$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4bed1fe-746b-3c7d-ba13-4583b49a90d2.roa File: a4bed1fe-746b-3c7d-ba13-4583b49a90d2.roa (raw, json) Hash identifier: X/RG36CBi20aS8CraRfNCT2XaOCZPclhVVgfMmLd8Lk= Subject key identifier: A1:FD:F3:A7:37:BD:66:D5:76:90:3F:1A:E3:63:2B:56:BC:47:C5:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F904E7B6C35619B403F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4bed1fe-746b-3c7d-ba13-4583b49a90d2.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.189.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:90:4e:7b:6c:35:61:9b:40:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=b656b6ef-adf7-4382-8fd9-81c9f5f405f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:76:46:31:59:d6:fe:51:34:2f:c3:5c:af: ea:79:94:cc:b9:f2:33:9b:82:28:b7:53:a1:e9:76: 78:85:86:d6:25:80:87:17:aa:4d:12:92:50:9d:7a: 82:51:3e:4e:94:44:0d:d5:27:52:00:f5:55:39:75: 94:a2:d3:a9:5b:ee:c1:05:cd:f8:a0:e4:35:3c:ae: 97:37:e4:42:ca:4c:9f:63:fa:2c:97:be:4a:17:b1: 01:d7:e1:47:6e:c9:63:83:41:d9:8b:65:5a:b9:09: 9c:17:1f:36:5c:a7:fe:5f:1f:fc:90:25:6a:a8:24: b2:29:6e:74:d9:64:5a:70:97:d5:9c:74:f6:ce:21: 83:b5:67:dd:37:a7:98:2c:16:8b:b3:3d:86:d0:2f: ed:eb:94:01:95:37:bb:ad:8f:97:fb:69:78:30:86: c0:58:a1:e8:42:f1:c5:8c:f5:9e:ef:63:ba:f1:ee: bd:46:b0:ae:8c:c0:55:60:55:c1:11:27:a8:15:13: 3e:02:a3:b2:b4:10:8e:d9:07:06:8d:a3:7d:81:f4: 4b:81:86:f0:c0:36:ed:8a:35:78:b1:a6:2d:a1:07: 48:5e:15:0c:03:08:86:d5:75:7e:b8:38:7e:1b:bd: c7:a0:ad:fc:89:cc:bb:35:f0:dd:a9:ea:16:15:d3: c4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FD:F3:A7:37:BD:66:D5:76:90:3F:1A:E3:63:2B:56:BC:47:C5:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4bed1fe-746b-3c7d-ba13-4583b49a90d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e6:ab:ca:e5:43:23:66:df:d3:4c:28:fa:fb:a5:4d:4b:30: ee:91:23:88:87:4c:bd:05:f8:b7:e2:2b:e8:9d:fd:eb:07:9d: c1:f5:cf:90:48:97:b2:d1:4e:e9:d5:a3:1e:f4:e9:1a:2e:88: 56:21:ef:be:8b:40:6f:a5:89:a7:33:1b:8b:6b:80:e2:25:57: ab:ca:c4:57:f7:03:be:e9:1a:60:a2:a7:0a:2c:b1:60:90:b2: f8:a3:ac:b0:1f:62:88:8f:96:b4:88:de:bd:32:c2:29:d1:86: e5:04:e6:04:67:d3:63:8a:cb:38:7d:a7:23:db:3e:20:6b:e0: 94:46:48:5f:5f:b2:4b:02:15:4a:cf:0d:cd:9e:4b:da:06:24: 20:23:51:f6:bf:df:37:74:22:a1:79:08:51:3a:57:28:d3:90: f0:26:cc:69:fb:91:cc:76:e7:3c:08:5f:0f:22:84:3f:4a:49: 58:48:a2:7e:ce:b6:aa:0a:76:58:9e:2e:8a:08:12:3a:07:21: 32:15:b1:c1:0f:72:f6:d0:42:18:83:c7:83:99:30:4f:dd:4b: cf:e9:59:9b:10:5b:0d:50:c5:a4:0e:bb:fe:f4:cf:d3:13:22: 48:83:5a:17:8a:ff:9f:cb:f5:c9:c4:cc:34:48:6a:15:12:b5: 94:e1:54:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5BOe2w1YZtAP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YjY1NmI2ZWYtYWRmNy00MzgyLThmZDktODFjOWY1ZjQwNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqax2RjFZ1v5RNC/DXK/qeZTMufIzm4Iot1Oh 6XZ4hYbWJYCHF6pNEpJQnXqCUT5OlEQN1SdSAPVVOXWUotOpW+7BBc34oOQ1PK6X N+RCykyfY/osl75KF7EB1+FHbsljg0HZi2VauQmcFx82XKf+Xx/8kCVqqCSyKW50 2WRacJfVnHT2ziGDtWfdN6eYLBaLsz2G0C/t65QBlTe7rY+X+2l4MIbAWKHoQvHF jPWe72O68e69RrCujMBVYFXBESeoFRM+AqOytBCO2QcGjaN9gfRLgYbwwDbtijV4 saYtoQdIXhUMAwiG1XV+uDh+G73HoK38icy7NfDdqeoWFdPEKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH986c3vWbVdpA/GuNjK1a8R8W/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRiZWQxZmUtNzQ2Yi0z YzdkLWJhMTMtNDU4M2I0OWE5MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHmq8rlQyNm39NMKPr7pU1LMO6RI4iHTL0F+LfiK+id/esHncH1z5BI l7LRTunVox706RouiFYh776LQG+liaczG4trgOIlV6vKxFf3A77pGmCipwossWCQ svijrLAfYoiPlrSI3r0ywinRhuUE5gRn02OKyzh9pyPbPiBr4JRGSF9fsksCFUrP Dc2eS9oGJCAjUfa/3zd0IqF5CFE6VyjTkPAmzGn7kcx25zwIXw8ihD9KSVhIon7O tqoKdlieLooIEjoHITIVscEPcvbQQhiDx4OZME/dS8/pWZsQWw1QxaQOu/70z9MT IkiDWheK/5/L9cnEzDRIahUStZThVH0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:40 2026 by rpki-client