$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7804d292-ab74-3e7f-9460-9b74b44a4d5e.roa File: 7804d292-ab74-3e7f-9460-9b74b44a4d5e.roa (raw, json) Hash identifier: weYlKyVL1kJo2BMfDrWgmTmAkx783qnjJQrtg1WYV6g= Subject key identifier: E7:30:CF:3E:09:8F:AE:A6:B8:92:12:E9:2E:81:60:E7:9C:AD:A0:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D117293C285B3747C1581E6C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7804d292-ab74-3e7f-9460-9b74b44a4d5e.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 173.187.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:93:c2:85:b3:74:7c:15:81:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=f7f84398-d109-4491-8aaf-dba6da03f4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:66:75:2e:6f:04:64:cd:fb:fa:19:06:77: c2:7f:d0:54:e3:ac:25:c0:5f:82:f9:91:95:f2:d2: e1:40:49:54:1d:a6:7c:47:66:fa:b2:22:31:d5:df: cf:75:ab:4b:13:38:c5:e5:7c:97:6f:e4:7a:7f:46: 10:61:6c:c7:8b:c4:23:b3:88:a2:ba:d7:f4:1d:85: 84:0f:b3:1c:cb:85:c1:0e:30:f5:c5:14:d1:b4:21: 06:6f:98:91:78:e8:77:d7:4d:3d:d8:24:1f:3d:5d: ee:8c:0b:b2:10:d0:28:c6:a6:52:35:8b:a5:55:4f: 43:95:5f:66:ea:a1:06:03:fc:f5:0d:29:de:19:2f: b8:9b:c9:47:f4:6b:6e:6a:9e:e1:94:7c:c1:70:7f: cc:4a:11:54:04:65:db:20:3f:02:29:d1:d5:b9:c7: 3c:35:66:bf:37:f2:17:21:96:c1:0c:62:fb:38:76: 7f:73:02:35:a8:b0:94:6d:26:44:23:25:ce:81:5e: 81:01:cd:c0:80:43:e1:a2:45:dc:7e:69:5b:fd:a6: 61:72:76:63:66:1b:cb:23:29:07:6a:24:9a:46:96: a6:7e:00:67:87:06:a1:e8:a4:73:bf:5e:ce:36:55: 9b:eb:eb:48:4d:75:ff:b5:ac:a0:49:b7:66:25:16: 3d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:30:CF:3E:09:8F:AE:A6:B8:92:12:E9:2E:81:60:E7:9C:AD:A0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7804d292-ab74-3e7f-9460-9b74b44a4d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:11:9e:93:e1:b3:72:8a:d5:55:55:af:a2:0f:f0:82:ab:f2: a8:c2:bf:6e:b9:07:59:ee:0b:78:cb:96:11:32:95:73:3b:1f: 34:af:43:f0:ce:23:b5:e3:a1:f6:df:eb:d9:c5:34:31:89:85: d5:5f:53:60:c7:f9:e0:9e:ab:71:f6:aa:2d:b4:d1:bf:a7:61: 3d:d1:62:b7:85:5f:7d:5e:24:bd:fa:a0:a8:23:87:26:f2:43: 5b:27:b3:81:0d:77:42:d0:bb:a9:58:d0:d1:24:8c:8d:23:b9: 99:03:96:e0:17:f5:cc:97:3d:cf:79:0a:cf:c8:81:a9:36:db: 6b:f1:6d:07:cf:cf:43:d3:4e:28:58:bc:94:41:fe:2c:4f:eb: d2:f7:0d:11:f1:85:d8:58:e4:1e:17:6e:cb:32:82:a4:cb:62: fc:5d:df:84:f4:60:1e:5f:b3:cd:70:88:2c:55:ba:d7:b0:26: f8:ac:49:a2:fe:06:36:da:74:08:0a:49:bd:ae:d3:3f:44:8b: 81:86:43:cf:f8:17:91:e2:40:71:2c:70:20:95:06:63:38:cd: 73:9d:fd:ac:40:b5:f3:f4:9f:68:33:90:05:9f:32:66:13:23: 4c:a6:91:bd:36:3b:01:c2:90:1f:ae:1c:e6:f0:d4:b0:18:80: 0b:82:e6:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpPChbN0fBWB5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZjdmODQzOTgtZDEwOS00NDkxLThhYWYtZGJhNmRhMDNmNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiRmdS5vBGTN+/oZBnfCf9BU46wlwF+C+ZGV 8tLhQElUHaZ8R2b6siIx1d/PdatLEzjF5XyXb+R6f0YQYWzHi8Qjs4iiutf0HYWE D7Mcy4XBDjD1xRTRtCEGb5iReOh310092CQfPV3ujAuyENAoxqZSNYulVU9DlV9m 6qEGA/z1DSneGS+4m8lH9Gtuap7hlHzBcH/MShFUBGXbID8CKdHVucc8NWa/N/IX IZbBDGL7OHZ/cwI1qLCUbSZEIyXOgV6BAc3AgEPhokXcfmlb/aZhcnZjZhvLIykH aiSaRpamfgBnhwah6KRzv17ONlWb6+tITXX/taygSbdmJRY9JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcwzz4Jj66muJIS6S6BYOecraDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzgwNGQyOTItYWI3NC0z ZTdmLTk0NjAtOWI3NGI0NGE0ZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsRnpPhs3KK1VVVr6IP8IKr8qjCv265B1nuC3jLlhEylXM7HzSvQ/DO I7Xjofbf69nFNDGJhdVfU2DH+eCeq3H2qi200b+nYT3RYreFX31eJL36oKgjhyby Q1sns4ENd0LQu6lY0NEkjI0juZkDluAX9cyXPc95Cs/Igak222vxbQfPz0PTTihY vJRB/ixP69L3DRHxhdhY5B4XbssygqTLYvxd34T0YB5fs81wiCxVutewJvisSaL+ BjbadAgKSb2u0z9Ei4GGQ8/4F5HiQHEscCCVBmM4zXOd/axAtfP0n2gzkAWfMmYT I0ymkb02OwHCkB+uHObw1LAYgAuC5to= -----END CERTIFICATE-----Generated at Thu Mar 26 08:02:42 2026 by rpki-client