$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa File: 9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa (raw, json) Hash identifier: 6nloPsvJCyR6s46kCGRsCY/bOsbbbPL/72zyGuWNYTo= Subject key identifier: AD:E2:07:21:D6:87:C6:95:64:FE:87:49:55:76:E6:97:C3:CD:C9:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D40CA38A9AA2D3EB9EC086E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.185.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:38:a9:aa:2d:3e:b9:ec:08:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=2e0b69cb-2539-41f8-8775-f46385b4359f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8b:d5:f5:cf:f3:43:41:af:0d:31:1a:0a:07: 98:13:f8:d3:b8:24:46:8b:41:04:32:29:cf:16:73: 22:8c:e0:db:5c:65:c0:2b:8a:49:3d:ba:fb:45:ab: 21:2c:91:2f:94:32:12:84:33:22:9b:f0:96:97:24: ed:bf:25:f4:10:63:19:6c:3b:ee:97:c1:93:0e:3e: a9:9b:4c:9c:a5:94:92:aa:62:37:76:e1:31:14:9d: d6:f0:63:d1:af:87:07:80:c6:32:12:30:70:c5:e2: f2:cb:ab:b7:e3:ee:77:0e:46:c4:41:89:53:ca:ea: b1:f9:a5:d0:e8:58:07:50:3e:b8:3e:bd:d1:d9:6e: 07:11:8a:1a:10:b1:d9:6a:99:18:c8:a9:92:94:ab: 8e:02:5c:76:b1:79:66:c1:d7:97:0d:5b:30:1d:17: 99:de:93:fe:3b:9c:16:8e:c2:ab:ce:20:e6:47:fd: 88:74:df:cc:53:8f:b5:a5:db:ed:a3:ad:9d:3c:6c: e9:e3:eb:3f:e0:3f:bd:17:e6:7c:30:6a:a2:95:11: 53:ed:97:0c:77:57:75:f6:12:df:8f:c6:4a:4a:8a: cf:4f:2f:f3:f8:62:5a:30:04:71:a6:89:fd:1a:27: 77:f0:66:d2:06:e9:08:81:10:8a:8f:df:67:75:52: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E2:07:21:D6:87:C6:95:64:FE:87:49:55:76:E6:97:C3:CD:C9:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:2e:e1:30:77:d9:24:bf:7b:3f:8f:56:e5:52:ef:72:38:2d: 9e:77:81:72:70:b8:ec:a3:48:1d:fa:98:99:21:8c:3a:01:64: a0:29:da:21:15:51:88:5a:c6:46:8f:91:b3:dd:d1:a6:49:14: e3:d6:1e:e0:2e:8e:80:c1:ba:ff:72:84:79:66:07:57:7c:e4: 7e:20:2e:b3:ae:7f:bc:f7:75:86:59:07:0d:cd:e4:21:26:d1: e4:99:ac:be:f8:46:bd:97:04:44:a2:50:66:86:03:78:d9:62: af:1b:e0:c3:29:a1:0d:7f:dd:e5:61:c9:e9:ed:97:a0:75:55: ba:4a:fc:d0:ef:4c:39:a8:f2:85:74:d1:37:d4:03:81:26:f1: 22:da:99:f7:10:4b:7b:97:a7:c9:36:5a:15:95:4a:52:10:73: 11:96:04:3c:4a:2a:0a:2f:e8:0d:7b:c4:b7:9a:6a:ad:de:9e: 9b:77:7d:78:80:8d:77:f1:36:83:03:60:81:4c:7e:3f:3e:5a: a1:29:31:d2:b8:66:4d:c3:65:34:5f:cf:9b:32:65:ac:c6:42: 64:6f:02:4f:e8:0e:d1:25:13:79:60:b6:f5:39:00:eb:85:a6: 27:b7:00:27:7c:a1:76:25:94:5e:3b:6c:7a:25:0a:d6:1f:b9: dd:13:b0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayjipqi0+uewIboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MmUwYjY5Y2ItMjUzOS00MWY4LTg3NzUtZjQ2Mzg1YjQzNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4vV9c/zQ0GvDTEaCgeYE/jTuCRGi0EEMinP FnMijODbXGXAK4pJPbr7RashLJEvlDIShDMim/CWlyTtvyX0EGMZbDvul8GTDj6p m0ycpZSSqmI3duExFJ3W8GPRr4cHgMYyEjBwxeLyy6u34+53DkbEQYlTyuqx+aXQ 6FgHUD64Pr3R2W4HEYoaELHZapkYyKmSlKuOAlx2sXlmwdeXDVswHReZ3pP+O5wW jsKrziDmR/2IdN/MU4+1pdvto62dPGzp4+s/4D+9F+Z8MGqilRFT7ZcMd1d19hLf j8ZKSorPTy/z+GJaMARxpon9Gid38GbSBukIgRCKj99ndVIvuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3iByHWh8aVZP6HSVV25pfDzclBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNjMGMxZGQtY2IwOS0z NzA5LWJiODgtMDkwZWM2ZTkzOWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcu4TB32SS/ez+PVuVS73I4LZ53gXJwuOyjSB36mJkhjDoBZKAp2iEV UYhaxkaPkbPd0aZJFOPWHuAujoDBuv9yhHlmB1d85H4gLrOuf7z3dYZZBw3N5CEm 0eSZrL74Rr2XBESiUGaGA3jZYq8b4MMpoQ1/3eVhyentl6B1VbpK/NDvTDmo8oV0 0TfUA4Em8SLamfcQS3uXp8k2WhWVSlIQcxGWBDxKKgov6A17xLeaaq3enpt3fXiA jXfxNoMDYIFMfj8+WqEpMdK4Zk3DZTRfz5syZazGQmRvAk/oDtElE3lgtvU5AOuF pie3ACd8oXYllF47bHolCtYfud0TsAo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:38:00 2026 by rpki-client