$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae53193a-5028-35cc-b3d0-cec8eba63c94.roa File: ae53193a-5028-35cc-b3d0-cec8eba63c94.roa (raw, json) Hash identifier: G3JL9pky34SqL9bNOOQkfiJuJrlZ2engtx9MZX3qkYM= Subject key identifier: FA:8A:CD:9E:49:F8:86:B9:A6:95:9A:DE:17:CA:67:AE:F7:01:E3:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6EA305764DC2DB7DBA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae53193a-5028-35cc-b3d0-cec8eba63c94.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 174.131.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6e:a3:05:76:4d:c2:db:7d:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=99446aa1-2e1c-4b58-a193-0655986d9606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:46:b4:c4:19:fb:8f:b0:af:55:2e:57:4e: c0:99:1b:ca:dc:e3:15:80:52:40:84:14:7a:f6:25: 75:36:07:d6:42:4d:bf:b3:14:d0:ac:9e:fc:85:43: 66:08:79:16:3c:c4:0a:a7:34:db:8f:bb:16:4b:72: 82:7a:92:48:b3:bb:c5:02:62:14:ef:24:73:c6:98: a2:ac:c6:4f:80:0a:60:9e:ca:d8:cc:26:0a:3e:34: f5:80:66:71:2e:b3:cd:6f:33:95:75:4d:3f:1c:ee: d5:90:b4:6f:cd:77:fa:03:2c:40:a1:df:45:ef:a8: 1f:b4:ee:d6:3c:58:6a:fe:04:2b:79:ce:8e:a4:e1: c5:6c:3b:d5:62:b3:68:f1:fa:74:79:3f:75:13:5a: 8e:1f:d1:89:9e:89:81:9c:2d:70:3a:5d:df:f2:6d: 84:3c:a6:4a:c1:31:7f:37:05:99:44:28:6b:18:85: c5:a5:5e:95:71:8b:75:87:98:9d:4a:19:60:4f:99: 10:27:cd:2c:77:9b:da:5a:9c:02:1a:f3:cd:fa:00: 3b:9c:ac:41:46:be:41:01:9d:91:af:a4:59:74:5a: be:f4:1e:04:10:3d:b1:4e:2e:4d:9c:5d:f1:8a:37: 0c:68:62:2b:3d:71:3b:45:35:ba:b6:c9:ef:77:8a: fa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8A:CD:9E:49:F8:86:B9:A6:95:9A:DE:17:CA:67:AE:F7:01:E3:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae53193a-5028-35cc-b3d0-cec8eba63c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:56:7f:c9:a6:21:79:90:f3:6c:69:f5:8b:5d:80:26:86:22: e4:fd:e1:a7:0d:19:94:49:c6:53:a0:20:1e:6d:6d:ae:3b:24: 21:b8:c1:16:c1:14:ca:19:56:37:6d:04:b3:b9:7f:59:e5:aa: 8d:70:72:05:12:1c:29:5b:2b:d4:ef:7e:db:3b:09:59:37:19: 20:e4:23:06:19:21:55:c8:07:64:70:af:48:e7:de:03:c7:91: ef:89:99:65:38:d9:00:55:ff:fa:a5:f8:d2:31:6c:0a:5d:3c: b6:a9:62:cf:3b:95:db:12:5a:91:99:14:d2:88:5c:b3:1a:fd: 13:37:c3:eb:44:a1:47:a7:48:e8:02:d3:c8:e4:cf:ea:61:35: 89:42:34:5a:9f:9c:86:66:39:09:8a:d7:e9:64:84:95:fd:2e: 07:6b:be:54:2e:d1:aa:84:17:11:6a:06:01:1e:cf:71:3f:63: 08:63:61:63:c5:e2:0d:e4:98:b5:56:d4:95:63:ca:b4:5e:27: 83:de:08:07:40:20:91:3b:7a:c2:f9:14:1a:dc:c8:48:7f:59: 55:90:81:48:d6:d8:ff:42:5f:1b:db:96:69:47:ea:5f:13:05: 9c:8f:55:23:78:45:11:b3:64:0e:11:43:06:df:79:bb:e0:97: b5:5d:cd:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCm6jBXZNwtt9ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTk0NDZhYTEtMmUxYy00YjU4LWExOTMtMDY1NTk4NmQ5NjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS5GtMQZ+4+wr1UuV07AmRvK3OMVgFJAhBR6 9iV1NgfWQk2/sxTQrJ78hUNmCHkWPMQKpzTbj7sWS3KCepJIs7vFAmIU7yRzxpii rMZPgApgnsrYzCYKPjT1gGZxLrPNbzOVdU0/HO7VkLRvzXf6AyxAod9F76gftO7W PFhq/gQrec6OpOHFbDvVYrNo8fp0eT91E1qOH9GJnomBnC1wOl3f8m2EPKZKwTF/ NwWZRChrGIXFpV6VcYt1h5idShlgT5kQJ80sd5vaWpwCGvPN+gA7nKxBRr5BAZ2R r6RZdFq+9B4EED2xTi5NnF3xijcMaGIrPXE7RTW6tsnvd4r63wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqKzZ5J+Ia5ppWa3hfKZ673AePrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWU1MzE5M2EtNTAyOC0z NWNjLWIzZDAtY2VjOGViYTYzYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroOkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJWf8mmIXmQ82xp9YtdgCaGIuT94acNGZRJxlOgIB5tba47JCG4wRbB FMoZVjdtBLO5f1nlqo1wcgUSHClbK9Tvfts7CVk3GSDkIwYZIVXIB2Rwr0jn3gPH ke+JmWU42QBV//ql+NIxbApdPLapYs87ldsSWpGZFNKIXLMa/RM3w+tEoUenSOgC 08jkz+phNYlCNFqfnIZmOQmK1+lkhJX9LgdrvlQu0aqEFxFqBgEez3E/YwhjYWPF 4g3kmLVW1JVjyrReJ4PeCAdAIJE7esL5FBrcyEh/WVWQgUjW2P9CXxvblmlH6l8T BZyPVSN4RRGzZA4RQwbfebvgl7VdzSs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:59 2026 by rpki-client