$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/188de73d-53b2-3643-8e21-e782867ebd70.roa File: 188de73d-53b2-3643-8e21-e782867ebd70.roa (raw, json) Hash identifier: nrbvf+RwawB2Ri6JqfY0lL1u5kK3msFRG8TvzvS72Hk= Subject key identifier: E8:C0:80:7A:E2:20:AC:B8:DB:DB:DA:9A:C9:22:64:71:7D:FB:7B:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA7F40FBCC6B88F219700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/188de73d-53b2-3643-8e21-e782867ebd70.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 54673 IP address blocks: 40.129.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a7:f4:0f:bc:c6:b8:8f:21:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fab15a5b-7601-4950-b70a-de96283aa93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:67:3c:b8:54:40:f1:37:3e:45:bd:5c:f9: 36:72:e1:4d:8f:ec:63:6a:53:6b:33:e9:c4:6e:94: 8e:76:d0:04:10:17:70:a3:23:67:a7:72:f1:a6:8e: 14:aa:85:f7:8c:6c:f8:50:0a:48:a5:0a:4c:6d:26: 7d:b6:a8:f6:49:c3:18:52:9d:ed:32:53:ad:0d:90: 3a:c9:91:92:d1:a8:a9:20:74:ff:43:94:f3:a7:a9: ac:34:d5:bc:5e:28:e6:2b:de:df:50:a4:99:f0:27: 76:90:1c:9b:68:48:2d:a6:25:fe:c9:82:3e:3f:e5: dc:67:d7:24:75:2a:fc:7d:6e:ca:53:ad:99:e5:18: 0e:be:8e:26:43:f7:cc:02:a0:9d:3a:a5:f3:98:1e: 5e:63:48:f9:2f:6a:06:83:64:c8:b7:0f:a9:1d:cb: 26:46:05:e2:87:c8:fd:8b:cf:c5:51:25:85:d9:a0: 7e:d8:4d:19:5a:7a:1b:bb:98:02:ea:cc:d4:d2:f2: 16:72:85:45:ac:fa:e5:7e:4c:87:da:1b:3f:c2:e5: 69:89:d9:1a:11:84:0f:fe:b1:de:98:fd:16:ce:f2: e9:b3:4b:6e:bd:48:c3:36:77:a3:98:67:77:a3:dc: ec:c8:72:04:47:22:96:ec:cf:d2:22:1f:1b:9b:45: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C0:80:7A:E2:20:AC:B8:DB:DB:DA:9A:C9:22:64:71:7D:FB:7B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/188de73d-53b2-3643-8e21-e782867ebd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.129.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3b:fb:ec:6f:fa:00:28:59:af:ea:16:dc:e6:5c:54:20:72: 1d:f0:6d:b5:65:79:10:bb:e4:ad:8c:dc:6a:68:f7:63:e7:ba: af:5d:58:77:ba:ec:30:ca:6f:af:0d:88:81:37:80:97:3f:c2: 1d:95:bd:e4:09:d4:ed:cb:4e:24:8b:10:07:96:b0:fa:2e:2f: a8:c5:b0:c2:56:9e:e6:13:3d:c4:29:50:62:91:63:24:55:e9: 6f:ef:7c:fa:67:57:1d:49:cf:a7:2c:c4:ca:2a:7b:c5:0c:65: af:dd:92:05:52:22:da:c1:b7:30:16:0a:56:b8:32:c1:c0:9a: 15:4f:67:6d:27:b1:c0:db:a6:4e:62:05:9f:49:b6:2c:43:5f: 9f:75:9b:ff:33:05:0d:f0:a6:fe:47:95:7e:bb:ef:0b:4a:6f: 17:0e:96:6b:b8:74:66:0f:e6:4b:0d:3a:50:71:66:48:97:63: 56:ce:2a:00:a2:16:f7:d4:64:e0:76:8d:f7:f8:ae:5b:3f:50: c3:f4:c0:e2:07:cf:17:b1:4c:55:3d:a9:44:af:ee:bf:72:c0: 24:11:96:83:c9:df:33:8a:ee:62:fb:8c:42:90:1f:7b:65:f0: 71:94:0d:fa:a8:8c:c4:0f:8c:3c:39:68:6e:64:6f:46:0c:68: e4:fd:1e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqf0D7zGuI8hlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmFiMTVhNWItNzYwMS00OTUwLWI3MGEtZGU5NjI4M2FhOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9pnPLhUQPE3PkW9XPk2cuFNj+xjalNrM+nE bpSOdtAEEBdwoyNnp3Lxpo4UqoX3jGz4UApIpQpMbSZ9tqj2ScMYUp3tMlOtDZA6 yZGS0aipIHT/Q5Tzp6msNNW8XijmK97fUKSZ8Cd2kBybaEgtpiX+yYI+P+XcZ9ck dSr8fW7KU62Z5RgOvo4mQ/fMAqCdOqXzmB5eY0j5L2oGg2TItw+pHcsmRgXih8j9 i8/FUSWF2aB+2E0ZWnobu5gC6szU0vIWcoVFrPrlfkyH2hs/wuVpidkaEYQP/rHe mP0WzvLps0tuvUjDNnejmGd3o9zsyHIERyKW7M/SIh8bm0WvNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjAgHriIKy429vamskiZHF9+3teMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTg4ZGU3M2QtNTNiMi0z NjQzLThlMjEtZTc4Mjg2N2ViZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIG+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF07++xv+gAoWa/qFtzmXFQgch3wbbVleRC75K2M3Gpo92Pnuq9dWHe6 7DDKb68NiIE3gJc/wh2VveQJ1O3LTiSLEAeWsPouL6jFsMJWnuYTPcQpUGKRYyRV 6W/vfPpnVx1Jz6csxMoqe8UMZa/dkgVSItrBtzAWCla4MsHAmhVPZ20nscDbpk5i BZ9JtixDX591m/8zBQ3wpv5HlX677wtKbxcOlmu4dGYP5ksNOlBxZkiXY1bOKgCi FvfUZOB2jff4rls/UMP0wOIHzxexTFU9qUSv7r9ywCQRloPJ3zOK7mL7jEKQH3tl 8HGUDfqojMQPjDw5aG5kb0YMaOT9Hq8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:40:06 2026 by rpki-client