$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98b344d7-604c-36ba-b6f0-28b719160cb2.roa File: 98b344d7-604c-36ba-b6f0-28b719160cb2.roa (raw, json) Hash identifier: 31hd1+TOHLC4Nqj1I/wWR7VhsTMWYT9wKMwGz1A8wS0= Subject key identifier: 61:61:CE:C0:4E:15:DD:34:D8:EB:41:C0:E2:43:14:9F:44:3F:E3:FF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F92320B13B31BB048AD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98b344d7-604c-36ba-b6f0-28b719160cb2.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.188.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:92:32:0b:13:b3:1b:b0:48:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=e1c28f3c-95c3-4fae-a569-c9acdf803677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:3f:0f:46:6d:78:d6:ee:a5:14:b7:37:fd: 4d:43:68:23:29:97:7d:de:a6:4a:81:6c:55:11:71: 59:49:d3:ce:c5:ee:4e:64:cd:f7:a1:a5:8f:4e:e1: 68:dd:3e:4f:1c:31:bf:1a:63:e8:f9:62:da:d1:ba: 49:0f:94:9b:bf:f2:d7:e1:39:c1:be:11:8c:36:98: 95:55:f9:ce:8b:ff:2f:27:95:cb:6f:83:35:9a:b1: a6:10:35:7e:a1:82:94:82:ee:51:e5:9d:aa:c0:91: 0e:90:87:da:11:85:7b:21:bc:63:68:56:ac:c1:6b: a3:5a:e5:17:62:df:70:b6:ca:4f:ca:33:1d:e2:e8: 07:45:a3:a7:15:15:80:1b:30:23:25:ec:96:62:a5: 23:62:eb:c3:f3:c9:ed:f5:e3:4d:fc:36:70:d8:a1: 96:08:5a:81:16:90:42:73:41:56:91:e3:ac:26:fd: 02:0f:fd:5a:f8:99:8c:d8:34:37:5d:4f:e1:6c:d6: eb:53:d8:ca:7b:c9:2b:56:9e:90:4b:98:33:91:85: 55:e0:c8:c2:68:a2:08:7d:59:e3:00:47:82:94:7a: 29:e5:ad:84:e5:20:c3:8b:71:38:4c:82:b4:1a:51: 5c:9a:6d:bd:72:4a:21:76:09:d8:21:de:b1:21:6f: 2a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:61:CE:C0:4E:15:DD:34:D8:EB:41:C0:E2:43:14:9F:44:3F:E3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98b344d7-604c-36ba-b6f0-28b719160cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:32:e2:ee:62:72:b3:7a:2a:56:a3:d1:ce:1e:aa:b9:fe:4e: ad:0d:ab:c9:a2:29:2f:18:c0:16:29:03:6a:68:ce:37:49:5d: 32:15:89:d5:f1:e8:5e:02:36:fd:00:aa:ad:c0:6c:00:59:12: 16:38:c7:f9:fd:cb:90:3c:cd:c9:b7:83:2f:4b:83:cc:59:fb: 45:a6:70:52:c2:73:c1:1c:ed:1b:21:03:28:15:b5:70:3b:5d: d7:45:8a:77:6f:83:ad:2a:b3:78:d7:26:cd:bf:1e:7c:b4:1d: b2:a6:90:cb:97:a9:7f:6b:20:ef:66:66:3d:9e:1d:c5:76:f8: 04:1b:21:2b:03:49:a9:9d:0b:9b:f5:41:17:88:dc:69:f8:f1: 7c:63:f7:74:87:e6:14:17:f0:e7:49:67:17:b0:13:a1:16:ec: 2f:61:ba:f0:99:28:ea:d0:47:bd:e4:ef:df:3e:8f:3c:62:ca: ab:fd:53:91:32:9c:75:a3:40:dc:c8:dc:ed:51:5e:1a:30:8b: d0:55:6d:d2:d8:0e:65:15:b4:6e:fb:06:e6:28:30:ac:53:fc: 24:95:15:1f:96:48:d4:01:b4:24:04:cc:37:02:10:4f:41:4e: 8e:64:34:d8:f3:d6:8c:fa:c1:4d:e3:f3:46:b9:78:9b:f5:c3: 9f:86:ca:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5IyCxOzG7BIrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZTFjMjhmM2MtOTVjMy00ZmFlLWE1NjktYzlhY2RmODAzNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjQ/D0ZteNbupRS3N/1NQ2gjKZd93qZKgWxV EXFZSdPOxe5OZM33oaWPTuFo3T5PHDG/GmPo+WLa0bpJD5Sbv/LX4TnBvhGMNpiV VfnOi/8vJ5XLb4M1mrGmEDV+oYKUgu5R5Z2qwJEOkIfaEYV7IbxjaFaswWujWuUX Yt9wtspPyjMd4ugHRaOnFRWAGzAjJeyWYqUjYuvD88nt9eNN/DZw2KGWCFqBFpBC c0FWkeOsJv0CD/1a+JmM2DQ3XU/hbNbrU9jKe8krVp6QS5gzkYVV4MjCaKIIfVnj AEeClHop5a2E5SDDi3E4TIK0GlFcmm29ckohdgnYId6xIW8qLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFhzsBOFd002OtBwOJDFJ9EP+P/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOThiMzQ0ZDctNjA0Yy0z NmJhLWI2ZjAtMjhiNzE5MTYwY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMy4u5icrN6Klaj0c4eqrn+Tq0Nq8miKS8YwBYpA2pozjdJXTIVidXx 6F4CNv0Aqq3AbABZEhY4x/n9y5A8zcm3gy9Lg8xZ+0WmcFLCc8Ec7RshAygVtXA7 XddFindvg60qs3jXJs2/Hny0HbKmkMuXqX9rIO9mZj2eHcV2+AQbISsDSamdC5v1 QReI3Gn48Xxj93SH5hQX8OdJZxewE6EW7C9huvCZKOrQR73k798+jzxiyqv9U5Ey nHWjQNzI3O1RXhowi9BVbdLYDmUVtG77BuYoMKxT/CSVFR+WSNQBtCQEzDcCEE9B To5kNNjz1oz6wU3j80a5eJv1w5+Gyrg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:44 2026 by rpki-client