$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78d35d18-3ab0-3586-8363-2fa340e3a405.roa File: 78d35d18-3ab0-3586-8363-2fa340e3a405.roa (raw, json) Hash identifier: 5Hj98Okdg0N5roIJuqJz+INBwPHfqhhQIYH22kfa8DA= Subject key identifier: D1:BA:DD:FD:2E:9B:42:F1:4A:F8:AA:20:88:E4:91:FD:A0:44:AE:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F925202EFDD1CB6D3C900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78d35d18-3ab0-3586-8363-2fa340e3a405.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.190.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:92:52:02:ef:dd:1c:b6:d3:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=27ff56d0-b56e-49e2-8c7e-7870e72354c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:86:5e:88:23:76:e6:74:0b:8a:95:5a:ce:59: 32:c7:f2:eb:ff:90:6a:12:ae:e2:68:f0:e9:88:c7: c3:f3:05:32:4a:b6:4e:0c:c1:8d:fd:63:98:4f:ab: 23:fc:f6:9d:37:a6:db:63:60:8a:51:17:bd:20:3c: fd:40:a4:cb:1d:b1:99:07:f6:1a:0e:94:99:1b:9a: fb:97:10:9a:b6:1d:11:29:41:49:b1:46:ab:19:c6: aa:b7:dc:6f:e6:45:38:1f:53:08:2c:73:fd:9c:bc: fe:1a:77:77:bb:24:41:27:7a:93:aa:76:e2:8a:ea: 12:93:4e:f0:48:1f:5a:ec:c1:6f:34:3a:a1:71:6f: 7e:95:48:24:fc:71:69:a7:11:84:0b:31:13:f4:92: 38:e6:f7:79:2c:ac:10:ce:1a:4c:3e:b3:b4:16:dd: a5:3c:a3:b3:27:ed:df:04:f6:d3:cd:ac:38:f6:c9: 36:32:b9:e9:d9:e1:12:af:5a:47:07:bf:e6:ce:ed: 66:ec:bc:4b:76:69:76:ad:ee:a5:8b:c2:ab:3d:8a: 8e:9f:fb:18:0a:55:17:93:27:72:3a:39:6a:62:a5: 57:ba:91:46:3d:05:46:74:69:5d:be:55:cf:a8:2b: 82:f2:bd:ed:c1:3a:25:4a:09:2a:38:aa:45:f9:fe: a3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BA:DD:FD:2E:9B:42:F1:4A:F8:AA:20:88:E4:91:FD:A0:44:AE:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78d35d18-3ab0-3586-8363-2fa340e3a405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e5:59:fe:8b:49:3e:01:43:6e:e6:5f:5f:42:8f:66:96:bf: 19:17:7c:3e:dc:97:a7:4d:7a:44:ef:f3:78:de:d0:bc:0a:31: b2:da:3a:ac:63:c9:58:b4:ed:7e:bb:93:3f:6e:97:d2:ce:2e: 1d:58:a7:78:50:87:56:ef:f0:44:42:43:e0:2e:99:89:d3:30: 0c:2c:dc:89:28:0e:70:9e:fd:21:63:ad:d9:9c:04:24:7a:b4: 40:b4:50:7c:2f:7d:17:3c:fc:03:c3:96:f1:0f:9b:a0:6f:af: 01:38:c7:30:67:7f:41:02:0b:7f:af:b8:d8:09:d1:1a:1c:28: ae:88:66:3a:65:d6:14:e4:8b:16:70:12:20:b2:d6:df:47:12: ef:a2:bf:e3:33:9f:ae:ff:9a:65:6b:1c:df:e8:78:8e:d9:9f: 81:15:d3:e2:6c:2b:39:38:f9:90:fc:eb:83:fb:5c:7e:3c:d2: 11:14:cf:12:05:70:9b:5f:bf:3d:39:e3:3e:16:36:63:eb:57: cf:53:db:64:cf:11:f2:29:11:8d:e7:80:08:95:5f:6e:23:01: a5:7c:9e:e9:44:e5:78:f3:8b:d6:34:a5:52:d9:7c:40:42:57: a5:e4:87:63:2d:90:0f:95:70:46:00:d8:78:63:6b:5a:25:60: 65:85:72:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5JSAu/dHLbTyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MjdmZjU2ZDAtYjU2ZS00OWUyLThjN2UtNzg3MGU3MjM1NGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74ZeiCN25nQLipVazlkyx/Lr/5BqEq7iaPDp iMfD8wUySrZODMGN/WOYT6sj/PadN6bbY2CKURe9IDz9QKTLHbGZB/YaDpSZG5r7 lxCath0RKUFJsUarGcaqt9xv5kU4H1MILHP9nLz+Gnd3uyRBJ3qTqnbiiuoSk07w SB9a7MFvNDqhcW9+lUgk/HFppxGECzET9JI45vd5LKwQzhpMPrO0Ft2lPKOzJ+3f BPbTzaw49sk2Mrnp2eESr1pHB7/mzu1m7LxLdml2re6li8KrPYqOn/sYClUXkydy OjlqYqVXupFGPQVGdGldvlXPqCuC8r3twTolSgkqOKpF+f6jIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG63f0um0LxSviqIIjkkf2gRK4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzhkMzVkMTgtM2FiMC0z NTg2LTgzNjMtMmZhMzQwZTNhNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPlWf6LST4BQ27mX19Cj2aWvxkXfD7cl6dNekTv83je0LwKMbLaOqxj yVi07X67kz9ul9LOLh1Yp3hQh1bv8ERCQ+AumYnTMAws3IkoDnCe/SFjrdmcBCR6 tEC0UHwvfRc8/APDlvEPm6BvrwE4xzBnf0ECC3+vuNgJ0RocKK6IZjpl1hTkixZw EiCy1t9HEu+iv+Mzn67/mmVrHN/oeI7Zn4EV0+JsKzk4+ZD864P7XH480hEUzxIF cJtfvz054z4WNmPrV89T22TPEfIpEY3ngAiVX24jAaV8nulE5Xjzi9Y0pVLZfEBC V6Xkh2MtkA+VcEYA2Hhja1olYGWFcvE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:09 2026 by rpki-client