$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2ea4515-fb3a-309e-9c58-0d1fc38c0826.roa File: a2ea4515-fb3a-309e-9c58-0d1fc38c0826.roa (raw, json) Hash identifier: 6sHcNgAzXD8L2y1MYHJf7KS0RAx41NB8uO4utVVJUMI= Subject key identifier: 64:14:1E:3F:9E:3E:10:11:0E:FB:CD:D6:A1:82:A0:33:16:4F:5E:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D44FA283B0F2FCE47D1611300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2ea4515-fb3a-309e-9c58-0d1fc38c0826.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 7029 IP address blocks: 173.189.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:28:3b:0f:2f:ce:47:d1:61:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=952536f9-b6f9-4920-b0a8-4a42addc5df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:22:b0:9f:f9:82:8c:fe:13:b3:62:30:a4:77: e2:4b:8f:aa:ec:5d:43:61:8c:52:24:10:9b:df:de: 53:2c:9c:37:a2:b0:6f:ac:f6:6a:32:93:b0:1b:f0: 88:0c:77:4a:71:7f:e3:03:c9:d1:6e:4d:f8:a7:2d: 87:f2:6d:af:1b:16:40:e0:31:4a:34:b6:f5:53:ba: 9a:84:e5:33:46:20:2c:71:18:97:50:ed:de:c0:bc: 93:e0:d3:45:60:ee:a5:c9:18:22:78:60:1c:6d:1a: f5:7d:18:48:7b:d1:0f:99:3a:6e:05:42:f6:68:e7: 5d:e2:f2:da:de:de:14:a5:bd:12:1b:08:33:00:04: 53:62:60:78:28:be:e5:e1:1e:95:52:3b:2b:e4:f9: c2:e4:2d:36:0b:85:10:8f:c3:9c:b5:40:2f:86:63: b5:28:3f:7f:98:68:83:a8:5b:13:6c:7e:44:19:fd: 45:72:e8:09:ac:24:9e:d6:21:58:41:48:ad:1a:e5: 37:0b:75:39:0d:9e:4d:e4:77:d0:87:b2:57:db:4e: a7:40:90:f0:63:a5:3c:4b:76:ea:65:2a:c1:1b:74: 34:53:cc:be:f2:2f:83:de:b3:a2:6d:a7:10:26:75: 90:06:70:61:c6:54:57:db:0d:1c:8a:7e:ba:64:87: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:14:1E:3F:9E:3E:10:11:0E:FB:CD:D6:A1:82:A0:33:16:4F:5E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2ea4515-fb3a-309e-9c58-0d1fc38c0826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:54:83:a6:d3:e6:7f:37:89:b1:b4:96:3b:9d:04:ec:c8:d7: 30:57:18:7f:44:b0:44:5d:a8:c3:55:1e:90:f2:19:18:30:82: a6:78:cf:32:77:aa:96:e5:dd:72:e2:bb:4a:f6:ff:a4:3d:50: 03:1b:7c:fb:4c:55:c1:75:17:00:16:83:58:55:d8:12:a2:cd: 0b:8a:40:42:ec:79:d4:c1:65:09:44:29:86:52:e0:4f:d9:be: 5c:cc:84:27:fa:f7:12:d1:b4:60:a4:a9:84:44:51:fa:60:64: 31:89:fb:f7:dd:ca:10:96:e1:20:1a:3b:13:e0:29:5a:c3:63: d6:5a:22:23:97:98:0f:0b:6c:24:ba:4f:b3:0d:c3:e6:2c:a6: 3b:61:4e:fb:66:19:a2:2e:b3:ac:90:53:a4:6e:03:89:05:c3: f3:5d:6c:bc:7c:55:d9:4f:72:79:52:46:2c:1a:b5:80:8c:3d: 22:b4:fe:ae:0a:c9:0d:7f:f8:4d:77:9b:8d:3c:da:e7:c4:1f: 90:f9:6a:a2:49:8d:2e:33:25:da:77:2e:c3:f7:e9:dc:2d:ca: a6:63:e9:d4:18:98:96:b3:8f:a2:a9:9b:7c:a6:fe:a2:05:3e: d9:f7:b1:9a:4b:81:4d:2f:4c:5d:11:11:b2:e6:3b:f6:85:f7: f6:1a:2b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+ig7Dy/OR9FhEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTUyNTM2ZjktYjZmOS00OTIwLWIwYTgtNGE0MmFkZGM1ZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CKwn/mCjP4Ts2IwpHfiS4+q7F1DYYxSJBCb 395TLJw3orBvrPZqMpOwG/CIDHdKcX/jA8nRbk34py2H8m2vGxZA4DFKNLb1U7qa hOUzRiAscRiXUO3ewLyT4NNFYO6lyRgieGAcbRr1fRhIe9EPmTpuBUL2aOdd4vLa 3t4Upb0SGwgzAARTYmB4KL7l4R6VUjsr5PnC5C02C4UQj8OctUAvhmO1KD9/mGiD qFsTbH5EGf1FcugJrCSe1iFYQUitGuU3C3U5DZ5N5HfQh7JX206nQJDwY6U8S3bq ZSrBG3Q0U8y+8i+D3rOibacQJnWQBnBhxlRX2w0cin66ZIdoywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQUHj+ePhARDvvN1qGCoDMWT17eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJlYTQ1MTUtZmIzYS0z MDllLTljNTgtMGQxZmMzOGMwODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpUg6bT5n83ibG0ljudBOzI1zBXGH9EsERdqMNVHpDyGRgwgqZ4zzJ3 qpbl3XLiu0r2/6Q9UAMbfPtMVcF1FwAWg1hV2BKizQuKQELsedTBZQlEKYZS4E/Z vlzMhCf69xLRtGCkqYREUfpgZDGJ+/fdyhCW4SAaOxPgKVrDY9ZaIiOXmA8LbCS6 T7MNw+YspjthTvtmGaIus6yQU6RuA4kFw/NdbLx8VdlPcnlSRiwatYCMPSK0/q4K yQ1/+E13m4082ufEH5D5aqJJjS4zJdp3LsP36dwtyqZj6dQYmJazj6Kpm3ym/qIF Ptn3sZpLgU0vTF0REbLmO/aF9/YaK90= -----END CERTIFICATE-----Generated at Thu Mar 26 09:24:17 2026 by rpki-client