$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa File: aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa (raw, json) Hash identifier: o2Cj2lENXh6CC0PTxl+f5tkFlc6/pncxSW2LYvSzG4s= Subject key identifier: 8E:E4:7F:93:A0:20:DA:86:67:91:8D:6B:EB:E6:2E:74:4C:21:B6:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F862944850E5E7F99F000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.190.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:86:29:44:85:0e:5e:7f:99:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=515a153a-d1ee-4e5b-a573-e60e18a560f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:48:e0:c2:cc:63:17:7b:90:16:5e:72:cd: 67:56:c9:11:7a:35:aa:2a:82:30:ad:70:ce:1e:84: cb:80:a6:a5:b9:7a:75:92:e1:3d:44:c6:62:78:8a: ab:2d:0a:12:2d:a5:2e:06:ba:98:a4:4a:00:9f:0f: 95:b3:0a:5c:0f:17:ff:ef:ed:a9:1a:fc:84:38:6a: be:35:9f:d6:6a:4b:44:8d:3e:ca:d5:5c:3e:66:62: eb:2e:e1:55:f4:52:aa:b3:9f:1b:d5:83:22:4b:5b: 6a:b0:08:7d:c3:3e:cf:eb:dd:88:65:af:a5:0e:21: 0d:bd:4e:83:76:f7:3a:ff:cb:3f:2c:82:ec:a3:ad: 87:77:3a:9e:db:94:1f:88:6e:c4:fd:6a:bd:18:76: dc:cd:7b:16:60:0a:7f:9d:fa:7d:de:51:01:76:78: 57:5b:a9:db:de:6b:a4:5d:c9:92:fc:c6:11:b2:29: 08:69:89:f0:9f:b2:46:ca:e0:3e:21:93:30:24:ec: 0d:bc:59:c4:ae:6e:79:e0:22:9f:67:4f:07:45:93: ea:60:be:12:82:6f:b5:60:71:65:26:77:57:ca:3c: ef:d1:1b:5b:00:2b:37:2f:4e:5b:a9:3a:66:eb:e7: 12:31:42:1e:d1:30:1d:e3:cb:59:e8:1b:65:d5:9e: ab:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E4:7F:93:A0:20:DA:86:67:91:8D:6B:EB:E6:2E:74:4C:21:B6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f2:ea:e4:ea:0a:66:dd:a1:ff:63:6a:f5:7c:0c:9b:c5:a9: ea:61:ba:24:50:52:77:b0:85:9c:11:cf:c5:8b:1f:ed:ab:2d: 3a:32:62:d4:e3:3a:5e:23:75:47:a1:a2:69:b4:52:c0:c6:59: 42:9a:59:a3:ae:7f:03:9a:b4:6b:fa:4a:f7:80:2f:79:31:dd: 99:b7:85:a9:85:a2:c9:41:0e:88:84:e5:6c:46:68:9b:c8:8f: ee:14:78:49:78:67:2a:69:ed:e6:73:c6:88:02:58:ae:af:28: d2:80:b5:37:d3:61:c5:a4:95:70:a0:16:c5:6b:07:21:c4:e9: 38:fe:4e:54:54:88:8c:dd:49:04:32:da:17:ce:a3:d7:1a:3f: 73:f9:7f:57:67:e7:48:4b:93:53:e3:b6:f5:98:db:8f:3c:03: e1:8b:2d:fe:f1:83:47:31:c4:86:a7:7b:62:85:e7:1d:2b:62: 88:03:b0:af:0e:b7:61:a1:44:f5:b9:3a:ba:9a:ed:71:49:cb: 9d:d8:fd:28:d0:46:df:f5:51:8c:fb:ce:e9:aa:93:55:d5:af: 15:7c:4e:f1:60:67:2d:80:a1:10:ea:32:58:fb:81:98:cb:26: 92:c5:9e:61:4f:15:69:6d:77:bb:50:18:f7:2b:e6:66:27:2f: 86:3d:4b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4YpRIUOXn+Z8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NTE1YTE1M2EtZDFlZS00ZTViLWE1NzMtZTYwZTE4YTU2MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKNI4MLMYxd7kBZecs1nVskRejWqKoIwrXDO HoTLgKaluXp1kuE9RMZieIqrLQoSLaUuBrqYpEoAnw+VswpcDxf/7+2pGvyEOGq+ NZ/WaktEjT7K1Vw+ZmLrLuFV9FKqs58b1YMiS1tqsAh9wz7P692IZa+lDiENvU6D dvc6/8s/LILso62Hdzqe25QfiG7E/Wq9GHbczXsWYAp/nfp93lEBdnhXW6nb3muk XcmS/MYRsikIaYnwn7JGyuA+IZMwJOwNvFnErm554CKfZ08HRZPqYL4Sgm+1YHFl JndXyjzv0RtbACs3L05bqTpm6+cSMUIe0TAd48tZ6Btl1Z6ryQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7kf5OgINqGZ5GNa+vmLnRMIbZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVkZmMzNmYtZjlhYi0z OGJjLThmMWEtMTA4ODMyMzdkZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzy6uTqCmbdof9javV8DJvFqephuiRQUnewhZwRz8WLH+2rLToyYtTj Ol4jdUehomm0UsDGWUKaWaOufwOatGv6SveAL3kx3Zm3hamFoslBDoiE5WxGaJvI j+4UeEl4Zypp7eZzxogCWK6vKNKAtTfTYcWklXCgFsVrByHE6Tj+TlRUiIzdSQQy 2hfOo9caP3P5f1dn50hLk1PjtvWY2488A+GLLf7xg0cxxIane2KF5x0rYogDsK8O t2GhRPW5Orqa7XFJy53Y/SjQRt/1UYz7zumqk1XVrxV8TvFgZy2AoRDqMlj7gZjL JpLFnmFPFWltd7tQGPcr5mYnL4Y9SwU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:35 2026 by rpki-client