$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a065ddd0-cdc2-360e-a988-03ed946a51b3.roa File: a065ddd0-cdc2-360e-a988-03ed946a51b3.roa (raw, json) Hash identifier: eFh0HQKOnOvjkU/NcLT4QNu0tp52dhQVjc3s5zs4rjY= Subject key identifier: 2C:7A:D4:6C:6A:1E:1E:A5:DC:65:DD:50:4F:D0:C6:0D:6A:F4:85:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F88649C681B2EEA192790 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a065ddd0-cdc2-360e-a988-03ed946a51b3.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.190.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:88:64:9c:68:1b:2e:ea:19:27:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=a7319e48-98a8-4bb5-b8de-b4eb00e0b0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:1e:15:50:0a:9a:be:e2:16:9b:54:53:e6: 80:7d:c1:87:61:11:76:39:1c:44:44:c2:fb:1a:d4: a2:d7:f3:60:b5:ce:d3:5c:45:28:d9:df:6a:43:72: 3b:e3:c7:ee:61:14:db:8a:67:48:5e:26:15:8f:39: c5:82:e9:e2:d3:4d:d6:91:e5:29:0a:07:cd:b7:6a: c8:04:25:5f:67:25:37:c0:1d:46:10:a7:fc:92:a9: e0:33:ba:6e:ab:e0:bd:49:30:b2:81:61:80:b5:85: 19:f3:ff:db:58:cd:bf:16:8f:07:80:48:96:bc:5e: e4:40:2f:eb:09:26:58:ba:8d:f9:b6:ba:5a:35:60: 79:0d:dd:e4:c4:69:8d:31:0a:67:86:53:f3:a6:5c: d9:7a:3a:b5:f0:97:2f:de:a0:74:ce:ca:3a:8a:6f: 8b:63:43:90:51:2d:12:15:5b:61:d0:0d:64:3b:3d: 9e:87:db:63:7a:a6:e1:62:4b:13:82:e6:e9:15:a1: bf:d3:35:e4:f6:c5:85:ac:34:d2:7c:ac:d4:48:51: 7b:10:2b:a8:9b:b2:9f:06:e1:6a:bb:e2:31:c1:e9: 99:3d:55:74:33:ff:16:c4:ec:11:50:65:a0:81:99: 2a:22:42:e3:7d:d4:40:6a:e0:77:c7:12:3b:b2:4d: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7A:D4:6C:6A:1E:1E:A5:DC:65:DD:50:4F:D0:C6:0D:6A:F4:85:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a065ddd0-cdc2-360e-a988-03ed946a51b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ae:8d:b2:01:ff:6b:a2:e4:79:ba:15:4c:e5:c5:da:63:8a: fe:c3:42:6f:a9:01:b9:99:a1:ae:fe:0d:07:34:53:09:26:c5: 69:14:10:6d:34:8f:ae:29:38:43:cb:e9:2b:ed:2a:cf:61:96: 18:19:65:e1:c1:51:b0:57:61:2d:e5:b4:53:0f:9a:1d:21:20: b1:53:06:26:76:3d:4b:23:8d:07:34:b1:52:90:c0:bd:8d:f0: e2:71:85:30:ec:ce:5c:6d:ad:85:21:cb:31:a0:4b:7c:ad:3f: 57:c5:cc:d8:11:b1:71:8c:24:8f:b5:b0:3d:99:b2:06:f1:b7: 6a:eb:b3:bc:b0:9f:e4:04:95:5e:2c:61:7e:9f:5c:3e:ac:a2: 92:bf:14:7d:a7:f1:e7:4b:e6:4e:2c:2c:ba:d4:01:d3:03:e9: 8d:1c:df:55:e8:49:0c:1c:eb:ff:aa:d3:e7:ea:c7:3d:d9:0b: ab:f4:54:e7:20:81:ed:06:f8:80:2f:7a:ba:45:93:36:13:17: 90:4d:44:41:3c:fa:40:55:ac:02:dd:ef:d9:38:52:ed:60:83: d8:50:ed:06:e2:61:5a:62:29:40:9a:6d:a8:ad:ef:03:65:88: 0d:91:58:74:24:b8:2d:9b:f2:cf:fd:bf:cc:63:f9:6e:a8:a5: cb:79:61:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4hknGgbLuoZJ5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YTczMTllNDgtOThhOC00YmI1LWI4ZGUtYjRlYjAwZTBiMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2UeFVAKmr7iFptUU+aAfcGHYRF2ORxERML7 GtSi1/Ngtc7TXEUo2d9qQ3I748fuYRTbimdIXiYVjznFguni003WkeUpCgfNt2rI BCVfZyU3wB1GEKf8kqngM7puq+C9STCygWGAtYUZ8//bWM2/Fo8HgEiWvF7kQC/r CSZYuo35trpaNWB5Dd3kxGmNMQpnhlPzplzZejq18Jcv3qB0zso6im+LY0OQUS0S FVth0A1kOz2eh9tjeqbhYksTgubpFaG/0zXk9sWFrDTSfKzUSFF7ECuom7KfBuFq u+IxwemZPVV0M/8WxOwRUGWggZkqIkLjfdRAauB3xxI7sk03UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCx61GxqHh6l3GXdUE/Qxg1q9IXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA2NWRkZDAtY2RjMi0z NjBlLWE5ODgtMDNlZDk0NmE1MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuujbIB/2ui5Hm6FUzlxdpjiv7DQm+pAbmZoa7+DQc0UwkmxWkUEG00 j64pOEPL6SvtKs9hlhgZZeHBUbBXYS3ltFMPmh0hILFTBiZ2PUsjjQc0sVKQwL2N 8OJxhTDszlxtrYUhyzGgS3ytP1fFzNgRsXGMJI+1sD2Zsgbxt2rrs7ywn+QElV4s YX6fXD6sopK/FH2n8edL5k4sLLrUAdMD6Y0c31XoSQwc6/+q0+fqxz3ZC6v0VOcg ge0G+IAverpFkzYTF5BNREE8+kBVrALd79k4Uu1gg9hQ7QbiYVpiKUCabait7wNl iA2RWHQkuC2b8s/9v8xj+W6opct5YQo= -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:11 2026 by rpki-client