9:3f:22:b5:de: 97:13:12:ee:63:d8:fc:94:2c:26:87:f8:ad:6d:a9:d3:bf:85: 00:0f:1f:a4:a8:10:98:bc:ce:28:58:eb:37:56:6a:98:a1:3b: df:5b:29:f7:33:39:92:e2:4d:9c:15:a7:e6:cc:40:5a:3f:c5: 11:17:b9:18:84:a8:37:ed:ee:be:37:8f:a3:67:10:02:3a:ee: b3:30:c4:e2:73:0e:3c:46:6a:01:0e:37:ce:9a:a0:ef:16:ec: 2c:16:7f:f4:05:8c:e4:75:f2:b1:d9:f1:25:f8:2c:5e:30:a1: bb:3e:a8:7f:5a:a7:6d:de:38:52:a9:85:67:5f:a6:d4:da:58: 6d:64:4b:6d:d9:1b:3d:57:f4:ff:2a:91:7b:f7:3c:07:dd:95: 69:d1:cd:c1:68:71:80:31:19:3a:3f:73:69:28:3a:fa:71:22: 19:9c:1f:b9:eb:64:82:e8:3e:cd:00:45:c6:c7:fe:03:8b:85: 46:7f:e7:82:81:bc:42:30:80:c9:c0:51:d7:f2:f8:05:d5:ac: fc:24:41:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoeVv/dVUrOnjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZGE5MDE0ZjktZDZmOS00NzcyLWI0OGMtYjAxMDI1Mzg4NjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX550VkSoNmmv7lTid3IHfIAleJzCe2EjVqM UOOut/gJ5W5Y8A0Lt4RNSz0MHib0dEXg8FV+Dwd4TCZUWKppVZ+GOnz1yNmIb8Bt CziIhZsnDgJ5JEf7xSCmFwJT7Ah/iL6c8yaqRNps4XOtg++A8nxO2DQRoRJI5bFU iDZzZmh3q+EbegIuyAC/fleDYxlNOOqZR7pWLaM5MOyufAP59v7+XKbnSGbV0ogV IEUC2KI/3Zwt1Ln0KRVS881qM/q4C/attg8DCaEymkRtv6FGSRJpVbD9ddcd5lxM c71eoZUhL6fXM6XycNo0SzPFlBQjQO7v2dXQ7ovqDmIa7UW6+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDyqL1BkBaN2cOjbIAqEW/WZ9wAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDk3NjcwMGQtOWRiZi0z YzA1LTkyYmEtYWQ3YjQwYmM5ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFACZ3fEPX/GCaQO4wvZRcJr7KhycoxFSnyOrGusekUysMyDYAkvkC4E g7sdM/310RCpPyK13pcTEu5j2PyULCaH+K1tqdO/hQAPH6SoEJi8zihY6zdWapih O99bKfczOZLiTZwVp+bMQFo/xREXuRiEqDft7r43j6NnEAI67rMwxOJzDjxGagEO N86aoO8W7CwWf/QFjOR18rHZ8SX4LF4wobs+qH9ap23eOFKphWdfptTaWG1kS23Z Gz1X9P8qkXv3PAfdlWnRzcFocYAxGTo/c2koOvpxIhmcH7nrZILoPs0ARcbH/gOL hUZ/54KBvEIwgMnAUdfy+AXVrPwkQSQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:04:32 2026 by rpki-client