$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9aa4f300-a17b-342b-9e82-bc41990922ff.roa File: 9aa4f300-a17b-342b-9e82-bc41990922ff.roa (raw, json) Hash identifier: E0/CdZPFx70JqQM8vWkoJKSe8W1B+ZdmHs6FlJ/iSBE= Subject key identifier: 4D:44:E9:EF:5F:AC:34:CF:C6:8D:87:7A:1B:1C:4D:08:4A:47:61:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F921664952566AA189280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9aa4f300-a17b-342b-9e82-bc41990922ff.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.187.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:92:16:64:95:25:66:aa:18:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=a8383c82-7567-461e-a05f-4c5a653565cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:ae:7b:2c:29:a4:d3:2c:d4:12:b3:52:bb: fb:c5:5f:60:6c:64:7c:b7:7e:16:e7:67:85:68:6e: 7d:23:33:ec:ea:3f:c5:49:4d:07:fa:3b:0b:3a:cf: 68:a1:16:81:58:06:0f:08:d2:49:67:1c:fb:74:57: 10:13:02:c1:f4:05:86:78:70:29:91:07:e7:34:09: 25:bf:ac:4d:7f:16:6e:2a:d3:16:50:3e:fe:9c:4b: 43:62:4e:4f:55:d1:5f:1c:72:cf:cf:7f:e3:b1:e6: 23:fb:2f:52:7e:4b:9a:61:12:30:f2:89:b8:12:ae: f5:10:2d:6c:52:56:80:3e:3a:ca:7b:62:85:9f:46: 5a:17:b0:6d:6f:7f:33:6b:3e:37:50:68:ae:fc:ae: 58:37:83:20:ba:b4:0e:4d:4f:f7:99:da:c0:93:d6: f9:28:54:fc:14:10:78:05:8f:4b:86:b3:70:94:f6: 21:6a:ff:4e:b1:31:47:5a:63:9f:0a:75:79:07:ed: 0c:1f:8c:2b:e3:73:80:65:91:67:39:d8:bc:d1:e7: a0:c8:9b:23:d6:1e:27:ed:4c:80:75:fa:5d:72:88: 2d:c6:d7:a0:e2:22:18:4b:c3:ff:5c:86:cb:49:0a: 14:90:e6:09:e2:ac:e2:16:98:97:f2:ad:4a:15:6c: 58:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:44:E9:EF:5F:AC:34:CF:C6:8D:87:7A:1B:1C:4D:08:4A:47:61:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9aa4f300-a17b-342b-9e82-bc41990922ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:86:d8:18:0d:a1:37:3f:bb:04:9a:2b:13:96:5a:ea:03:6a: d0:12:d3:f6:55:4b:15:68:f5:c0:57:48:8c:4c:ea:27:74:62: ac:dc:cd:00:87:44:88:14:5c:6d:29:2a:33:c9:5a:62:8f:24: 17:00:56:ce:9a:36:65:b4:94:54:a4:d5:e7:81:21:22:12:ff: 01:bc:ba:b2:04:1b:60:79:d6:85:03:fc:d0:74:f5:f4:ca:59: cf:e5:b8:4c:84:ff:e7:3d:60:d2:4a:78:1e:9f:9e:3b:fb:5a: c7:f9:0f:2d:0a:46:1a:1c:9c:ac:fc:dd:a9:1d:d2:9d:0b:14: 98:d5:0f:6b:b2:d9:6f:17:08:85:1a:1a:1f:ca:ee:68:e8:27: 45:43:fb:51:c7:62:17:06:eb:7f:91:42:15:e4:f3:c7:31:3e: fe:a1:73:81:14:80:66:d1:fc:df:0c:df:98:98:cc:3e:f9:e4: 40:a0:fc:03:02:f5:6c:90:c0:39:54:f1:d0:5c:09:da:e4:4d: 39:57:c2:71:27:07:54:58:71:86:bf:ef:44:e0:60:f2:98:4d: 65:a0:c6:20:44:bd:9c:d1:e5:6e:76:aa:ec:7e:34:7e:42:c9: 38:27:c7:24:59:a3:b1:ba:b0:6a:2a:3a:0c:48:a3:f9:22:d6: 8b:ae:6c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5IWZJUlZqoYkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YTgzODNjODItNzU2Ny00NjFlLWEwNWYtNGM1YTY1MzU2NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxqueywppNMs1BKzUrv7xV9gbGR8t34W52eF aG59IzPs6j/FSU0H+jsLOs9ooRaBWAYPCNJJZxz7dFcQEwLB9AWGeHApkQfnNAkl v6xNfxZuKtMWUD7+nEtDYk5PVdFfHHLPz3/jseYj+y9SfkuaYRIw8om4Eq71EC1s UlaAPjrKe2KFn0ZaF7Btb38zaz43UGiu/K5YN4MgurQOTU/3mdrAk9b5KFT8FBB4 BY9LhrNwlPYhav9OsTFHWmOfCnV5B+0MH4wr43OAZZFnOdi80eegyJsj1h4n7UyA dfpdcogtxteg4iIYS8P/XIbLSQoUkOYJ4qziFpiX8q1KFWxYOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1E6e9frDTPxo2HehscTQhKR2GjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWFhNGYzMDAtYTE3Yi0z NDJiLTllODItYmM0MTk5MDkyMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6G2BgNoTc/uwSaKxOWWuoDatAS0/ZVSxVo9cBXSIxM6id0YqzczQCH RIgUXG0pKjPJWmKPJBcAVs6aNmW0lFSk1eeBISIS/wG8urIEG2B51oUD/NB09fTK Wc/luEyE/+c9YNJKeB6fnjv7Wsf5Dy0KRhocnKz83akd0p0LFJjVD2uy2W8XCIUa Gh/K7mjoJ0VD+1HHYhcG63+RQhXk88cxPv6hc4EUgGbR/N8M35iYzD755ECg/AMC 9WyQwDlU8dBcCdrkTTlXwnEnB1RYcYa/70TgYPKYTWWgxiBEvZzR5W52qux+NH5C yTgnxyRZo7G6sGoqOgxIo/ki1ouubAk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:27 2026 by rpki-client