$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a59ae75-a2f5-3d44-849d-e71d4c235217.roa File: 1a59ae75-a2f5-3d44-849d-e71d4c235217.roa (raw, json) Hash identifier: Sidl+UueLvkGyKAc3xLk99XOj0Airgo6OkWCV+88Ofg= Subject key identifier: 25:17:49:50:0A:B4:6D:92:35:55:48:EC:67:3B:53:90:0D:04:FC:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D20856660E15A6E9BE9019480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a59ae75-a2f5-3d44-849d-e71d4c235217.roa Signing time: Tue 10 Mar 2026 23:36:14 +0000 ROA not before: Tue 10 Mar 2026 23:36:14 +0000 ROA not after: Mon 08 Jun 2026 23:36:14 +0000 asID: 7029 IP address blocks: 173.188.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:85:66:60:e1:5a:6e:9b:e9:01:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 10 23:36:14 2026 GMT Not After : Jun 8 23:36:14 2026 GMT Subject: CN=ab07abda-7e92-4a42-b789-ef16d7a74c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:b8:71:f0:d5:9c:ed:71:6e:20:66:b5:15: 9c:29:9e:c7:88:0c:13:8a:4a:49:6e:f5:0f:4b:f4: 43:f7:f4:63:3f:71:cf:18:d9:24:b4:8a:a0:ac:af: 96:41:43:a7:b4:27:a9:bb:2d:32:dd:f2:24:8e:8d: ba:a1:8d:87:d4:ee:ac:14:90:f0:0f:ac:53:ce:6a: 35:02:e2:c2:b7:f5:c8:6c:84:e6:7a:b5:b6:a5:19: 9e:ec:21:36:21:25:86:7d:5e:b6:7e:5d:b8:12:2d: 88:23:33:16:9d:c2:a9:2f:b4:54:2d:6f:64:f2:81: 16:2b:55:a8:f3:6a:85:f6:69:40:3b:a5:ca:f7:f5: 96:03:f0:74:e3:a6:46:bc:cc:b7:6d:ec:f0:26:2c: 12:94:94:ba:4a:ea:7f:e9:18:ad:fb:83:42:b7:78: 6a:c7:d5:50:b2:62:07:70:7f:69:3d:6c:35:93:2d: bd:78:22:82:f3:45:4f:e8:b3:47:65:b5:79:27:11: 17:67:02:95:31:4c:e5:20:5a:27:d6:cc:87:79:17: 39:8e:bb:51:53:c8:17:4d:b6:5f:54:1d:ec:d1:f5: de:ef:9d:48:fd:8f:17:d9:e7:a2:b0:c2:ca:35:47: 42:9c:2d:70:a0:00:38:45:81:53:08:74:85:83:76: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:17:49:50:0A:B4:6D:92:35:55:48:EC:67:3B:53:90:0D:04:FC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a59ae75-a2f5-3d44-849d-e71d4c235217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:22:82:75:f6:0c:78:bc:19:4b:b7:f3:e9:b5:42:98:09:e8: 34:e4:ee:2f:ea:04:22:e7:7b:f2:42:7e:9d:38:ff:6d:ac:b8: 91:bd:bc:f6:5a:2e:78:37:99:37:b3:4a:59:75:28:d5:66:8a: 29:06:2d:38:b6:7f:93:f5:f8:b8:cf:19:ef:1d:ce:88:c6:51: da:90:64:b1:5c:27:e0:0f:81:8b:1f:e4:01:4f:39:36:7f:63: 4e:f3:fa:f3:9d:5d:c5:b3:39:21:58:fc:a6:2e:17:6f:9b:3c: 10:19:e9:bf:d5:91:7c:10:e4:3f:5d:36:1b:ea:56:b1:d2:23: b7:c8:a6:87:ec:59:78:e5:70:71:b5:23:ec:4b:e1:f8:be:67: 45:18:b7:23:ec:d7:8d:b4:16:f8:18:8c:5c:a9:b3:47:13:92: 54:f3:8a:fe:e9:f1:e8:84:f6:63:54:b4:d4:67:e0:74:dc:34: ca:8d:73:08:9f:cb:79:b1:0a:bd:41:5d:e2:3e:1a:54:33:fc: 51:67:03:c5:f3:43:d0:a3:ed:be:91:0c:24:d6:df:bd:9e:d8: 9f:84:b1:2d:91:c4:fa:7d:fa:01:20:b6:21:71:9d:d1:af:e1: 00:77:60:92:f8:93:4d:ac:90:d2:cb:f5:12:58:e5:87:e2:f5: 22:0f:e5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ghWZg4Vpum+kBlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMDIzMzYxNFoXDTI2MDYwODIzMzYxNFowLzEtMCsGA1UEAxMk YWIwN2FiZGEtN2U5Mi00YTQyLWI3ODktZWYxNmQ3YTc0Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRG4cfDVnO1xbiBmtRWcKZ7HiAwTikpJbvUP S/RD9/RjP3HPGNkktIqgrK+WQUOntCepuy0y3fIkjo26oY2H1O6sFJDwD6xTzmo1 AuLCt/XIbITmerW2pRme7CE2ISWGfV62fl24Ei2IIzMWncKpL7RULW9k8oEWK1Wo 82qF9mlAO6XK9/WWA/B046ZGvMy3bezwJiwSlJS6Sup/6Rit+4NCt3hqx9VQsmIH cH9pPWw1ky29eCKC80VP6LNHZbV5JxEXZwKVMUzlIFon1syHeRc5jrtRU8gXTbZf VB3s0fXe751I/Y8X2eeisMLKNUdCnC1woAA4RYFTCHSFg3a/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUXSVAKtG2SNVVI7Gc7U5ANBPwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWE1OWFlNzUtYTJmNS0z ZDQ0LTg0OWQtZTcxZDRjMjM1MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0ignX2DHi8GUu38+m1QpgJ6DTk7i/qBCLne/JCfp04/22suJG9vPZa Lng3mTezSll1KNVmiikGLTi2f5P1+LjPGe8dzojGUdqQZLFcJ+APgYsf5AFPOTZ/ Y07z+vOdXcWzOSFY/KYuF2+bPBAZ6b/VkXwQ5D9dNhvqVrHSI7fIpofsWXjlcHG1 I+xL4fi+Z0UYtyPs1420FvgYjFyps0cTklTziv7p8eiE9mNUtNRn4HTcNMqNcwif y3mxCr1BXeI+GlQz/FFnA8XzQ9Cj7b6RDCTW372e2J+EsS2RxPp9+gEgtiFxndGv 4QB3YJL4k02skNLL9RJY5Yfi9SIP5e8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:17:38 2026 by rpki-client