$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53317000-3910-3759-8ed9-90dd541df53e.roa File: 53317000-3910-3759-8ed9-90dd541df53e.roa (raw, json) Hash identifier: KDWyNv0RihbrNz3ZMOesGEqIYsH6sib5Fl3i8OTYdwM= Subject key identifier: A5:42:A9:2A:86:2A:06:A5:5F:45:59:FE:43:18:F5:5E:87:19:BD:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D4947DE30D805F8EA8C29EE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53317000-3910-3759-8ed9-90dd541df53e.roa Signing time: Wed 25 Mar 2026 14:00:23 +0000 ROA not before: Wed 25 Mar 2026 14:00:23 +0000 ROA not after: Tue 23 Jun 2026 14:00:23 +0000 asID: 7029 IP address blocks: 173.190.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:47:de:30:d8:05:f8:ea:8c:29:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 14:00:23 2026 GMT Not After : Jun 23 14:00:23 2026 GMT Subject: CN=0ff1a254-69cf-4adc-803f-a38fcaa8f8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:55:f2:e7:bc:fd:9f:8d:63:49:fc:47:87: e9:0f:8c:41:36:84:3f:0b:92:a1:3f:8f:ab:21:be: d7:6b:47:4c:45:40:d1:72:36:ef:33:58:dc:73:fb: bb:26:c2:98:51:eb:cd:3d:c9:ee:04:84:b9:b5:7e: 6c:be:50:21:64:0d:04:84:1a:a5:d9:26:40:05:e6: 3f:1f:81:55:0e:e4:26:88:33:8c:90:89:53:58:94: 80:d4:7a:35:d4:55:fa:62:f9:67:e6:46:f7:aa:c5: b0:1d:1e:e0:2b:61:e1:f7:01:de:24:30:21:0e:42: a1:68:1f:73:b7:c8:00:86:0e:ce:32:ac:56:cf:1a: ae:ea:be:2b:4c:7c:32:c9:40:a2:9c:74:55:d1:55: f4:24:bb:2b:15:01:74:bb:98:f9:54:29:0b:3f:96: 76:dd:f0:1b:9f:04:0c:e0:5a:a0:8c:1b:55:ff:36: b2:a1:6d:22:2f:ff:8a:b2:1f:b9:cc:9b:1e:45:d2: 1f:f0:a7:43:17:0f:57:b1:c7:ef:82:d1:14:67:b2: 66:93:bf:2a:4a:63:0a:0d:64:54:18:48:bb:62:20: 96:80:fc:93:39:e7:46:34:ce:24:52:08:54:aa:7c: 2a:03:87:45:56:8f:b9:67:5d:45:b4:82:6c:5b:48: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:42:A9:2A:86:2A:06:A5:5F:45:59:FE:43:18:F5:5E:87:19:BD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53317000-3910-3759-8ed9-90dd541df53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d7:6d:a6:28:f6:e4:7b:7b:5c:53:ae:65:1a:3a:87:cb:84: 08:58:47:66:db:ab:1e:83:7d:74:e5:f2:7c:bf:7f:e9:9b:49: 2f:39:82:9d:58:b2:79:e0:88:c0:58:43:75:ce:6d:31:16:93: 7d:3d:89:08:a5:c6:d7:dc:f1:26:cd:1c:39:b8:0f:5c:ec:e7: 5b:d0:30:70:e6:7c:12:01:7d:cc:91:57:ed:56:45:99:59:df: ba:9e:fc:52:0d:bc:c5:3f:3d:06:a3:c3:2a:87:6e:9d:38:a3: ad:f8:a4:cb:45:e4:99:97:59:94:a0:fd:84:8f:69:82:ea:b7: 69:b3:7b:0e:6c:8a:04:8c:19:05:7a:89:45:e1:2f:fd:22:e7: df:10:85:d5:09:8c:b6:65:ad:a8:9b:9a:60:4e:fa:0a:42:6b: b0:17:54:28:f8:86:c3:95:c6:82:b1:fa:1b:78:23:79:77:c6: 7d:9b:ec:d1:d5:98:aa:16:5b:b9:31:c2:dc:7f:fe:f4:23:c4: bd:fa:51:79:9f:13:e4:ba:62:38:6b:36:7f:1f:5a:83:ae:de: 4b:1f:88:d1:c3:52:04:15:83:41:f1:65:36:a7:d9:e1:5a:f3: 9e:f5:6a:bd:09:cb:b7:df:8e:6d:09:c1:ff:01:99:0d:d8:09: a6:13:31:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JR94w2AX46owp7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTE0MDAyM1oXDTI2MDYyMzE0MDAyM1owLzEtMCsGA1UEAxMk MGZmMWEyNTQtNjljZi00YWRjLTgwM2YtYTM4ZmNhYThmOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTlV8ue8/Z+NY0n8R4fpD4xBNoQ/C5KhP4+r Ib7Xa0dMRUDRcjbvM1jcc/u7JsKYUevNPcnuBIS5tX5svlAhZA0EhBql2SZABeY/ H4FVDuQmiDOMkIlTWJSA1Ho11FX6Yvln5kb3qsWwHR7gK2Hh9wHeJDAhDkKhaB9z t8gAhg7OMqxWzxqu6r4rTHwyyUCinHRV0VX0JLsrFQF0u5j5VCkLP5Z23fAbnwQM 4FqgjBtV/zayoW0iL/+Ksh+5zJseRdIf8KdDFw9XscfvgtEUZ7Jmk78qSmMKDWRU GEi7YiCWgPyTOedGNM4kUghUqnwqA4dFVo+5Z11FtIJsW0iL9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVCqSqGKgalX0VZ/kMY9V6HGb3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTMzMTcwMDAtMzkxMC0z NzU5LThlZDktOTBkZDU0MWRmNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvXbaYo9uR7e1xTrmUaOofLhAhYR2bbqx6DfXTl8ny/f+mbSS85gp1Y snngiMBYQ3XObTEWk309iQilxtfc8SbNHDm4D1zs51vQMHDmfBIBfcyRV+1WRZlZ 37qe/FINvMU/PQajwyqHbp04o634pMtF5JmXWZSg/YSPaYLqt2mzew5sigSMGQV6 iUXhL/0i598QhdUJjLZlraibmmBO+gpCa7AXVCj4hsOVxoKx+ht4I3l3xn2b7NHV mKoWW7kxwtx//vQjxL36UXmfE+S6YjhrNn8fWoOu3ksfiNHDUgQVg0HxZTan2eFa 8571ar0Jy7ffjm0Jwf8BmQ3YCaYTMZg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:49:56 2026 by rpki-client