$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c4a21a3-6fa8-33a9-81dd-521a14b55842.roa File: 7c4a21a3-6fa8-33a9-81dd-521a14b55842.roa (raw, json) Hash identifier: Gw10LIJG96sdexjvR6SS+cvsQ3ZvHt1h5GulJRjeBFE= Subject key identifier: 54:55:85:1B:6E:47:6E:8B:5D:07:18:60:F8:EA:EC:9E:CD:B7:FF:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D280C1786F0B3B075D87E4BF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c4a21a3-6fa8-33a9-81dd-521a14b55842.roa Signing time: Fri 13 Mar 2026 16:18:16 +0000 ROA not before: Fri 13 Mar 2026 16:18:16 +0000 ROA not after: Thu 11 Jun 2026 16:18:16 +0000 asID: 7029 IP address blocks: 173.189.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:0c:17:86:f0:b3:b0:75:d8:7e:4b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 13 16:18:16 2026 GMT Not After : Jun 11 16:18:16 2026 GMT Subject: CN=bfd2c0e1-4300-4422-a8b7-09486da20227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:49:ca:da:60:af:a4:3a:2b:d9:b9:5d:78: 5a:b2:a8:93:1f:1f:70:ff:43:f7:03:8a:2f:7e:1e: 45:06:45:f3:42:ec:39:4b:82:b7:68:77:a4:55:a7: 22:7b:f5:65:e4:fb:06:2f:31:06:fa:33:6e:91:7a: 00:5f:b9:dc:ed:ba:69:b7:8a:98:19:f6:5c:f3:fc: 82:6c:5f:cc:ee:09:62:09:3b:09:c8:dc:64:91:c8: c5:44:08:55:62:fc:2f:2c:f5:e7:44:33:7f:5d:86: b4:e5:d5:99:f6:b0:c9:43:44:12:07:13:cf:8d:1b: aa:02:b2:8c:ec:e5:59:62:18:1b:a8:67:d7:4c:e4: 84:0a:d9:c4:30:3b:1b:16:fd:27:8e:29:92:b3:6c: e5:00:16:40:6b:16:e7:95:81:cc:03:4c:e0:0f:79: bd:9c:a1:36:50:c7:0c:d7:27:19:7c:fe:56:9e:b9: c7:79:72:33:92:0e:e9:29:92:ba:71:cf:12:a9:7a: 7b:e3:6a:bd:3a:f6:26:fa:09:0d:a2:75:5a:b8:e8: 79:fa:b4:45:63:34:1f:01:76:f5:44:7f:e5:12:3b: f6:3a:a6:c8:16:df:2c:94:3c:36:55:e0:2e:d9:49: 99:4a:15:db:5d:63:62:55:bd:21:3a:a4:12:3c:de: df:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:55:85:1B:6E:47:6E:8B:5D:07:18:60:F8:EA:EC:9E:CD:B7:FF:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c4a21a3-6fa8-33a9-81dd-521a14b55842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0e:e9:d2:0c:b4:a4:a2:77:e0:53:47:a7:64:56:4d:22:64: 51:cd:ae:49:70:13:71:ea:d0:b6:05:c3:db:76:17:12:fb:3f: c8:70:19:a1:7f:0e:32:94:93:78:51:e0:a0:72:95:43:df:07: 0d:c7:57:24:e8:53:dc:de:06:e8:e4:c9:b3:4b:db:14:04:36: 3f:2e:07:dd:2e:bb:39:0e:68:42:23:52:8a:e5:41:90:66:9b: 19:55:3a:58:f0:0d:ab:57:80:ea:e3:f2:fd:74:cb:c0:df:f9: a9:b1:a9:ea:26:29:2f:46:96:9a:8a:c4:4b:44:e2:b8:cd:4d: a8:0f:63:e9:16:8c:ba:34:48:58:6b:e4:13:9d:c3:64:fb:21: 8c:17:b9:b2:da:af:5f:05:8a:06:b7:72:a4:82:df:38:1b:08: ed:1b:b1:9f:c9:db:98:31:e6:c6:ee:09:e6:06:b5:bf:ca:e1: bb:99:e3:f6:b6:5a:86:1a:9c:4f:5c:65:bb:8f:6e:51:fc:db: ab:e3:14:70:b8:35:79:6a:6f:f0:7c:9d:d3:fa:d8:86:47:15: 90:dd:7c:ce:d8:fd:c9:de:ec:cb:30:14:b1:66:b4:06:b2:3d: 67:1f:cc:eb:aa:43:1f:36:54:83:f0:ca:a7:d0:8b:a2:52:82: 9a:e6:23:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0oDBeG8LOwddh+S/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMzE2MTgxNloXDTI2MDYxMTE2MTgxNlowLzEtMCsGA1UEAxMk YmZkMmMwZTEtNDMwMC00NDIyLWE4YjctMDk0ODZkYTIwMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtABJytpgr6Q6K9m5XXhasqiTHx9w/0P3A4ov fh5FBkXzQuw5S4K3aHekVacie/Vl5PsGLzEG+jNukXoAX7nc7bppt4qYGfZc8/yC bF/M7gliCTsJyNxkkcjFRAhVYvwvLPXnRDN/XYa05dWZ9rDJQ0QSBxPPjRuqArKM 7OVZYhgbqGfXTOSECtnEMDsbFv0njimSs2zlABZAaxbnlYHMA0zgD3m9nKE2UMcM 1ycZfP5WnrnHeXIzkg7pKZK6cc8SqXp742q9OvYm+gkNonVauOh5+rRFYzQfAXb1 RH/lEjv2OqbIFt8slDw2VeAu2UmZShXbXWNiVb0hOqQSPN7frQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRVhRtuR26LXQcYYPjq7J7Nt/+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2M0YTIxYTMtNmZhOC0z M2E5LTgxZGQtNTIxYTE0YjU1ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0O6dIMtKSid+BTR6dkVk0iZFHNrklwE3Hq0LYFw9t2FxL7P8hwGaF/ DjKUk3hR4KBylUPfBw3HVyToU9zeBujkybNL2xQENj8uB90uuzkOaEIjUorlQZBm mxlVOljwDatXgOrj8v10y8Df+amxqeomKS9GlpqKxEtE4rjNTagPY+kWjLo0SFhr 5BOdw2T7IYwXubLar18Figa3cqSC3zgbCO0bsZ/J25gx5sbuCeYGtb/K4buZ4/a2 WoYanE9cZbuPblH826vjFHC4NXlqb/B8ndP62IZHFZDdfM7Y/cne7MswFLFmtAay PWcfzOuqQx82VIPwyqfQi6JSgprmI6E= -----END CERTIFICATE-----Generated at Thu Mar 26 08:06:01 2026 by rpki-client