$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa File: 23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa (raw, json) Hash identifier: TQMoFoaCwoRkcfbg5aiIiHXZWyHiHYWTtd4KzE9KtOA= Subject key identifier: 56:5D:15:36:91:4D:50:1B:28:B3:C8:AE:B5:31:5D:61:BA:FB:4E:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F87F9D23038006B230240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.185.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:87:f9:d2:30:38:00:6b:23:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8520ea73-7d60-4bc5-8528-8c2a4fdf968d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:56:d8:77:0a:60:70:78:9f:84:34:ae:d2: be:e7:bd:a5:f1:c8:1a:c9:b7:dd:44:8b:ba:f6:37: d2:7d:fd:e1:9c:81:cc:5b:75:28:de:d6:0b:77:1e: 7b:07:15:0f:28:f3:91:41:bc:2c:5b:b4:22:ba:09: 5a:e3:d8:d9:f7:ee:5a:f8:eb:ce:70:8b:4f:65:1e: 5c:79:33:b1:6b:44:c0:11:2b:f2:8e:e8:01:1a:0d: 92:1b:55:d4:5b:3d:23:f4:ac:3d:87:17:f6:cf:e5: 05:d4:7a:e1:ff:bd:85:42:64:e6:76:ee:c9:af:42: cc:38:15:68:ec:a8:dd:20:94:39:0f:3e:1b:78:26: 63:f0:5d:e5:2e:fe:1d:fd:47:3c:1f:5d:93:d6:f2: 38:d9:9f:e1:ac:ea:69:e0:c6:4a:5f:36:ea:1f:a2: 4c:69:ef:d0:48:a8:45:eb:88:7a:c6:cc:b8:78:d5: df:82:d1:fd:3a:94:e9:c4:8f:7b:7e:0a:ea:de:72: e0:8a:8e:08:23:c2:01:4f:60:15:61:b0:15:51:fd: 82:03:8d:d0:0c:c9:86:51:5b:eb:54:70:70:65:ca: 7c:d5:39:37:cc:56:a2:12:b5:7e:48:56:d6:42:dd: e1:89:3d:db:50:9f:18:37:28:df:7b:d4:bc:76:59: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5D:15:36:91:4D:50:1B:28:B3:C8:AE:B5:31:5D:61:BA:FB:4E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c1:f3:53:b5:e2:93:bc:74:14:56:9b:af:3e:4c:48:ef:59: c6:c1:d6:e0:95:9e:5b:b0:44:de:5a:61:ca:00:b3:ac:c6:62: d3:1c:64:0e:a0:53:71:68:4b:0b:f6:da:da:2f:62:94:ed:1d: 8a:79:f7:da:73:9e:59:55:cb:d8:30:08:e3:95:df:62:8a:e4: 69:c1:0a:7d:a7:99:5f:7e:27:d7:f6:8b:81:11:53:f4:e1:e5: 00:7b:1d:53:01:10:3a:12:f6:5c:2b:35:e6:05:f7:25:65:d2: 03:6e:02:a3:9b:7b:5d:a3:05:ba:45:f4:07:94:bd:e5:bc:8d: ff:6c:67:54:1e:27:88:37:4e:c9:44:ed:b1:1e:72:0a:6e:58: 0d:ab:2d:9c:24:a5:79:97:59:36:80:f5:7c:39:4c:73:e0:b0: 92:e3:4f:5b:06:39:a0:4a:81:64:c7:44:30:ff:2d:3b:66:24: d3:be:f8:33:a6:40:9e:4e:59:51:12:a6:ae:11:2a:c0:e3:fd: 0d:25:77:2f:e6:6a:32:4d:ed:0f:30:bd:c7:0d:54:5b:9c:59: d4:47:72:a2:13:dc:67:f6:bd:71:25:e3:59:22:52:15:c8:f2: 97:8d:d7:c0:3f:5a:a9:5c:30:a5:6b:8f:64:32:bf:61:c6:95: 02:ca:05:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4f50jA4AGsjAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ODUyMGVhNzMtN2Q2MC00YmM1LTg1MjgtOGMyYTRmZGY5NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtVW2HcKYHB4n4Q0rtK+572l8cgaybfdRIu6 9jfSff3hnIHMW3Uo3tYLdx57BxUPKPORQbwsW7Qiugla49jZ9+5a+OvOcItPZR5c eTOxa0TAESvyjugBGg2SG1XUWz0j9Kw9hxf2z+UF1Hrh/72FQmTmdu7Jr0LMOBVo 7KjdIJQ5Dz4beCZj8F3lLv4d/Uc8H12T1vI42Z/hrOpp4MZKXzbqH6JMae/QSKhF 64h6xsy4eNXfgtH9OpTpxI97fgrq3nLgio4II8IBT2AVYbAVUf2CA43QDMmGUVvr VHBwZcp81Tk3zFaiErV+SFbWQt3hiT3bUJ8YNyjfe9S8dlm6cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZdFTaRTVAbKLPIrrUxXWG6+079MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNhN2Y2N2UtMjBlYy0z MTZiLWE3ZjItYjE0YzhhNmIwMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbB81O14pO8dBRWm68+TEjvWcbB1uCVnluwRN5aYcoAs6zGYtMcZA6g U3FoSwv22tovYpTtHYp599pznllVy9gwCOOV32KK5GnBCn2nmV9+J9f2i4ERU/Th 5QB7HVMBEDoS9lwrNeYF9yVl0gNuAqObe12jBbpF9AeUveW8jf9sZ1QeJ4g3TslE 7bEecgpuWA2rLZwkpXmXWTaA9Xw5THPgsJLjT1sGOaBKgWTHRDD/LTtmJNO++DOm QJ5OWVESpq4RKsDj/Q0ldy/majJN7Q8wvccNVFucWdRHcqIT3Gf2vXEl41kiUhXI 8peN18A/WqlcMKVrj2Qyv2HGlQLKBQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:20:47 2026 by rpki-client