$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a774f4c-a43e-363d-bf90-79a8bd95f2e6.roa File: 6a774f4c-a43e-363d-bf90-79a8bd95f2e6.roa (raw, json) Hash identifier: Bb4zcG8Hnq3Khwi6OY3JmpFWzZb4QPDrQEzpYj0i4n0= Subject key identifier: 46:80:3D:85:C3:CF:A2:04:74:17:84:98:3B:9A:76:CA:6C:16:D9:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A54B8E96E94AC5D85CA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a774f4c-a43e-363d-bf90-79a8bd95f2e6.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.188.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:54:b8:e9:6e:94:ac:5d:85:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=1224ac93-7b51-4e76-accf-8b6803903252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fb:9e:30:20:68:7e:42:23:1b:38:34:e8:3a: 46:10:ca:1d:ed:7a:f8:f9:e9:1a:87:b8:81:d6:c5: 7b:e1:42:e7:c6:7a:4c:ef:37:7e:45:8e:7a:de:b3: a3:39:5f:8c:ea:6d:bc:cd:02:c4:72:e9:ad:1d:1c: d8:8b:44:69:ba:64:fe:8c:f3:76:45:8b:14:95:b3: 0c:44:ea:7d:4c:6c:90:8e:36:81:e9:e8:70:46:f0: bf:16:17:d3:89:ec:91:56:86:1c:4e:c0:f8:9c:74: df:08:ff:51:be:82:e8:71:16:f4:02:13:08:9e:2d: 1e:51:aa:56:f7:04:bd:9c:e8:5e:b6:b6:d1:36:e0: 7b:69:ba:74:61:f3:30:e6:5f:ed:81:c0:94:e8:ca: db:1c:04:17:4d:6f:2d:dd:74:67:ce:2a:cb:8e:b2: bb:8d:92:7d:07:4b:f9:ed:56:e0:cb:51:4b:13:c2: f0:39:2b:5f:00:9b:7a:c4:99:c5:52:78:92:17:c0: 83:c5:6f:d8:75:2b:5a:ee:c9:db:2d:84:d6:ce:7b: 3f:7a:a1:49:ca:83:f2:e3:78:db:b2:7d:fe:4a:91: 01:ac:89:09:89:af:84:62:c4:87:13:3e:bb:af:02: ad:aa:fd:c1:42:ee:9e:82:40:cd:ff:cd:a7:de:4f: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:80:3D:85:C3:CF:A2:04:74:17:84:98:3B:9A:76:CA:6C:16:D9:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a774f4c-a43e-363d-bf90-79a8bd95f2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:6d:f8:76:bd:c3:5c:d5:15:41:ae:0d:45:b8:b5:7a:97:0a: a3:6f:f4:ef:f7:98:66:78:05:1c:73:70:a2:aa:28:91:03:58: b6:3f:76:c4:a0:9f:58:98:27:bf:05:c5:1f:d2:82:91:20:2b: 17:ad:b6:fa:39:00:66:ce:69:e8:24:3e:c2:50:27:b2:b7:85: a1:45:56:b1:4d:5a:d3:a9:58:a2:d3:73:0c:03:ff:37:23:21: 74:b5:4a:12:a8:69:2a:54:8a:34:b6:4b:17:44:84:90:ee:54: 17:62:ea:93:6e:bf:2f:75:fb:6b:06:c3:7a:84:72:a0:a4:79: 58:32:eb:9d:7a:c2:1d:09:55:99:60:fe:33:ce:a2:53:29:42: 0d:0d:0d:01:03:a7:d0:c4:00:92:b8:5e:7a:94:a4:ac:8a:4d: d6:c2:82:05:b8:12:b3:30:e7:ee:3e:22:0f:c5:5b:94:70:01: 16:47:91:1d:d9:5a:82:4e:34:bd:de:ee:21:73:63:74:80:8a: a9:ae:b3:a5:ec:25:9f:e0:4e:ca:be:d7:16:4d:6f:25:c4:3b: ff:e9:db:cf:eb:a5:20:91:7b:0c:34:e3:d4:cf:10:cd:b0:c8: 3f:6e:7f:42:e1:e7:4e:c7:58:87:1f:65:ac:75:0b:66:9e:98: 7f:0f:f2:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alS46W6UrF2FykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MTIyNGFjOTMtN2I1MS00ZTc2LWFjY2YtOGI2ODAzOTAzMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vueMCBofkIjGzg06DpGEMod7Xr4+ekah7iB 1sV74ULnxnpM7zd+RY563rOjOV+M6m28zQLEcumtHRzYi0RpumT+jPN2RYsUlbMM ROp9TGyQjjaB6ehwRvC/FhfTieyRVoYcTsD4nHTfCP9RvoLocRb0AhMIni0eUapW 9wS9nOhetrbRNuB7abp0YfMw5l/tgcCU6MrbHAQXTW8t3XRnzirLjrK7jZJ9B0v5 7Vbgy1FLE8LwOStfAJt6xJnFUniSF8CDxW/YdSta7snbLYTWzns/eqFJyoPy43jb sn3+SpEBrIkJia+EYsSHEz67rwKtqv3BQu6egkDN/82n3k9CBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaAPYXDz6IEdBeEmDuadspsFtn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmE3NzRmNGMtYTQzZS0z NjNkLWJmOTAtNzlhOGJkOTVmMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItt+Ha9w1zVFUGuDUW4tXqXCqNv9O/3mGZ4BRxzcKKqKJEDWLY/dsSg n1iYJ78FxR/SgpEgKxettvo5AGbOaegkPsJQJ7K3haFFVrFNWtOpWKLTcwwD/zcj IXS1ShKoaSpUijS2SxdEhJDuVBdi6pNuvy91+2sGw3qEcqCkeVgy6516wh0JVZlg /jPOolMpQg0NDQEDp9DEAJK4XnqUpKyKTdbCggW4ErMw5+4+Ig/FW5RwARZHkR3Z WoJONL3e7iFzY3SAiqmus6XsJZ/gTsq+1xZNbyXEO//p28/rpSCReww049TPEM2w yD9uf0Lh507HWIcfZax1C2aemH8P8jk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:04:47 2026 by rpki-client