$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa File: 4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa (raw, json) Hash identifier: +lnCBaX5p9e7fRJWO/UdorF086JISty/QpSv7AQKIsc= Subject key identifier: 61:5C:55:3E:D2:72:83:AD:30:4F:38:B6:03:22:AD:B2:AB:75:97:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3E000C689BFFA87488E9B300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.186.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0c:68:9b:ff:a8:74:88:e9:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ff7e524f-78a0-49ce-80f3-25fdb94d951f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:43:04:58:56:65:5c:8d:5d:af:c0:e8:46:a6: da:a9:ff:35:c3:49:b8:cc:0f:7a:47:74:c0:9b:03: ab:f1:40:4f:3e:ca:ea:01:c7:94:b8:cd:b4:4b:af: 2b:95:cc:3a:53:85:4d:bb:b5:c7:61:3e:99:13:9b: 96:c0:c0:9a:3d:8f:fe:94:c7:2b:89:22:21:8d:7d: 0a:6d:27:f6:77:2e:64:ae:20:67:ab:3c:9f:3a:66: 91:02:62:81:9c:f7:72:4c:dc:50:8a:f8:43:bf:1d: fc:da:84:d1:b1:44:f6:82:b8:ab:fe:af:7e:d7:94: fd:04:f6:68:cf:21:01:49:25:3b:05:a4:f6:19:d7: ce:81:d9:4a:3a:3c:9d:5c:20:cb:e0:82:20:3c:ab: 4e:6c:90:9a:12:3a:20:5d:43:15:89:ab:bd:5b:44: 8b:a5:af:de:2d:2d:11:f1:72:47:2a:0e:37:ea:09: 52:d1:58:1e:2c:24:ee:55:ac:ed:80:67:7b:92:5e: d0:e9:5e:e7:09:5f:bc:9f:f9:f0:05:d7:4e:78:69: 5c:89:ff:a0:48:a8:f6:b1:8d:9b:24:25:a1:08:a2: b4:6d:ff:f0:1c:02:2b:b1:69:cd:e3:1d:b1:1d:ca: 53:40:ce:37:91:0f:ad:c6:95:bc:cf:63:34:99:8e: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:55:3E:D2:72:83:AD:30:4F:38:B6:03:22:AD:B2:AB:75:97:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:35:68:14:54:9d:b4:cc:0a:5b:08:78:bc:77:e2:9e:8c:81: 70:83:e4:92:dd:d4:92:8d:76:f3:49:b7:1d:b8:90:eb:be:62: b8:95:2e:5f:a8:69:d3:f8:0b:c7:6d:80:c1:f3:25:79:60:61: b6:3b:3a:15:0b:d7:d5:d6:68:51:5b:4a:a9:54:4a:a5:25:e4: fd:60:1e:e5:eb:73:a7:cb:1b:ae:b9:1c:b2:2d:e2:30:ea:45: 49:a7:e2:02:fb:92:21:e1:28:26:36:c5:70:92:f1:b2:34:19: ed:9a:4e:75:7c:45:0c:74:05:3c:c8:d3:ba:04:89:ca:0c:eb: 78:06:e3:95:4d:a4:8e:9f:1d:dc:4a:4d:fd:68:0f:33:2c:67: 42:bb:36:4f:ec:1e:31:17:f2:ba:62:68:07:31:e2:50:e7:86: fc:c9:d4:3b:d9:a0:b5:e4:f7:94:0e:5b:1a:6d:3a:a6:01:12: 37:5c:b5:b7:e3:ed:02:20:53:d5:4b:ec:1f:af:7c:8c:3e:96: ad:6c:0f:4a:e7:d4:cb:ef:a4:9b:67:53:af:20:53:d0:1f:eb: a8:b8:0b:81:54:0a:0c:1d:f0:4f:e0:cb:91:e6:fe:0a:f8:46: fa:d2:ce:08:82:23:90:10:33:75:89:5c:a2:bb:fd:13:7b:7b: 8d:f7:2b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAxom/+odIjpswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZmY3ZTUyNGYtNzhhMC00OWNlLTgwZjMtMjVmZGI5NGQ5NTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EMEWFZlXI1dr8DoRqbaqf81w0m4zA96R3TA mwOr8UBPPsrqAceUuM20S68rlcw6U4VNu7XHYT6ZE5uWwMCaPY/+lMcriSIhjX0K bSf2dy5kriBnqzyfOmaRAmKBnPdyTNxQivhDvx382oTRsUT2grir/q9+15T9BPZo zyEBSSU7BaT2GdfOgdlKOjydXCDL4IIgPKtObJCaEjogXUMViau9W0SLpa/eLS0R 8XJHKg436glS0VgeLCTuVaztgGd7kl7Q6V7nCV+8n/nwBddOeGlcif+gSKj2sY2b JCWhCKK0bf/wHAIrsWnN4x2xHcpTQM43kQ+txpW8z2M0mY5DcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFcVT7ScoOtME84tgMirbKrdZeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNiYWQ4MDQtYTMyMi0z ZDdmLTk3ZDAtODJjYjFhMjRiZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA1aBRUnbTMClsIeLx34p6MgXCD5JLd1JKNdvNJtx24kOu+YriVLl+o adP4C8dtgMHzJXlgYbY7OhUL19XWaFFbSqlUSqUl5P1gHuXrc6fLG665HLIt4jDq RUmn4gL7kiHhKCY2xXCS8bI0Ge2aTnV8RQx0BTzI07oEicoM63gG45VNpI6fHdxK Tf1oDzMsZ0K7Nk/sHjEX8rpiaAcx4lDnhvzJ1DvZoLXk95QOWxptOqYBEjdctbfj 7QIgU9VL7B+vfIw+lq1sD0rn1MvvpJtnU68gU9Af66i4C4FUCgwd8E/gy5Hm/gr4 RvrSzgiCI5AQM3WJXKK7/RN7e433K98= -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:00 2026 by rpki-client