$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7017fb9b-0a3c-3656-81a2-a353624677b6.roa File: 7017fb9b-0a3c-3656-81a2-a353624677b6.roa (raw, json) Hash identifier: HlnZ5/sR/jI6yfY3z+ybkqzOzJfKgX2hrqHE4B/FbEI= Subject key identifier: 3D:77:0A:7D:5F:0E:26:DE:37:F2:A8:F0:94:D8:88:07:C2:29:D3:4B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D280553AA1CAE49B6C40AF680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7017fb9b-0a3c-3656-81a2-a353624677b6.roa Signing time: Fri 13 Mar 2026 16:04:38 +0000 ROA not before: Fri 13 Mar 2026 16:04:38 +0000 ROA not after: Thu 11 Jun 2026 16:04:38 +0000 asID: 7029 IP address blocks: 173.189.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:05:53:aa:1c:ae:49:b6:c4:0a:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 13 16:04:38 2026 GMT Not After : Jun 11 16:04:38 2026 GMT Subject: CN=315e2119-e66b-4c62-b542-364cf47a3f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:3e:ba:04:63:f7:54:af:ef:f7:f6:a9:00: ee:cf:2c:64:c3:cb:39:e5:2f:e2:c8:c9:0e:4d:68: b3:80:f9:4b:11:54:21:fc:73:68:8a:df:3e:2c:a5: a5:b0:51:80:39:47:bb:2f:66:02:15:07:ba:c9:94: a6:09:4e:15:44:28:e9:1f:90:fe:6e:24:eb:03:2b: 1f:64:fb:45:0a:5b:18:b0:ef:d9:6f:d6:a3:21:6b: f6:c0:98:d8:40:62:ea:d8:4b:1b:07:99:b6:72:ad: 29:34:60:cd:39:27:51:30:74:9d:4f:49:65:8b:8b: 67:90:d6:38:a0:d3:dc:5d:31:31:98:48:33:d7:5a: 9c:7b:e9:08:07:ed:dd:00:de:54:95:c3:15:b6:76: 35:a6:1b:33:96:fe:a1:4f:6d:cd:60:9e:9a:75:ab: 5e:df:ea:3b:3e:a9:35:53:69:77:44:84:96:a2:e9: ab:ff:a3:66:24:97:2a:da:f0:b4:9f:c7:50:a6:d3: c4:a9:d2:b5:c3:9f:4e:4d:64:84:87:e3:8d:bc:46: 79:72:22:3c:f7:f2:38:f8:b2:b2:82:6f:41:b7:f5: a3:04:2a:ff:8b:ae:14:a1:8d:c5:f6:12:79:32:12: 15:42:24:70:33:74:1d:56:cb:f2:6d:00:1e:be:b0: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:77:0A:7D:5F:0E:26:DE:37:F2:A8:F0:94:D8:88:07:C2:29:D3:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7017fb9b-0a3c-3656-81a2-a353624677b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2a:fd:e1:3e:ba:ce:2b:5e:96:1d:b0:69:be:67:65:b1:fb: 37:93:c5:e3:24:10:7f:cd:99:af:0e:ba:c3:33:d9:6b:d2:9d: e7:9e:dc:98:ec:41:24:bc:fa:b1:9b:e6:4e:7c:02:77:a9:70: 6f:aa:0a:63:d3:c7:c8:12:06:6f:5c:a0:24:7c:27:52:27:70: 2e:28:0d:b4:59:3e:06:e1:33:3b:78:2e:47:e6:ea:8e:a6:ad: c2:01:e8:3b:73:75:fc:23:01:be:14:67:d3:48:c6:b6:a7:c9: 24:b7:5b:2a:5f:b6:ab:c2:a7:f0:96:07:3c:e7:bf:8d:59:94: 32:99:35:64:32:03:2d:f0:90:76:fb:3e:80:60:13:25:9e:eb: 85:3a:f0:da:3e:ed:e5:eb:9b:7f:a6:b5:d6:e9:9a:93:bc:9b: 92:f8:4a:fb:c7:1b:5b:21:ef:31:32:f1:99:55:ba:be:ab:cc: e7:28:5e:22:84:9c:ad:bc:39:5b:5c:e9:e7:82:03:bc:1f:61: 48:b4:df:d2:02:78:04:a4:f4:a5:1a:03:07:8b:87:83:d7:c4: be:20:28:2a:64:d7:c5:3a:b9:f2:d8:75:50:13:29:20:33:ad: 1d:08:54:e0:00:ce:5c:ea:b9:5e:d3:7b:7f:7c:f6:81:63:21: 7b:20:47:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0oBVOqHK5JtsQK9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMzE2MDQzOFoXDTI2MDYxMTE2MDQzOFowLzEtMCsGA1UEAxMk MzE1ZTIxMTktZTY2Yi00YzYyLWI1NDItMzY0Y2Y0N2EzZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE4+ugRj91Sv7/f2qQDuzyxkw8s55S/iyMkO TWizgPlLEVQh/HNoit8+LKWlsFGAOUe7L2YCFQe6yZSmCU4VRCjpH5D+biTrAysf ZPtFClsYsO/Zb9ajIWv2wJjYQGLq2EsbB5m2cq0pNGDNOSdRMHSdT0lli4tnkNY4 oNPcXTExmEgz11qce+kIB+3dAN5UlcMVtnY1phszlv6hT23NYJ6adate3+o7Pqk1 U2l3RISWoumr/6NmJJcq2vC0n8dQptPEqdK1w59OTWSEh+ONvEZ5ciI89/I4+LKy gm9Bt/WjBCr/i64UoY3F9hJ5MhIVQiRwM3QdVsvybQAevrChjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD13Cn1fDibeN/Ko8JTYiAfCKdNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzAxN2ZiOWItMGEzYy0z NjU2LTgxYTItYTM1MzYyNDY3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8q/eE+us4rXpYdsGm+Z2Wx+zeTxeMkEH/Nma8OusMz2WvSneee3Jjs QSS8+rGb5k58AnepcG+qCmPTx8gSBm9coCR8J1IncC4oDbRZPgbhMzt4Lkfm6o6m rcIB6DtzdfwjAb4UZ9NIxranySS3WypftqvCp/CWBzznv41ZlDKZNWQyAy3wkHb7 PoBgEyWe64U68No+7eXrm3+mtdbpmpO8m5L4SvvHG1sh7zEy8ZlVur6rzOcoXiKE nK28OVtc6eeCA7wfYUi039ICeASk9KUaAweLh4PXxL4gKCpk18U6ufLYdVATKSAz rR0IVOAAzlzquV7Te3989oFjIXsgR18= -----END CERTIFICATE-----Generated at Thu Mar 26 13:07:03 2026 by rpki-client