$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa File: 5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa (raw, json) Hash identifier: RHqMHVRo8RMmXsxMMrRNGO2i7AUskAusD7dv1UKvEeQ= Subject key identifier: 7B:29:42:5F:8F:D1:E6:C1:2B:80:07:77:D9:5B:8A:17:E0:C5:4A:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8FFF571E091870766300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.185.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:8f:ff:57:1e:09:18:70:76:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=4a201885-b6ac-43a9-98d9-ccbb7e9e35c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:94:d3:64:2a:1a:1f:ca:9d:34:8c:3e:48:1f: 6c:d0:14:fd:94:09:11:c9:8f:32:9d:08:63:67:6f: f5:d2:fa:30:97:e9:40:3b:83:79:bf:0f:7b:48:90: ca:2b:20:6d:ab:ad:31:36:6c:fb:eb:80:67:70:de: 81:aa:47:58:81:cb:12:c0:86:ba:69:4c:df:10:f1: da:64:b9:3e:90:f1:fe:45:4f:5b:e3:d1:a8:1a:e8: 60:c3:29:5a:c0:07:f2:76:a9:9b:7b:32:94:68:a3: 65:76:46:6c:aa:81:79:65:c4:9f:70:13:7c:29:45: 69:d1:50:e5:c3:4f:e6:12:ce:72:e8:b5:ea:aa:9f: de:81:ec:52:e6:fb:96:ac:4a:15:9b:eb:6f:3b:87: 56:34:34:03:94:42:40:b2:69:b9:56:50:a9:e3:de: 32:8f:d6:77:ab:07:dc:a4:b7:e7:bf:6f:1d:b7:d5: 01:8c:90:e0:5c:74:4d:bf:5c:da:c8:98:60:21:d8: 2d:a7:30:98:3b:b9:62:85:0f:f7:d8:3c:a5:af:b5: 77:e8:30:c3:40:09:f8:0c:17:c6:b8:08:c1:26:bd: 98:c3:62:ef:db:16:17:2c:bf:cf:46:db:06:e8:fe: 8e:1e:22:e5:be:d5:b3:11:cb:24:b8:0b:75:e2:7e: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:29:42:5F:8F:D1:E6:C1:2B:80:07:77:D9:5B:8A:17:E0:C5:4A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5400a5f1-6b08-3c9e-9e25-22d26516e4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:83:b9:78:7d:0c:5f:1a:4b:dc:d5:ae:d4:9c:f5:98:00:d1: 4e:6d:a5:43:7d:88:d7:75:af:13:70:d1:24:69:f3:39:25:53: 6c:05:d5:0f:b0:a3:a9:ec:db:81:0f:2b:a8:e5:29:22:8d:bb: 3e:42:27:c5:40:9f:40:0d:2b:4f:76:0f:6a:9d:c5:58:91:81: 95:39:ca:92:b4:26:7c:47:f2:25:ac:4c:ae:d1:6d:94:af:3a: 50:cf:f1:ea:a6:a6:31:a1:4f:a9:ce:a9:8b:b3:3d:dd:4d:14: 2d:e1:b4:3b:89:43:a9:2d:2c:d3:82:60:bb:6a:a7:0d:34:b4: c1:57:3b:5e:4b:a5:c1:c0:3c:bb:fa:56:86:dd:b6:fc:95:d2: 8c:33:c6:a8:a4:d8:1f:58:89:11:1e:c0:3d:de:6f:b9:2f:99: 4b:1f:16:1f:01:30:ff:20:09:75:25:56:f2:ee:e6:ab:5b:68: 16:c4:45:88:e8:2c:70:83:95:b8:66:8d:74:fb:eb:cb:3b:5c: 04:66:3c:27:31:d4:09:b4:e5:f7:a0:97:f4:40:8f:73:ff:64: 6f:6c:5c:86:da:30:39:fa:c1:d0:1b:32:bf:e2:fd:70:1b:ab: 14:9e:9e:ee:f9:bc:e1:e9:ef:8f:bd:ef:11:03:9e:39:cb:02: fa:d0:46:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4//Vx4JGHB2YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NGEyMDE4ODUtYjZhYy00M2E5LTk4ZDktY2NiYjdlOWUzNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pTTZCoaH8qdNIw+SB9s0BT9lAkRyY8ynQhj Z2/10vowl+lAO4N5vw97SJDKKyBtq60xNmz764BncN6BqkdYgcsSwIa6aUzfEPHa ZLk+kPH+RU9b49GoGuhgwylawAfydqmbezKUaKNldkZsqoF5ZcSfcBN8KUVp0VDl w0/mEs5y6LXqqp/egexS5vuWrEoVm+tvO4dWNDQDlEJAsmm5VlCp494yj9Z3qwfc pLfnv28dt9UBjJDgXHRNv1zayJhgIdgtpzCYO7lihQ/32Dylr7V36DDDQAn4DBfG uAjBJr2Yw2Lv2xYXLL/PRtsG6P6OHiLlvtWzEcskuAt14n4cRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHspQl+P0ebBK4AHd9lbihfgxUozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQwMGE1ZjEtNmIwOC0z YzllLTllMjUtMjJkMjY1MTZlNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiDuXh9DF8aS9zVrtSc9ZgA0U5tpUN9iNd1rxNw0SRp8zklU2wF1Q+w o6ns24EPK6jlKSKNuz5CJ8VAn0ANK092D2qdxViRgZU5ypK0JnxH8iWsTK7RbZSv OlDP8eqmpjGhT6nOqYuzPd1NFC3htDuJQ6ktLNOCYLtqpw00tMFXO15LpcHAPLv6 VobdtvyV0owzxqik2B9YiREewD3eb7kvmUsfFh8BMP8gCXUlVvLu5qtbaBbERYjo LHCDlbhmjXT768s7XARmPCcx1Am05fegl/RAj3P/ZG9sXIbaMDn6wdAbMr/i/XAb qxSenu75vOHp74+97xEDnjnLAvrQRrs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:41 2026 by rpki-client