$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa File: 45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa (raw, json) Hash identifier: vAz4qf8WLQQGwRPWnxkJA53i5oJjRsZFIURqimo495Y= Subject key identifier: A9:F8:D8:D7:FA:BC:DF:76:7C:D8:E4:E6:F7:70:70:A8:88:8A:A4:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7DC3C501820D690131C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 173.191.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7d:c3:c5:01:82:0d:69:01:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=971c2280-d256-46bf-b7ee-640b5c528706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:39:10:73:8b:1d:a0:15:91:4e:36:59:95: cb:26:10:1a:d2:22:ee:3d:6d:71:d8:35:dd:da:03: 7e:b3:99:c3:53:6d:13:31:c8:a5:34:8a:19:94:e2: 35:1a:c8:c4:d8:ee:14:bb:6c:c2:eb:48:8b:2f:14: 8e:a2:6a:de:34:b3:31:da:33:1e:72:6d:df:95:76: 34:b6:63:3e:1a:01:4c:38:39:8b:06:c0:5c:92:e9: 48:3f:b9:a8:e8:15:01:ae:25:8f:8a:92:36:1d:68: aa:e8:73:6c:2f:f3:b7:10:29:80:b8:6a:b4:b7:8d: 35:64:cf:e1:d9:15:95:e7:12:27:de:67:5c:01:9a: 16:0d:1f:3b:07:f8:1a:bf:2e:16:5f:5a:0b:ee:72: 36:c4:df:6d:7d:49:79:a2:16:c7:7f:02:20:10:a7: a5:d5:44:23:87:0e:a7:0d:00:42:68:25:4e:d8:f9: e9:be:44:44:66:92:46:be:11:9e:7e:87:83:ba:48: f9:20:41:d6:1c:14:5c:d1:99:ff:0c:7c:44:5c:27: e9:78:70:25:4b:09:9a:73:25:79:c1:74:5e:97:96: e2:c6:c1:a0:6a:0d:5e:99:db:00:f1:d3:17:c8:6f: 8b:8c:c1:2c:d7:3b:16:59:d2:48:b8:db:6c:47:b4: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F8:D8:D7:FA:BC:DF:76:7C:D8:E4:E6:F7:70:70:A8:88:8A:A4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1fc0f-f9e4-3243-83a8-530ba4a18d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4a:c2:ca:74:ff:9b:37:3b:5e:03:21:e9:db:7f:37:7c:80: 3c:d8:39:ba:ee:2a:4b:7f:a3:da:dc:88:ed:88:74:19:91:91: 29:65:ae:c2:41:76:cb:25:d4:25:49:21:bc:b4:d9:1c:a6:4d: c2:b1:7f:eb:ab:44:56:24:b0:be:2d:ec:61:36:c9:ea:f1:22: b4:f9:5f:af:65:9b:4d:b7:94:e3:fb:45:44:ce:f9:20:ac:85: b2:09:d5:b6:bf:a8:c7:29:03:f1:b5:ea:fc:e2:e4:06:7a:44: a9:c4:72:e8:4f:48:f4:83:e0:03:e7:be:39:7f:2d:9e:6c:8b: 3e:04:db:c0:7d:a5:e0:66:a5:32:d2:4c:8f:a5:61:a1:ad:8e: 1a:ee:f4:57:c7:78:d2:95:fe:60:52:d3:63:54:6c:ce:ff:27: 2e:b0:d2:90:f0:5f:7b:04:4f:55:ae:e7:5d:23:91:bf:c3:db: af:57:72:ef:c7:7f:1b:70:90:a5:f8:9a:19:76:88:2e:af:34: 44:96:2b:5d:2f:f1:9e:c2:8c:dd:2f:97:c4:06:db:4b:62:ac: 42:51:7a:7c:28:ea:f4:0c:d7:d3:b4:ec:18:81:c1:2b:1f:39: 6c:2e:02:f2:d0:bf:17:2d:b8:c7:f9:5f:9d:8c:f5:e8:a9:30: ef:c0:c7:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCn3DxQGCDWkBMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTcxYzIyODAtZDI1Ni00NmJmLWI3ZWUtNjQwYjVjNTI4NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN45EHOLHaAVkU42WZXLJhAa0iLuPW1x2DXd 2gN+s5nDU20TMcilNIoZlOI1GsjE2O4Uu2zC60iLLxSOomreNLMx2jMecm3flXY0 tmM+GgFMODmLBsBckulIP7mo6BUBriWPipI2HWiq6HNsL/O3ECmAuGq0t401ZM/h 2RWV5xIn3mdcAZoWDR87B/gavy4WX1oL7nI2xN9tfUl5ohbHfwIgEKel1UQjhw6n DQBCaCVO2PnpvkREZpJGvhGefoeDukj5IEHWHBRc0Zn/DHxEXCfpeHAlSwmacyV5 wXRel5bixsGgag1emdsA8dMXyG+LjMEs1zsWWdJIuNtsR7STNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn42Nf6vN92fNjk5vdwcKiIiqTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlMWZjMGYtZjllNC0z MjQzLTgzYTgtNTMwYmE0YTE4ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZKwsp0/5s3O14DIenbfzd8gDzYObruKkt/o9rciO2IdBmRkSllrsJB dssl1CVJIby02RymTcKxf+urRFYksL4t7GE2yerxIrT5X69lm023lOP7RUTO+SCs hbIJ1ba/qMcpA/G16vzi5AZ6RKnEcuhPSPSD4APnvjl/LZ5siz4E28B9peBmpTLS TI+lYaGtjhru9FfHeNKV/mBS02NUbM7/Jy6w0pDwX3sET1Wu510jkb/D269Xcu/H fxtwkKX4mhl2iC6vNESWK10v8Z7CjN0vl8QG20tirEJRenwo6vQM19O07BiBwSsf OWwuAvLQvxctuMf5X52M9eipMO/Ax6k= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:10 2026 by rpki-client