$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace290b6-469d-3985-bdfd-99cfc0152795.roa File: ace290b6-469d-3985-bdfd-99cfc0152795.roa (raw, json) Hash identifier: jwntVuFSuSc0UDXLLBP270rFjSpYsYr1B1yASkZg9mc= Subject key identifier: 23:5D:B2:BE:B4:98:56:E4:61:94:12:24:8F:96:88:41:8A:F6:B8:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D441C7414AA3EE1548F821120 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace290b6-469d-3985-bdfd-99cfc0152795.roa Signing time: Mon 23 Mar 2026 17:33:52 +0000 ROA not before: Mon 23 Mar 2026 17:33:52 +0000 ROA not after: Sun 21 Jun 2026 17:33:52 +0000 asID: 7029 IP address blocks: 173.189.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:1c:74:14:aa:3e:e1:54:8f:82:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 23 17:33:52 2026 GMT Not After : Jun 21 17:33:52 2026 GMT Subject: CN=0e25e991-221d-41ea-869d-c858ae3af427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:db:48:a7:46:fa:e4:fb:fa:49:b6:00:01:f0: 12:fd:58:6a:37:01:de:8e:e4:36:b5:14:b4:1e:25: 84:67:82:ee:52:a8:1f:2f:e1:ac:4a:39:87:a0:02: b7:4d:e5:a8:53:75:e7:56:f8:b1:3e:38:a7:11:5e: 96:0f:17:55:e9:33:2e:19:51:fa:f3:22:6f:c8:12: 88:f0:d8:a7:f7:fb:11:3a:03:a5:42:3c:8f:7e:fe: 24:0f:a1:98:5c:e5:5e:6a:c3:fa:5e:3b:4b:78:97: d9:59:d6:f1:43:50:ce:51:af:02:1f:5c:a7:59:1d: 64:1c:a2:57:c3:90:e1:f4:68:9c:cd:68:59:e9:8a: 6f:05:f8:db:17:a9:f7:1b:a6:08:ae:26:8d:d0:ac: 58:8d:a1:f9:21:8c:6f:88:5b:cc:0d:d0:5e:e6:85: 8d:9b:d9:af:1f:58:c9:1e:f4:4d:c5:9e:f0:30:d1: 91:b3:51:4c:b4:de:4e:f7:28:9e:60:03:84:3f:06: ac:35:6e:07:f3:50:4f:6e:eb:12:28:7c:b6:96:8e: 93:14:30:b6:24:26:31:e2:2a:b6:a6:2a:dd:b1:29: f3:4c:f6:68:68:1f:18:b1:19:d0:ff:84:bc:a5:c7: 86:77:d5:18:b7:87:ab:29:2f:04:a3:c8:e2:4d:d0: 38:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5D:B2:BE:B4:98:56:E4:61:94:12:24:8F:96:88:41:8A:F6:B8:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace290b6-469d-3985-bdfd-99cfc0152795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2c:bd:a3:33:24:e1:db:3a:cb:86:4e:d7:f3:96:7e:87:75: b2:d1:ba:3f:ed:4a:19:94:95:08:f4:97:05:5c:fc:74:b0:24: 7c:91:80:c7:c6:eb:de:c3:17:8f:c1:59:de:23:36:7a:1e:1c: e2:f3:aa:9b:86:6e:20:dc:91:e1:8b:92:26:b9:49:12:36:05: 27:74:93:57:40:e5:0f:b4:0b:5c:e7:32:3d:56:97:4f:fc:94: 4d:74:68:28:ae:6d:34:51:d7:71:8b:ae:db:b4:14:43:60:a1: c1:82:23:17:9b:df:c9:54:12:8d:bd:cc:91:36:3a:98:e9:a3: c0:42:e2:1a:a1:52:58:24:cc:95:c5:c5:b2:65:cd:35:6b:c1: e8:2c:ec:87:e9:13:be:c7:a2:e7:78:be:40:84:9b:de:73:92: 0e:76:3e:13:a0:d5:34:9e:2f:88:f5:92:4a:b7:31:54:05:ec: 27:29:06:d2:c4:40:7d:5f:c3:ae:29:d1:ee:a2:8e:9d:c5:7b: 68:2a:e4:84:d4:84:15:ac:5a:ee:b5:d5:e6:f2:9f:53:10:9b: bf:2a:6a:32:c1:ae:41:2c:79:83:ab:5e:6e:28:46:3f:92:50: 3f:3c:89:bb:d6:10:b8:7d:04:13:96:60:2c:b0:f8:84:77:e6: 02:1a:9b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EHHQUqj7hVI+CESAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMzE3MzM1MloXDTI2MDYyMTE3MzM1MlowLzEtMCsGA1UEAxMk MGUyNWU5OTEtMjIxZC00MWVhLTg2OWQtYzg1OGFlM2FmNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ttIp0b65Pv6SbYAAfAS/VhqNwHejuQ2tRS0 HiWEZ4LuUqgfL+GsSjmHoAK3TeWoU3XnVvixPjinEV6WDxdV6TMuGVH68yJvyBKI 8Nin9/sROgOlQjyPfv4kD6GYXOVeasP6XjtLeJfZWdbxQ1DOUa8CH1ynWR1kHKJX w5Dh9GiczWhZ6YpvBfjbF6n3G6YIriaN0KxYjaH5IYxviFvMDdBe5oWNm9mvH1jJ HvRNxZ7wMNGRs1FMtN5O9yieYAOEPwasNW4H81BPbusSKHy2lo6TFDC2JCYx4iq2 pirdsSnzTPZoaB8YsRnQ/4S8pceGd9UYt4erKS8Eo8jiTdA4UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNdsr60mFbkYZQSJI+WiEGK9rg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNlMjkwYjYtNDY5ZC0z OTg1LWJkZmQtOTljZmMwMTUyNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb3WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUsvaMzJOHbOsuGTtfzln6HdbLRuj/tShmUlQj0lwVc/HSwJHyRgMfG 697DF4/BWd4jNnoeHOLzqpuGbiDckeGLkia5SRI2BSd0k1dA5Q+0C1znMj1Wl0/8 lE10aCiubTRR13GLrtu0FENgocGCIxeb38lUEo29zJE2Opjpo8BC4hqhUlgkzJXF xbJlzTVrwegs7IfpE77Houd4vkCEm95zkg52PhOg1TSeL4j1kkq3MVQF7CcpBtLE QH1fw64p0e6ijp3Fe2gq5ITUhBWsWu611ebyn1MQm78qajLBrkEseYOrXm4oRj+S UD88ibvWELh9BBOWYCyw+IR35gIamyk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:12:37 2026 by rpki-client