$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fbfc64e-d95d-3cef-a3be-475eb7e6afdb.roa File: 1fbfc64e-d95d-3cef-a3be-475eb7e6afdb.roa (raw, json) Hash identifier: M7IGeSoAJIqF9rOx4mZOqXlIFDtimvgSSFtFgEjyHWc= Subject key identifier: ED:5A:61:18:D6:A2:8C:08:D0:65:C6:E0:1C:A4:EE:43:DA:DF:4D:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D37E76D47C480909A71D17CA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fbfc64e-d95d-3cef-a3be-475eb7e6afdb.roa Signing time: Thu 19 Mar 2026 08:37:20 +0000 ROA not before: Thu 19 Mar 2026 08:37:20 +0000 ROA not after: Wed 17 Jun 2026 08:37:20 +0000 asID: 7029 IP address blocks: 173.189.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:e7:6d:47:c4:80:90:9a:71:d1:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 08:37:20 2026 GMT Not After : Jun 17 08:37:20 2026 GMT Subject: CN=95e6e9b3-92a4-4853-b199-ebcc8c39e33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:de:ea:59:ba:eb:63:73:80:6c:49:f0:d2: ba:9c:36:bf:ae:13:f2:b1:4a:91:02:3c:27:42:a4: b6:6e:a6:a1:19:21:b1:81:41:46:4d:c4:2a:2b:c0: f5:48:91:b9:5f:5c:d4:f5:49:a0:09:14:38:0b:ee: be:7c:38:20:0e:17:11:17:9a:93:4e:18:a4:52:00: 73:7d:28:9e:cf:69:b5:d2:e8:03:dd:f4:9b:b3:d7: e2:e8:1b:0a:78:7a:5e:b1:29:07:a9:f0:d0:ff:85: d5:98:42:33:27:84:88:fb:33:3a:39:fb:de:b6:8d: 4d:aa:37:63:fd:46:88:2c:9e:bf:e8:8a:be:e5:d5: e4:d9:02:dc:48:a4:ae:7e:0a:5f:3f:6c:94:e1:89: 47:f7:ca:7e:7a:33:b9:ab:0f:9d:bb:d4:0d:98:d3: f5:44:8e:a7:9b:6a:45:b5:18:13:9b:00:92:1d:35: 20:ad:0e:e7:1a:49:bb:98:a9:82:cf:0b:33:c8:77: 78:a3:e0:0e:d0:e8:5d:f1:6a:f2:8a:06:fd:3d:1a: f2:ca:12:ab:4c:9f:0b:c0:5a:22:49:bd:65:16:1a: 34:5c:91:57:46:6e:0f:1b:06:ad:c8:7e:6a:8f:e9: fa:44:64:89:a6:44:82:ee:49:a3:69:db:89:ea:4c: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5A:61:18:D6:A2:8C:08:D0:65:C6:E0:1C:A4:EE:43:DA:DF:4D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fbfc64e-d95d-3cef-a3be-475eb7e6afdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:80:dc:0e:c1:b5:8a:36:37:e3:ea:fe:5c:51:6a:73:e7:7f: 02:78:34:78:20:18:fb:11:a4:9d:52:1d:b1:97:bb:07:39:be: 66:c9:ca:cf:ea:5c:a3:99:3d:50:da:7f:61:bd:0e:00:f6:40: 37:d8:43:a9:d5:c8:a6:ed:7d:f7:6e:75:6a:bd:f8:7e:89:02: be:4a:46:fc:d8:17:5f:15:d8:61:51:ae:02:47:04:d7:b8:89: fd:cf:50:9b:08:c8:e6:2f:11:d0:b0:3a:26:f3:bc:49:80:df: 29:66:3a:b8:f8:82:3e:01:0a:c5:a0:90:5c:f7:81:30:c4:17: e6:a2:d8:b7:83:53:97:04:b6:36:b4:1b:54:1b:7b:05:d3:50: bc:2e:c4:ba:6c:08:64:8d:46:c7:2b:30:f9:11:76:cd:08:af: 64:1c:60:47:10:65:dd:8c:b9:84:ac:5f:37:cc:d1:57:57:7d: 60:56:b1:9f:e6:d0:f7:00:ef:d4:8e:ce:ca:94:d7:17:06:0b: 9f:32:95:7b:81:f5:42:bc:32:f2:2f:5d:3e:49:13:c0:72:f3: 77:7e:a9:a7:3d:f3:a0:70:c4:04:d5:41:91:cf:21:8d:5a:ce: 38:e1:f9:76:ed:ef:22:26:12:6c:43:a6:fc:13:dc:64:75:4e: b6:05:5c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03521HxICQmnHRfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTA4MzcyMFoXDTI2MDYxNzA4MzcyMFowLzEtMCsGA1UEAxMk OTVlNmU5YjMtOTJhNC00ODUzLWIxOTktZWJjYzhjMzllMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUfe6lm662NzgGxJ8NK6nDa/rhPysUqRAjwn QqS2bqahGSGxgUFGTcQqK8D1SJG5X1zU9UmgCRQ4C+6+fDggDhcRF5qTThikUgBz fSiez2m10ugD3fSbs9fi6BsKeHpesSkHqfDQ/4XVmEIzJ4SI+zM6Ofveto1Nqjdj /UaILJ6/6Iq+5dXk2QLcSKSufgpfP2yU4YlH98p+ejO5qw+du9QNmNP1RI6nm2pF tRgTmwCSHTUgrQ7nGkm7mKmCzwszyHd4o+AO0Ohd8Wryigb9PRryyhKrTJ8LwFoi Sb1lFho0XJFXRm4PGwatyH5qj+n6RGSJpkSC7kmjaduJ6kyo8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1aYRjWoowI0GXG4Byk7kPa3017MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZiZmM2NGUtZDk1ZC0z Y2VmLWEzYmUtNDc1ZWI3ZTZhZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCA3A7BtYo2N+Pq/lxRanPnfwJ4NHggGPsRpJ1SHbGXuwc5vmbJys/q XKOZPVDaf2G9DgD2QDfYQ6nVyKbtffdudWq9+H6JAr5KRvzYF18V2GFRrgJHBNe4 if3PUJsIyOYvEdCwOibzvEmA3ylmOrj4gj4BCsWgkFz3gTDEF+ai2LeDU5cEtja0 G1QbewXTULwuxLpsCGSNRscrMPkRds0Ir2QcYEcQZd2MuYSsXzfM0VdXfWBWsZ/m 0PcA79SOzsqU1xcGC58ylXuB9UK8MvIvXT5JE8By83d+qac986BwxATVQZHPIY1a zjjh+Xbt7yImEmxDpvwT3GR1TrYFXEE= -----END CERTIFICATE-----Generated at Thu Mar 26 08:18:35 2026 by rpki-client