$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d1e33bb-19bd-300f-bcce-f1102faa5f68.roa File: 2d1e33bb-19bd-300f-bcce-f1102faa5f68.roa (raw, json) Hash identifier: wuRI11zfbQd+scmiwjXbdOf5Y3UArCPTONdllaQLUV0= Subject key identifier: 74:44:A5:67:71:F8:04:DF:8F:0A:0D:72:DD:24:9E:31:D8:44:7A:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D14C59F642C0A641EAE858800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d1e33bb-19bd-300f-bcce-f1102faa5f68.roa Signing time: Fri 06 Mar 2026 18:35:56 +0000 ROA not before: Fri 06 Mar 2026 18:35:56 +0000 ROA not after: Thu 04 Jun 2026 17:35:56 +0000 asID: 7029 IP address blocks: 173.188.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:c5:9f:64:2c:0a:64:1e:ae:85:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 6 18:35:56 2026 GMT Not After : Jun 4 17:35:56 2026 GMT Subject: CN=4fb3a784-150d-4dc7-84da-03df3230cb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:24:b4:5e:f7:98:67:86:3d:1f:5c:ab:dd: 59:78:90:32:a0:70:f2:b2:9b:ec:07:dc:af:de:cd: fa:4c:c7:d6:98:1e:79:f8:cd:28:b0:7c:9b:22:45: 07:9f:bc:70:48:62:fd:5b:67:f7:2c:fc:2d:d2:ee: d4:b8:80:46:a6:52:89:7a:f7:0c:91:53:f7:54:f8: 27:71:97:71:78:19:bb:d5:55:b9:64:b2:e5:8c:ca: c2:9a:10:8b:92:53:2f:e5:60:b6:70:85:05:77:43: c9:75:f9:06:39:73:9a:a6:70:d1:d6:7c:fe:59:30: 96:58:30:93:89:d2:84:6f:02:3a:ca:58:3c:c2:34: 0d:45:8e:6d:44:ac:11:3a:55:24:c0:cf:2d:c8:b3: 9a:07:5d:f4:00:38:dd:14:24:e8:f6:58:9d:71:47: cc:08:d0:3f:ee:19:4c:3c:fb:c3:0e:41:6f:1f:25: c5:af:a0:a4:b0:d1:b2:05:f2:17:c9:62:2c:9a:67: 3b:d8:3b:c6:1c:10:01:76:e3:a3:67:09:b6:ff:5f: b3:a6:24:10:f5:86:2e:af:af:33:a2:1e:84:e6:13: 40:d5:60:b6:9c:2e:fb:84:33:e2:2f:23:5f:65:58: 01:12:36:b6:e9:60:92:bc:a1:e3:9c:ec:3d:24:27: ae:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:44:A5:67:71:F8:04:DF:8F:0A:0D:72:DD:24:9E:31:D8:44:7A:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d1e33bb-19bd-300f-bcce-f1102faa5f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a6:98:f3:1f:81:01:b4:c4:9f:8c:4c:10:03:30:6c:30:8c: 36:39:8a:48:bf:da:ef:db:fc:ce:25:30:0e:4c:d2:9f:71:3a: 01:7c:6e:53:ee:93:35:ea:ad:6c:83:16:59:58:a9:89:fd:29: 0c:44:19:59:fc:32:90:45:40:77:c7:68:24:b7:6b:44:80:2c: 34:64:68:43:57:55:4f:ed:a4:01:6d:23:da:32:25:3a:c1:0a: 52:0b:b4:e9:cb:9d:8e:1a:87:be:24:6d:d1:5d:30:13:b6:0c: 06:01:a6:5e:af:b4:17:62:fb:9b:d9:20:db:0a:74:27:3f:34: 26:b9:3d:20:e8:ca:fa:78:50:25:d5:28:f1:ee:7f:26:b6:ef: 16:78:88:37:d5:3b:d5:0b:7d:a5:e1:21:0f:80:4d:e7:23:34: 44:4a:74:ac:b4:9c:c5:a7:10:56:28:79:66:de:87:b8:0b:0a: da:75:67:a4:35:78:48:d1:da:71:d1:7f:78:97:7d:34:75:c9: 13:6d:ac:e2:b5:77:17:34:3f:56:70:e9:ff:78:10:b5:a6:13: d7:55:da:a3:ac:69:c5:3c:23:35:99:c4:99:b4:35:2d:23:4f: 88:03:da:e3:7a:39:4e:9b:79:7b:db:59:77:e6:bf:a9:6a:71: 2f:17:6c:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UxZ9kLApkHq6FiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwNjE4MzU1NloXDTI2MDYwNDE3MzU1NlowLzEtMCsGA1UEAxMk NGZiM2E3ODQtMTUwZC00ZGM3LTg0ZGEtMDNkZjMyMzBjYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+4ktF73mGeGPR9cq91ZeJAyoHDyspvsB9yv 3s36TMfWmB55+M0osHybIkUHn7xwSGL9W2f3LPwt0u7UuIBGplKJevcMkVP3VPgn cZdxeBm71VW5ZLLljMrCmhCLklMv5WC2cIUFd0PJdfkGOXOapnDR1nz+WTCWWDCT idKEbwI6ylg8wjQNRY5tRKwROlUkwM8tyLOaB130ADjdFCTo9lidcUfMCNA/7hlM PPvDDkFvHyXFr6CksNGyBfIXyWIsmmc72DvGHBABduOjZwm2/1+zpiQQ9YYur68z oh6E5hNA1WC2nC77hDPiLyNfZVgBEja26WCSvKHjnOw9JCeujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHREpWdx+ATfjwoNct0knjHYRHo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQxZTMzYmItMTliZC0z MDBmLWJjY2UtZjExMDJmYWE1ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbwBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFimmPMfgQG0xJ+MTBADMGwwjDY5iki/2u/b/M4lMA5M0p9xOgF8blPu kzXqrWyDFllYqYn9KQxEGVn8MpBFQHfHaCS3a0SALDRkaENXVU/tpAFtI9oyJTrB ClILtOnLnY4ah74kbdFdMBO2DAYBpl6vtBdi+5vZINsKdCc/NCa5PSDoyvp4UCXV KPHufya27xZ4iDfVO9ULfaXhIQ+ATecjNERKdKy0nMWnEFYoeWbeh7gLCtp1Z6Q1 eEjR2nHRf3iXfTR1yRNtrOK1dxc0P1Zw6f94ELWmE9dV2qOsacU8IzWZxJm0NS0j T4gD2uN6OU6beXvbWXfmv6lqcS8XbPg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:22:31 2026 by rpki-client