$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62570d5b-8dc5-369d-afb2-9a1a07a423f2.roa File: 62570d5b-8dc5-369d-afb2-9a1a07a423f2.roa (raw, json) Hash identifier: ovcmC5KqKz3/cCTxj3B1ruSdnuN0PiH89p5bD88lVPA= Subject key identifier: A9:E2:EA:D1:34:7E:26:50:B8:8D:B9:09:D9:BC:E5:94:45:7E:3A:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D27F6DD8F133AD9923481D800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62570d5b-8dc5-369d-afb2-9a1a07a423f2.roa Signing time: Fri 13 Mar 2026 15:35:30 +0000 ROA not before: Fri 13 Mar 2026 15:35:30 +0000 ROA not after: Thu 11 Jun 2026 15:35:30 +0000 asID: 7029 IP address blocks: 173.188.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:f6:dd:8f:13:3a:d9:92:34:81:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 13 15:35:30 2026 GMT Not After : Jun 11 15:35:30 2026 GMT Subject: CN=43e92413-a006-4e7f-9462-0b43b6043d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:7c:74:82:ae:5c:76:93:83:c8:53:57:02: 83:cf:8a:a9:87:49:de:c4:b1:e0:8d:20:dd:05:6b: 64:10:f4:da:69:81:61:83:21:ab:cc:4f:46:c4:4b: 35:b0:f3:85:70:1f:57:1e:7a:6c:e6:d4:ca:82:04: e8:90:95:9a:30:db:a6:66:99:de:c7:4b:9c:f9:97: 0b:48:fa:be:74:b0:ff:c2:a1:b0:f8:ef:e3:2f:7b: b4:14:5a:bf:61:25:ed:f7:2d:cd:b7:7b:13:c9:77: c4:e3:0b:34:68:50:8f:4a:7b:da:b2:f1:71:53:f2: 81:c3:55:04:d5:ce:24:3d:53:c1:66:af:08:33:a4: 35:f1:13:b3:bf:56:ce:76:5d:52:95:8f:8c:5b:67: 92:dc:be:d4:5f:00:66:16:40:54:6d:51:c0:07:ee: ec:b3:8b:f3:39:91:07:39:8c:4a:e0:3f:d0:d8:b1: de:03:a0:b7:32:94:62:00:b1:93:de:36:d8:0f:ea: 67:d6:7a:29:af:15:75:fe:40:4f:86:41:8e:e6:24: 7a:52:a2:c9:ed:16:3d:03:51:76:92:42:83:b1:37: 55:16:56:00:7e:37:cb:42:aa:78:c9:65:f8:09:b5: 6c:03:78:89:dc:a9:70:bf:47:ce:69:a2:44:77:e3: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:EA:D1:34:7E:26:50:B8:8D:B9:09:D9:BC:E5:94:45:7E:3A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62570d5b-8dc5-369d-afb2-9a1a07a423f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d7:05:29:d2:bf:f9:b0:70:fd:34:d3:65:62:de:f4:6c:90: 17:5e:f3:a8:23:2e:2a:f3:47:c0:ec:68:01:4b:98:af:1e:89: ac:65:38:a6:de:f1:b9:ba:33:a6:e6:15:a0:1a:a8:b3:be:e1: ca:a7:ba:7c:38:1c:83:fa:1b:c0:40:c6:27:b7:dd:b8:3a:76: 7c:4a:21:ee:fc:a4:e4:4a:59:f2:57:ee:4d:f8:a3:55:47:25: 94:37:d0:bf:2a:57:0b:34:b8:9b:64:5c:c1:1c:d5:e9:ef:2a: 74:6d:fc:28:69:f0:48:f4:37:47:d5:a4:4c:d2:26:4e:40:5c: 6c:0f:9f:8e:35:1f:42:31:b7:d3:31:c3:a2:9c:b4:e7:8b:aa: 3f:ba:06:7d:eb:bd:39:eb:9a:66:f0:ee:fa:f8:72:63:46:aa: 51:d2:10:3c:a2:b7:41:d4:2a:aa:1c:f8:c4:4d:9c:25:c0:15: 17:90:de:65:c5:e9:92:53:a3:92:78:de:c6:9d:c4:c8:33:db: 14:ac:e1:33:09:ee:e4:fc:0d:b4:20:fb:c8:a2:c1:0c:26:53: 99:5a:47:d2:3c:58:48:a9:9a:8a:30:9a:db:48:57:b2:dd:73: 03:e4:18:68:35:75:a0:01:35:e6:37:ec:13:e7:26:af:24:65: 2d:40:fd:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0n9t2PEzrZkjSB2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMzE1MzUzMFoXDTI2MDYxMTE1MzUzMFowLzEtMCsGA1UEAxMk NDNlOTI0MTMtYTAwNi00ZTdmLTk0NjItMGI0M2I2MDQzZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTB8dIKuXHaTg8hTVwKDz4qph0nexLHgjSDd BWtkEPTaaYFhgyGrzE9GxEs1sPOFcB9XHnps5tTKggTokJWaMNumZpnex0uc+ZcL SPq+dLD/wqGw+O/jL3u0FFq/YSXt9y3Nt3sTyXfE4ws0aFCPSnvasvFxU/KBw1UE 1c4kPVPBZq8IM6Q18ROzv1bOdl1SlY+MW2eS3L7UXwBmFkBUbVHAB+7ss4vzOZEH OYxK4D/Q2LHeA6C3MpRiALGT3jbYD+pn1noprxV1/kBPhkGO5iR6UqLJ7RY9A1F2 kkKDsTdVFlYAfjfLQqp4yWX4CbVsA3iJ3Klwv0fOaaJEd+MFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKni6tE0fiZQuI25Cdm85ZRFfjrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjI1NzBkNWItOGRjNS0z NjlkLWFmYjItOWExYTA3YTQyM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPXBSnSv/mwcP0002Vi3vRskBde86gjLirzR8DsaAFLmK8eiaxlOKbe 8bm6M6bmFaAaqLO+4cqnunw4HIP6G8BAxie33bg6dnxKIe78pORKWfJX7k34o1VH JZQ30L8qVws0uJtkXMEc1envKnRt/Chp8Ej0N0fVpEzSJk5AXGwPn441H0Ixt9Mx w6KctOeLqj+6Bn3rvTnrmmbw7vr4cmNGqlHSEDyit0HUKqoc+MRNnCXAFReQ3mXF 6ZJTo5J43sadxMgz2xSs4TMJ7uT8DbQg+8iiwQwmU5laR9I8WEipmoowmttIV7Ld cwPkGGg1daABNeY37BPnJq8kZS1A/ZE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:08:15 2026 by rpki-client