$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19deab69-b8a3-3d48-8c4e-8d9f7a023389.roa File: 19deab69-b8a3-3d48-8c4e-8d9f7a023389.roa (raw, json) Hash identifier: XvLggByHCxUA4vbmMLxhCAR4lxVOmHddq7jrrXPdCV0= Subject key identifier: 0D:BD:69:FC:59:74:09:E3:D3:15:0F:AA:92:E1:C1:CA:5D:02:D6:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D30942BFBAC75622888D2C380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19deab69-b8a3-3d48-8c4e-8d9f7a023389.roa Signing time: Mon 16 Mar 2026 17:38:55 +0000 ROA not before: Mon 16 Mar 2026 17:38:55 +0000 ROA not after: Sun 14 Jun 2026 17:38:55 +0000 asID: 7029 IP address blocks: 173.189.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:94:2b:fb:ac:75:62:28:88:d2:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 17:38:55 2026 GMT Not After : Jun 14 17:38:55 2026 GMT Subject: CN=e2fd2f9f-3d83-46e2-b1c1-670dea64fb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:05:de:a2:6e:71:63:e9:29:2b:7b:e2:6f:de: d7:3e:71:53:d2:de:21:c4:72:bd:45:95:02:ee:48: 60:99:b3:7f:17:15:81:79:14:00:d2:d7:8a:a9:86: 5e:ba:74:df:26:8e:a9:09:e0:6e:db:59:ea:4b:85: b6:4f:ab:99:d0:6c:c7:5b:b6:fc:5c:d1:c6:b5:d9: 0e:c8:c8:72:1f:00:45:06:31:81:de:1e:29:a0:1a: 5a:c2:ec:75:ba:ff:f2:a8:c3:ce:38:4f:8b:d8:f0: 82:ed:ca:0b:d1:23:41:71:37:c9:00:31:7e:62:45: c8:bf:59:c6:2a:d5:86:39:91:a6:06:e8:e0:77:95: 4c:6a:58:d0:6e:55:13:23:ed:e6:fe:cd:41:7e:90: c8:55:55:11:82:36:d5:73:76:c4:d4:03:eb:59:32: a3:6a:74:3a:da:08:23:b4:e6:d6:6c:be:60:3f:31: e9:70:76:e6:aa:34:42:6c:66:b5:a2:9c:e0:fd:7b: 4c:03:37:40:c4:82:a7:2c:d7:07:85:3d:b6:aa:a4: 27:bf:0d:0b:09:8d:7e:c1:1d:24:9f:f2:61:62:55: 2b:a7:fa:df:b6:85:97:17:4a:fb:e5:56:a3:20:58: bc:00:a3:28:d0:ec:a2:17:97:17:9c:0b:4f:44:ee: 09:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BD:69:FC:59:74:09:E3:D3:15:0F:AA:92:E1:C1:CA:5D:02:D6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19deab69-b8a3-3d48-8c4e-8d9f7a023389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:5f:30:7d:61:73:89:65:ec:44:0a:ed:9a:df:72:e7:0e:03: 23:46:16:b0:dc:5c:a9:15:86:ea:60:ad:dc:58:11:e9:60:13: 15:61:fb:71:e1:3e:d3:49:8a:a5:22:15:4d:ea:5e:5d:fd:87: 7b:8d:58:5b:ca:93:16:31:f4:fb:30:0d:51:5e:95:a1:0a:52: ef:fc:74:8a:bb:13:7f:6a:45:2e:da:91:1e:eb:14:8d:da:21: 42:ab:1b:29:99:2a:00:9a:ae:32:eb:96:e6:c3:fa:47:35:fc: 01:7c:00:ae:6d:0b:f2:66:af:e1:43:ee:af:70:fa:32:d3:8b: de:5e:33:0b:fd:96:e3:47:86:d2:05:52:4c:3a:16:28:41:67: 9c:8c:f0:c2:11:bf:bd:69:c8:3f:f1:3a:0d:a7:e0:be:c9:f7: 62:b4:b6:b2:21:da:8a:2c:6b:d8:26:3a:62:f6:0f:08:4e:46: ef:74:25:5c:4d:00:af:1f:22:dc:b2:74:82:bb:d8:c8:f5:d2: 59:16:e7:bc:5c:6f:10:f6:42:7a:cc:32:73:53:16:f6:bc:4a: 87:e7:f8:b9:03:26:a1:62:ea:1b:8b:86:0e:51:83:73:cc:2b: 01:d1:ef:0c:23:27:c8:57:52:a5:6e:17:8b:a1:a1:6c:03:6b: 68:e3:54:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wlCv7rHViKIjSw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjE3Mzg1NVoXDTI2MDYxNDE3Mzg1NVowLzEtMCsGA1UEAxMk ZTJmZDJmOWYtM2Q4My00NmUyLWIxYzEtNjcwZGVhNjRmYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAXeom5xY+kpK3vib97XPnFT0t4hxHK9RZUC 7khgmbN/FxWBeRQA0teKqYZeunTfJo6pCeBu21nqS4W2T6uZ0GzHW7b8XNHGtdkO yMhyHwBFBjGB3h4poBpawux1uv/yqMPOOE+L2PCC7coL0SNBcTfJADF+YkXIv1nG KtWGOZGmBujgd5VMaljQblUTI+3m/s1BfpDIVVURgjbVc3bE1APrWTKjanQ62ggj tObWbL5gPzHpcHbmqjRCbGa1opzg/XtMAzdAxIKnLNcHhT22qqQnvw0LCY1+wR0k n/JhYlUrp/rftoWXF0r75VajIFi8AKMo0OyiF5cXnAtPRO4JwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA29afxZdAnj0xUPqpLhwcpdAtYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTlkZWFiNjktYjhhMy0z ZDQ4LThjNGUtOGQ5ZjdhMDIzMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVfMH1hc4ll7EQK7ZrfcucOAyNGFrDcXKkVhupgrdxYEelgExVh+3Hh PtNJiqUiFU3qXl39h3uNWFvKkxYx9PswDVFelaEKUu/8dIq7E39qRS7akR7rFI3a IUKrGymZKgCarjLrlubD+kc1/AF8AK5tC/Jmr+FD7q9w+jLTi95eMwv9luNHhtIF Ukw6FihBZ5yM8MIRv71pyD/xOg2n4L7J92K0trIh2oosa9gmOmL2DwhORu90JVxN AK8fItyydIK72Mj10lkW57xcbxD2QnrMMnNTFva8Sofn+LkDJqFi6huLhg5Rg3PM KwHR7wwjJ8hXUqVuF4uhoWwDa2jjVKI= -----END CERTIFICATE-----Generated at Thu Mar 26 09:34:00 2026 by rpki-client