$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0afdc7b0-7b17-3a01-9635-57877513c11a.roa File: 0afdc7b0-7b17-3a01-9635-57877513c11a.roa (raw, json) Hash identifier: qSF+9xkEKFsCdZw+TDl8z4C2ucsFEVNVB5o+RiSCXsg= Subject key identifier: 70:3D:FB:EE:F4:E0:FA:18:CC:D6:AC:21:33:CD:5B:31:23:A3:FC:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2807DA27F74EF43C4AAB4500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0afdc7b0-7b17-3a01-9635-57877513c11a.roa Signing time: Fri 13 Mar 2026 16:09:44 +0000 ROA not before: Fri 13 Mar 2026 16:09:44 +0000 ROA not after: Thu 11 Jun 2026 16:09:44 +0000 asID: 7029 IP address blocks: 173.189.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:07:da:27:f7:4e:f4:3c:4a:ab:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 13 16:09:44 2026 GMT Not After : Jun 11 16:09:44 2026 GMT Subject: CN=31df30e1-9914-4685-980e-0d4ffd3fe13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f2:34:94:9b:32:59:d0:67:68:9f:bc:44:b1: 2c:94:24:29:d6:0c:c3:d0:0d:17:8d:2e:6b:03:31: 45:3f:15:a1:00:bc:2c:d3:eb:d4:c0:93:84:6a:2d: 91:45:56:af:54:f0:fc:65:3b:59:f1:16:80:0d:31: 0c:b0:fb:64:66:99:ae:df:76:25:34:ce:98:a8:b8: 16:c0:85:e7:21:92:a5:a7:c7:cf:c3:6b:b8:56:b0: 82:39:a1:23:55:71:9c:8a:9a:6d:07:3c:86:21:07: df:07:d0:49:84:36:e4:96:ff:27:d6:ac:0e:91:c1: 1b:af:42:57:77:0a:f5:00:28:ff:cb:fa:35:ec:c5: e2:e8:55:1f:ed:91:57:c2:4b:b6:43:fc:3a:86:c6: 65:eb:6a:c1:21:fb:fc:49:7d:00:1a:69:6f:e2:18: df:03:ea:60:f9:8c:02:63:40:8c:7e:39:76:65:fd: 17:04:1f:41:66:dd:01:14:e3:98:74:df:7c:6d:03: 70:00:81:0c:bd:2f:99:ca:fe:12:b9:1e:fc:0e:09: 47:33:0b:87:9a:00:5b:dc:ed:2d:44:f3:db:f5:12: 59:ab:59:02:01:3e:e8:4a:12:05:30:7c:e8:f7:8a: 84:75:ae:06:2f:f5:59:a4:9a:8a:96:b6:7b:9f:e9: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3D:FB:EE:F4:E0:FA:18:CC:D6:AC:21:33:CD:5B:31:23:A3:FC:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0afdc7b0-7b17-3a01-9635-57877513c11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e3:28:64:2d:c3:ad:1f:ba:25:ed:14:cb:b7:4f:ca:be:c0: e9:b3:a6:94:8f:8f:b3:39:5f:fa:a0:fb:d9:47:4e:0b:b9:20: 57:a0:03:f5:79:51:44:2e:bc:d5:98:89:de:a9:02:8f:f7:b0: a9:ea:93:27:cf:b6:31:29:2a:65:c9:67:59:ec:38:5b:a7:d3: b9:f9:62:34:4a:ae:57:44:64:4e:0c:cc:3f:89:49:ab:95:0a: c3:6a:16:80:db:00:be:0c:f6:2b:e1:2d:ee:38:85:b0:f0:fe: 99:51:df:fa:17:e5:f7:f8:83:d0:b3:0e:e1:ad:83:4e:41:e5: a8:48:12:50:e9:98:a4:25:04:19:aa:e5:85:3e:e0:09:7a:26: 36:f8:ef:23:18:8a:34:e7:c9:b1:6c:41:6f:ec:ab:f2:4c:ea: 11:50:a4:cc:38:20:33:c4:1d:c0:73:3e:3f:45:fe:a3:d5:9b: c2:d9:05:dc:00:37:40:96:40:47:72:68:35:7e:a2:ae:be:c4: d0:5d:0b:30:0f:5a:85:3b:85:c3:a5:de:4e:69:b1:ab:4d:90: 08:8b:91:89:b6:9a:58:91:66:9b:12:19:16:f8:e9:01:1d:84: 3a:e6:54:72:cd:02:dc:d2:4b:bd:96:19:09:6e:85:34:99:15: 44:7b:af:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0oB9on9070PEqrRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMzE2MDk0NFoXDTI2MDYxMTE2MDk0NFowLzEtMCsGA1UEAxMk MzFkZjMwZTEtOTkxNC00Njg1LTk4MGUtMGQ0ZmZkM2ZlMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PI0lJsyWdBnaJ+8RLEslCQp1gzD0A0XjS5r AzFFPxWhALws0+vUwJOEai2RRVavVPD8ZTtZ8RaADTEMsPtkZpmu33YlNM6YqLgW wIXnIZKlp8fPw2u4VrCCOaEjVXGcipptBzyGIQffB9BJhDbklv8n1qwOkcEbr0JX dwr1ACj/y/o17MXi6FUf7ZFXwku2Q/w6hsZl62rBIfv8SX0AGmlv4hjfA+pg+YwC Y0CMfjl2Zf0XBB9BZt0BFOOYdN98bQNwAIEMvS+Zyv4SuR78DglHMwuHmgBb3O0t RPPb9RJZq1kCAT7oShIFMHzo94qEda4GL/VZpJqKlrZ7n+kYXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA9++704PoYzNasITPNWzEjo/zzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGFmZGM3YjAtN2IxNy0z YTAxLTk2MzUtNTc4Nzc1MTNjMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrjKGQtw60fuiXtFMu3T8q+wOmzppSPj7M5X/qg+9lHTgu5IFegA/V5 UUQuvNWYid6pAo/3sKnqkyfPtjEpKmXJZ1nsOFun07n5YjRKrldEZE4MzD+JSauV CsNqFoDbAL4M9ivhLe44hbDw/plR3/oX5ff4g9CzDuGtg05B5ahIElDpmKQlBBmq 5YU+4Al6Jjb47yMYijTnybFsQW/sq/JM6hFQpMw4IDPEHcBzPj9F/qPVm8LZBdwA N0CWQEdyaDV+oq6+xNBdCzAPWoU7hcOl3k5psatNkAiLkYm2mliRZpsSGRb46QEd hDrmVHLNAtzSS72WGQluhTSZFUR7r5w= -----END CERTIFICATE-----Generated at Thu Mar 26 08:06:04 2026 by rpki-client