$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1aff1470-17f4-3634-9ca5-43b550278ec8.roa File: 1aff1470-17f4-3634-9ca5-43b550278ec8.roa (raw, json) Hash identifier: uU1E8wvHwlt1jcMC3p07Ywmt5i1U9Bx1/auhrqCIf0U= Subject key identifier: E9:71:B0:8C:61:EE:DF:48:55:55:42:D6:87:9A:1C:6E:DB:E4:F5:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA129DED8946A9FB874680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1aff1470-17f4-3634-9ca5-43b550278ec8.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 173.186.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:12:9d:ed:89:46:a9:fb:87:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=09614b5a-0e75-4fcf-9cfe-54811ea730bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:d4:4f:ff:34:c0:0f:d9:5f:47:e9:7c:b8: c0:6a:6a:f3:63:d4:f8:93:de:3e:23:e4:b0:2b:33: da:75:ad:41:fe:d2:25:47:a6:23:85:a2:29:26:9e: 74:83:7d:f6:7e:1e:82:6e:60:cc:ce:d0:c5:cb:45: 51:70:98:49:21:68:55:d7:44:0e:85:e0:de:04:3b: 12:d2:e1:4c:3e:5b:d0:02:ff:54:06:ed:f2:3a:a5: cb:82:ea:27:6e:f6:b1:7d:52:2b:69:4b:b4:c9:a6: b6:8f:da:1a:52:43:23:1b:da:57:d2:0f:01:63:0f: e9:2f:51:d9:6c:7b:8a:37:56:20:50:0e:6c:6c:f2: 35:3b:da:67:c5:65:99:ab:10:bf:0b:1b:9d:79:a8: da:fd:60:fd:3b:14:63:bd:ef:6d:8c:af:19:62:24: 28:96:2e:44:eb:6e:2f:55:45:e3:07:cb:cd:19:2f: 68:f2:aa:19:58:df:ca:18:68:f0:35:54:df:1d:b7: 57:c4:97:9e:11:a3:2f:bf:9d:1e:4b:29:8c:9b:b9: 38:5d:d6:df:e4:ed:89:2b:51:88:f5:87:54:4e:cc: 25:24:55:5a:a4:d0:4d:24:fd:61:e2:48:d6:37:88: dc:08:f5:38:e8:25:dc:c0:77:91:50:fd:c9:72:47: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:B0:8C:61:EE:DF:48:55:55:42:D6:87:9A:1C:6E:DB:E4:F5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1aff1470-17f4-3634-9ca5-43b550278ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7b:a8:b7:14:ca:90:eb:77:38:87:10:51:99:34:8b:0d:4b: a8:e4:a6:fb:2c:28:0d:7c:a3:5a:12:90:ff:bc:16:92:47:12: d9:61:15:cf:54:ad:22:f5:de:68:cc:2e:27:aa:a4:bb:4e:23: 9e:de:d5:ed:92:27:e3:3b:38:52:2c:79:73:97:cc:75:bc:cc: a4:4e:f9:37:03:be:20:e6:ea:3f:2b:9f:db:f5:d4:7b:07:aa: 72:0e:4d:8f:18:c0:0a:77:e6:12:f4:73:43:83:95:d1:77:ae: 01:d8:79:24:01:ef:52:40:04:db:44:81:ad:db:e7:59:66:3a: d4:05:1b:f0:3e:35:87:b8:83:06:3d:a0:18:06:f0:b8:76:94: ea:25:70:a9:50:e2:c6:45:b4:af:b3:6a:04:b1:29:9b:5e:f8: 65:73:02:01:35:8a:d4:7a:53:9c:36:a4:54:4b:93:c0:90:9d: 69:59:03:3a:56:dd:6e:1b:c1:87:4e:f4:cf:6f:b7:5f:8e:8f: 6d:80:8e:7f:bc:c0:dd:1a:64:17:b5:62:f8:5b:16:70:e8:17: 00:4b:9c:2e:54:c6:bb:cc:cb:dd:29:06:4c:b4:c2:20:51:33: a0:b7:2b:fe:8e:1e:b9:93:22:8e:14:84:8f:c5:4c:0d:05:39: d3:e4:74:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hKd7YlGqfuHRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MDk2MTRiNWEtMGU3NS00ZmNmLTljZmUtNTQ4MTFlYTczMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn13UT/80wA/ZX0fpfLjAamrzY9T4k94+I+Sw KzPada1B/tIlR6YjhaIpJp50g332fh6CbmDMztDFy0VRcJhJIWhV10QOheDeBDsS 0uFMPlvQAv9UBu3yOqXLguonbvaxfVIraUu0yaa2j9oaUkMjG9pX0g8BYw/pL1HZ bHuKN1YgUA5sbPI1O9pnxWWZqxC/Cxudeaja/WD9OxRjve9tjK8ZYiQoli5E624v VUXjB8vNGS9o8qoZWN/KGGjwNVTfHbdXxJeeEaMvv50eSymMm7k4Xdbf5O2JK1GI 9YdUTswlJFVapNBNJP1h4kjWN4jcCPU46CXcwHeRUP3Jckc5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlxsIxh7t9IVVVC1oeaHG7b5PU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFmZjE0NzAtMTdmNC0z NjM0LTljYTUtNDNiNTUwMjc4ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF7qLcUypDrdziHEFGZNIsNS6jkpvssKA18o1oSkP+8FpJHEtlhFc9U rSL13mjMLieqpLtOI57e1e2SJ+M7OFIseXOXzHW8zKRO+TcDviDm6j8rn9v11HsH qnIOTY8YwAp35hL0c0ODldF3rgHYeSQB71JABNtEga3b51lmOtQFG/A+NYe4gwY9 oBgG8Lh2lOolcKlQ4sZFtK+zagSxKZte+GVzAgE1itR6U5w2pFRLk8CQnWlZAzpW 3W4bwYdO9M9vt1+Oj22Ajn+8wN0aZBe1YvhbFnDoFwBLnC5UxrvMy90pBky0wiBR M6C3K/6OHrmTIo4UhI/FTA0FOdPkdAE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:31 2026 by rpki-client