$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/55998a67-4107-3e6e-84a4-84fdba9bdf1e.roa File: 55998a67-4107-3e6e-84a4-84fdba9bdf1e.roa (raw, json) Hash identifier: 4JrVP/o+EZP3GtXS379KEG+8IrNWeu1Gpo84vaWQcIs= Subject key identifier: A3:6C:B0:6A:91:68:41:F9:8C:C6:2B:5D:F3:FC:3E:E6:39:BF:86:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D467D365557B40601724B8F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/55998a67-4107-3e6e-84a4-84fdba9bdf1e.roa Signing time: Tue 24 Mar 2026 14:00:27 +0000 ROA not before: Tue 24 Mar 2026 14:00:27 +0000 ROA not after: Mon 22 Jun 2026 14:00:27 +0000 asID: 7029 IP address blocks: 173.190.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:7d:36:55:57:b4:06:01:72:4b:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 24 14:00:27 2026 GMT Not After : Jun 22 14:00:27 2026 GMT Subject: CN=fc880a33-b355-458b-b441-cb3fe48afdb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:82:cf:bd:02:c2:23:4c:e6:e9:78:d4:94: 58:82:8c:9e:ea:54:a7:76:86:15:a0:02:47:7a:53: 05:78:8b:16:07:ab:79:73:5e:76:89:86:e2:1d:aa: ef:e7:02:3a:2a:9f:4c:6c:b8:bb:23:06:58:6e:82: 36:02:ef:64:1e:55:84:f5:f9:bb:7a:4a:49:85:86: 14:6b:e7:35:ca:4b:85:5c:51:35:91:d0:52:9b:96: b6:3e:9e:ab:6c:83:4b:1b:70:28:20:59:1d:fc:7c: c4:fb:c0:1c:3b:5d:e3:91:b2:b7:c6:2b:c5:d7:a7: 0a:ad:d1:35:70:89:3a:aa:65:d5:69:5a:4a:19:29: dd:bd:f3:02:f0:8f:dd:56:0d:28:7b:35:88:27:7a: bd:0d:31:af:4b:e1:0b:0e:7b:35:8d:80:f7:a0:ef: c7:f6:13:ba:de:8c:8e:93:4a:74:9a:8c:fd:85:dd: 70:af:69:77:c0:bc:17:a1:28:b2:b0:bb:f3:aa:30: 8c:24:e0:db:f2:78:4c:45:6d:2d:78:45:e1:14:42: 2a:08:65:1e:08:16:46:a0:e4:2b:da:4a:20:fd:2c: 3c:d2:62:eb:7e:cc:67:5a:37:63:2c:05:76:ac:45: 12:3b:59:bf:15:24:c3:5e:c4:32:ea:cf:d2:03:80: 39:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6C:B0:6A:91:68:41:F9:8C:C6:2B:5D:F3:FC:3E:E6:39:BF:86:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/55998a67-4107-3e6e-84a4-84fdba9bdf1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b3:c3:06:4e:14:77:1c:d9:71:87:1a:34:0c:e0:59:d6:2e: 9a:03:14:55:b4:49:8d:a2:3a:48:f3:cc:6b:33:f9:c0:c2:bf: 30:c4:5e:3b:c2:8d:7d:bf:51:5a:58:f1:f2:54:7e:e4:c2:a6: 30:1f:7e:48:65:87:5e:52:d4:57:e4:38:34:b7:83:22:5d:18: f7:cc:da:15:9d:e2:57:32:eb:bc:ad:8e:0b:40:70:8d:d5:80: 77:3d:e9:65:a6:3e:4a:98:dd:d1:74:60:e3:ac:5e:8e:94:e0: 80:b8:8d:62:05:2c:4d:32:f7:d7:b9:29:a8:9a:0e:66:65:9a: 2e:4a:78:53:d8:6d:47:fd:4a:dc:28:2f:e2:26:89:a9:32:1a: 3b:86:88:63:7c:45:97:0b:b0:1e:ea:7b:3f:ad:17:f8:3f:d5: b4:7d:f2:fe:72:47:37:41:7a:14:81:8f:50:ec:7f:2c:2b:a9: c0:2d:83:7f:a3:3a:ce:ea:80:47:c6:4d:63:ce:44:37:95:da: 6c:ef:67:37:9a:a2:9b:e9:6f:cd:c7:23:94:a5:be:d1:e6:ec: 62:40:2e:2b:d0:9a:d0:69:10:dc:21:da:9b:01:b7:58:78:05: ff:1c:1a:31:da:9a:e0:c1:95:e0:9b:20:12:d8:fd:6e:c7:31: e2:2b:0f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GfTZVV7QGAXJLj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNDE0MDAyN1oXDTI2MDYyMjE0MDAyN1owLzEtMCsGA1UEAxMk ZmM4ODBhMzMtYjM1NS00NThiLWI0NDEtY2IzZmU0OGFmZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhSCz70CwiNM5ul41JRYgoye6lSndoYVoAJH elMFeIsWB6t5c152iYbiHarv5wI6Kp9MbLi7IwZYboI2Au9kHlWE9fm7ekpJhYYU a+c1ykuFXFE1kdBSm5a2Pp6rbINLG3AoIFkd/HzE+8AcO13jkbK3xivF16cKrdE1 cIk6qmXVaVpKGSndvfMC8I/dVg0oezWIJ3q9DTGvS+ELDns1jYD3oO/H9hO63oyO k0p0moz9hd1wr2l3wLwXoSiysLvzqjCMJODb8nhMRW0teEXhFEIqCGUeCBZGoOQr 2kog/Sw80mLrfsxnWjdjLAV2rEUSO1m/FSTDXsQy6s/SA4A5KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNssGqRaEH5jMYrXfP8PuY5v4agMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU5OThhNjctNDEwNy0z ZTZlLTg0YTQtODRmZGJhOWJkZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWzwwZOFHcc2XGHGjQM4FnWLpoDFFW0SY2iOkjzzGsz+cDCvzDEXjvC jX2/UVpY8fJUfuTCpjAffkhlh15S1FfkODS3gyJdGPfM2hWd4lcy67ytjgtAcI3V gHc96WWmPkqY3dF0YOOsXo6U4IC4jWIFLE0y99e5KaiaDmZlmi5KeFPYbUf9Stwo L+ImiakyGjuGiGN8RZcLsB7qez+tF/g/1bR98v5yRzdBehSBj1DsfywrqcAtg3+j Os7qgEfGTWPORDeV2mzvZzeaopvpb83HI5SlvtHm7GJALivQmtBpENwh2psBt1h4 Bf8cGjHamuDBleCbIBLY/W7HMeIrDwg= -----END CERTIFICATE-----Generated at Thu Mar 26 09:34:41 2026 by rpki-client