$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa File: 3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa (raw, json) Hash identifier: 5WtC8+eAssNoavPJG69JAxtK8A/FHgVKw/Br4DqOt98= Subject key identifier: 10:04:2C:A7:C6:47:74:45:C6:12:BF:5F:EC:3D:D5:0B:DC:60:EB:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D1F4A62D13DDDA859DE6BAF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.188.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:62:d1:3d:dd:a8:59:de:6b:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=7edb8869-880d-47a6-aa11-87c703412dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:c5:34:68:6f:b1:8e:f8:31:1a:90:c7:5a: 82:3a:2c:f1:f9:47:1f:c3:d6:11:9d:79:70:65:0a: e1:e5:43:00:6f:c5:73:5b:ec:c7:ce:88:aa:cd:d4: 48:5b:16:46:d6:41:00:69:cd:90:03:6d:73:3e:79: e9:cd:dd:32:08:3f:86:81:98:d9:0c:5b:8e:01:fc: e0:65:c4:e9:ba:76:d3:82:7f:91:e3:91:6c:77:fc: 5f:d5:7d:4e:cb:ea:dc:5f:e7:22:31:8b:73:3a:17: 6e:9e:2e:20:b3:a2:d4:7d:c1:48:ce:94:d5:75:1d: b3:52:5f:09:5e:6a:cf:7f:ab:bb:d7:82:ca:02:7c: 77:38:a5:74:ff:3f:d5:cc:39:92:22:fc:90:7c:23: 2e:e9:5e:ad:39:82:25:2b:fd:31:9d:d3:46:e4:8c: 11:8c:77:19:5a:13:93:c2:c4:11:6a:bc:82:73:58: 50:e7:73:07:3e:c0:5d:e0:84:b9:89:f8:c4:5f:95: 0d:46:15:8e:04:f8:eb:1a:75:00:34:4e:20:5d:07: 8f:eb:38:c6:a6:97:cd:0f:9b:f6:02:b4:79:8a:29: 00:0d:c6:f7:73:6e:58:ae:04:a4:62:f8:28:c6:f2: 09:4f:0e:00:b0:48:fb:0e:31:b2:df:c8:b9:db:3c: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:04:2C:A7:C6:47:74:45:C6:12:BF:5F:EC:3D:D5:0B:DC:60:EB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8f:97:a4:6f:0a:03:c2:6a:40:b7:8c:d3:ba:42:70:75:e4: 97:d5:ef:ab:19:0d:f7:e2:af:19:8a:3a:78:3a:96:e3:49:95: 56:0a:8e:cb:5a:58:f9:06:c0:a4:ee:e5:dc:e2:0d:25:13:3f: 79:91:19:73:2b:6f:18:db:50:f9:00:9e:33:b7:0d:2d:5e:d5: 3b:b7:16:de:e9:c6:f4:58:7b:26:9b:7f:00:40:dc:63:67:a5: 0e:d3:99:90:a4:66:cc:bd:7a:17:0e:e1:6f:99:ae:66:21:13: 0d:f5:bb:de:5b:b3:42:f2:b6:04:be:51:10:51:b1:b2:15:cc: 4a:cf:da:63:3b:f5:c2:b5:8b:3a:db:63:05:b6:d8:59:b2:36: bc:7e:7c:42:80:b9:a6:a5:8c:22:f3:0b:ce:d2:5a:ac:a9:4a: 54:57:6b:34:cd:47:f4:9b:a7:c6:68:57:4c:41:10:e0:91:3d: 8e:bb:0c:0d:a9:99:c3:68:7b:e4:96:b2:93:51:9d:ac:d8:f1: 8d:fa:31:3b:3c:ce:6b:fc:93:53:c6:f7:a6:34:4b:ca:a5:84: 4a:13:1d:93:f2:38:ba:ec:4b:c8:2e:1a:9f:ee:dc:f9:e5:ee: 3b:b6:f9:ac:8d:c9:2e:3f:91:31:67:16:f1:bc:1b:eb:3f:66: 18:ae:67:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmLRPd2oWd5rr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk N2VkYjg4NjktODgwZC00N2E2LWFhMTEtODdjNzAzNDEyZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukDFNGhvsY74MRqQx1qCOizx+Ucfw9YRnXlw ZQrh5UMAb8VzW+zHzoiqzdRIWxZG1kEAac2QA21zPnnpzd0yCD+GgZjZDFuOAfzg ZcTpunbTgn+R45Fsd/xf1X1Oy+rcX+ciMYtzOhduni4gs6LUfcFIzpTVdR2zUl8J XmrPf6u714LKAnx3OKV0/z/VzDmSIvyQfCMu6V6tOYIlK/0xndNG5IwRjHcZWhOT wsQRaryCc1hQ53MHPsBd4IS5ifjEX5UNRhWOBPjrGnUANE4gXQeP6zjGppfND5v2 ArR5iikADcb3c25YrgSkYvgoxvIJTw4AsEj7DjGy38i52zydzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAELKfGR3RFxhK/X+w91QvcYOspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2RhODI0ZWItYzQ4YS0z YjU4LThlMjUtYzFlNWYwNjRhMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCPl6RvCgPCakC3jNO6QnB15JfV76sZDffirxmKOng6luNJlVYKjsta WPkGwKTu5dziDSUTP3mRGXMrbxjbUPkAnjO3DS1e1Tu3Ft7pxvRYeyabfwBA3GNn pQ7TmZCkZsy9ehcO4W+ZrmYhEw31u95bs0LytgS+URBRsbIVzErP2mM79cK1izrb YwW22FmyNrx+fEKAuaaljCLzC87SWqypSlRXazTNR/Sbp8ZoV0xBEOCRPY67DA2p mcNoe+SWspNRnazY8Y36MTs8zmv8k1PG96Y0S8qlhEoTHZPyOLrsS8guGp/u3Pnl 7ju2+ayNyS4/kTFnFvG8G+s/ZhiuZ/Q= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:58 2026 by rpki-client