$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fecc801-e949-3378-b120-59326ad67179.roa File: 3fecc801-e949-3378-b120-59326ad67179.roa (raw, json) Hash identifier: E0z1dZ89RlVzV0uhYawjA8GI3TkJisLSAb/TZvKLZkM= Subject key identifier: DA:87:0B:72:15:78:69:0A:29:B2:1F:6C:BB:26:91:30:A2:FC:3D:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D494A351100FBDAC843C1C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fecc801-e949-3378-b120-59326ad67179.roa Signing time: Wed 25 Mar 2026 14:05:06 +0000 ROA not before: Wed 25 Mar 2026 14:05:06 +0000 ROA not after: Tue 23 Jun 2026 14:05:06 +0000 asID: 7029 IP address blocks: 173.190.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:4a:35:11:00:fb:da:c8:43:c1:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 14:05:06 2026 GMT Not After : Jun 23 14:05:06 2026 GMT Subject: CN=9b8801d3-d09e-4c6e-8806-55a88b88f37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:60:f5:e1:65:39:17:82:3e:3c:3b:6e:f6: 97:bb:91:e7:4e:6f:7e:55:2c:90:56:90:e6:57:6c: fa:39:59:57:1b:84:31:75:49:21:65:6c:3e:3a:67: a3:e2:da:c0:76:50:89:99:d5:61:0d:39:35:5e:36: 92:66:1f:f9:44:7a:dc:d8:c6:8d:b1:ea:5b:fb:31: 74:16:7f:ab:7d:91:b7:2b:97:74:24:50:31:dc:13: 3f:7c:2b:eb:29:f6:9a:e2:a4:c6:df:29:d7:00:6d: 42:ef:62:b3:14:1d:0b:61:7b:49:96:3d:77:62:65: 70:ae:b5:61:af:d2:c0:d0:61:f5:3c:b2:66:7f:48: 11:3a:3d:5d:62:46:ed:c6:fc:ea:61:ee:cc:e1:8a: a3:33:3a:c8:ea:db:f1:7d:7b:12:e4:8d:24:f4:15: b1:43:1a:7b:79:33:0c:0b:f9:64:e7:fb:d9:74:9a: 80:50:02:96:5e:1b:fe:b1:c2:cd:48:c5:97:68:34: 84:0e:5b:03:74:77:3e:68:6a:ea:07:46:96:fa:2f: e7:a5:30:28:46:a3:e6:db:ec:c4:8d:ba:47:12:ac: ae:55:31:37:9a:d5:1f:83:96:fe:10:63:65:41:9f: d2:6a:3b:b9:74:61:41:2a:ac:4d:62:19:0c:70:d2: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:87:0B:72:15:78:69:0A:29:B2:1F:6C:BB:26:91:30:A2:FC:3D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fecc801-e949-3378-b120-59326ad67179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e8:e1:b4:0a:10:4d:c0:6e:10:e3:68:77:e2:e7:0e:40:cb: c8:1f:b1:17:7f:70:df:67:29:30:c5:26:bb:52:03:b5:a5:80: fe:9f:30:b5:71:bb:0e:ec:7a:cf:d1:34:de:2d:e3:2a:90:63: 2d:0b:2d:a9:0a:39:d5:3f:b5:ab:2b:9c:43:a1:02:54:c5:20: 3c:52:55:9d:d3:ee:29:03:b2:71:64:20:69:a0:43:2a:fe:4e: 34:83:3a:03:06:bd:f2:7b:92:7b:bd:19:26:52:31:b2:9c:fb: a5:77:2a:2a:87:dc:a6:60:bb:4a:2d:12:d1:40:02:c1:28:a4: c7:bf:e3:74:8a:d8:d4:ef:c7:43:5e:1c:6a:63:65:b5:79:4a: 05:f4:06:1e:f8:48:11:d0:05:88:6f:69:96:ba:90:54:4d:3a: f3:34:93:9d:80:1a:45:8d:8c:cc:7f:29:61:49:ad:33:11:96: e2:4f:b2:d8:04:69:34:3e:2b:7b:7a:13:a7:70:86:01:0d:cb: d9:a3:7b:e2:ed:a2:4c:75:4b:49:20:f5:08:3c:48:c7:49:8b: 97:8f:2b:13:c8:44:11:da:ed:1a:c5:1f:3e:25:cc:5a:3f:52: 6a:90:4d:64:0c:74:04:c2:65:ed:79:e5:7f:06:57:6e:77:59: 90:61:f4:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JSjURAPvayEPByAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTE0MDUwNloXDTI2MDYyMzE0MDUwNlowLzEtMCsGA1UEAxMk OWI4ODAxZDMtZDA5ZS00YzZlLTg4MDYtNTVhODhiODhmMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD9g9eFlOReCPjw7bvaXu5HnTm9+VSyQVpDm V2z6OVlXG4QxdUkhZWw+Omej4trAdlCJmdVhDTk1XjaSZh/5RHrc2MaNsepb+zF0 Fn+rfZG3K5d0JFAx3BM/fCvrKfaa4qTG3ynXAG1C72KzFB0LYXtJlj13YmVwrrVh r9LA0GH1PLJmf0gROj1dYkbtxvzqYe7M4YqjMzrI6tvxfXsS5I0k9BWxQxp7eTMM C/lk5/vZdJqAUAKWXhv+scLNSMWXaDSEDlsDdHc+aGrqB0aW+i/npTAoRqPm2+zE jbpHEqyuVTE3mtUfg5b+EGNlQZ/Saju5dGFBKqxNYhkMcNJm+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqHC3IVeGkKKbIfbLsmkTCi/D0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2ZlY2M4MDEtZTk0OS0z Mzc4LWIxMjAtNTkzMjZhZDY3MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLo4bQKEE3AbhDjaHfi5w5Ay8gfsRd/cN9nKTDFJrtSA7WlgP6fMLVx uw7ses/RNN4t4yqQYy0LLakKOdU/tasrnEOhAlTFIDxSVZ3T7ikDsnFkIGmgQyr+ TjSDOgMGvfJ7knu9GSZSMbKc+6V3KiqH3KZgu0otEtFAAsEopMe/43SK2NTvx0Ne HGpjZbV5SgX0Bh74SBHQBYhvaZa6kFRNOvM0k52AGkWNjMx/KWFJrTMRluJPstgE aTQ+K3t6E6dwhgENy9mje+Ltokx1S0kg9Qg8SMdJi5ePKxPIRBHa7RrFHz4lzFo/ UmqQTWQMdATCZe155X8GV253WZBh9HU= -----END CERTIFICATE-----Generated at Thu Mar 26 08:06:06 2026 by rpki-client