$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85acee2-618c-3bf9-a12c-2f390b84b48f.roa File: b85acee2-618c-3bf9-a12c-2f390b84b48f.roa (raw, json) Hash identifier: L/PzscHc7VntXA5YuiZS/mDTN/VDnZ8AfgPXlsSjbBw= Subject key identifier: 27:4C:12:25:33:A2:4D:24:46:2E:98:FF:9F:07:98:6F:93:EB:F1:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3E000C9968D8F22A95C36F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85acee2-618c-3bf9-a12c-2f390b84b48f.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 173.187.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0c:99:68:d8:f2:2a:95:c3:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=4226cc5a-6ca7-4fbd-b135-c8db5853fac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:6a:f3:fa:e8:c0:71:15:56:92:61:52:d9: df:0e:8d:2c:08:64:9a:d2:5f:57:63:c2:ad:ca:42: 51:cc:9b:30:2e:50:3d:4a:13:eb:1b:b3:6d:19:f3: a9:b1:f7:92:d7:d1:63:a3:ed:31:41:f0:06:7d:a0: e9:91:57:52:2f:78:37:2d:eb:f5:0b:fa:e7:c5:c8: b1:19:3a:40:95:4e:27:e1:97:56:e4:5c:53:20:18: 2e:f7:f6:97:5e:f9:cf:cd:8e:01:ce:2d:c4:bd:ee: 1d:43:69:3c:39:92:94:d5:a7:1e:75:ae:d1:82:4d: cf:4a:69:3b:1d:eb:be:89:f9:50:4f:0f:14:da:00: 58:5e:4e:34:c2:10:62:66:09:72:84:74:54:08:10: d6:9a:12:74:52:da:68:bd:0e:ff:71:6f:f5:66:75: cc:47:50:ff:86:91:90:47:75:aa:0b:80:b6:03:68: 1a:1b:8b:40:e1:56:5e:8b:b3:9f:e9:ec:5f:d1:e2: b8:81:42:01:d9:c6:08:92:90:82:0a:52:94:3a:c3: 3a:1f:17:c2:68:0a:db:24:c3:17:69:72:66:41:19: 2b:82:70:b4:e9:48:5c:94:43:f4:e0:23:d6:51:ac: f8:b2:eb:64:bf:ee:97:6c:4b:5a:6f:22:f1:88:93: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4C:12:25:33:A2:4D:24:46:2E:98:FF:9F:07:98:6F:93:EB:F1:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85acee2-618c-3bf9-a12c-2f390b84b48f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:7f:b9:8f:19:56:ed:4c:6e:be:98:a4:b2:71:a5:71:66:bb: 98:bb:dd:70:a8:72:a2:82:29:65:b5:de:47:36:cd:9a:56:32: 6f:76:35:63:a2:31:66:f1:ac:9d:50:41:de:eb:52:27:5a:a0: 8c:91:5c:da:4b:cd:e4:0d:12:8d:38:dd:92:49:68:b8:8f:68: ee:5d:df:52:33:c1:49:9f:4c:a6:3d:83:3c:5d:04:e7:8e:85: c8:7a:33:09:3b:cd:5a:4c:c8:51:68:2d:16:68:3b:d8:42:4a: 9c:df:19:e9:a4:73:1c:c3:18:dd:f7:4f:ea:3a:43:8d:8d:bd: 03:33:f1:90:f6:7b:9f:ee:39:82:97:5c:a2:9c:5d:26:e2:7e: 5e:c6:eb:1f:6e:3f:61:f0:c6:8d:b6:ea:04:c6:80:1a:ad:8b: 2a:03:83:a3:79:7b:86:29:28:cd:48:15:d0:b1:7b:5b:58:90: 88:7f:7d:94:35:fe:f8:f7:d7:ad:eb:b4:87:5b:2d:e9:e4:1b: 3b:1d:7f:31:6f:d4:a9:af:da:08:cb:e2:bf:62:1b:96:8b:fd: 5b:9f:e5:86:28:3e:ee:b4:63:1d:5a:6e:e2:9a:b2:e2:14:a0: ed:ee:2c:cf:fa:bf:f9:8a:df:36:3e:7f:70:08:ca:5f:d6:28: 0d:d6:9e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAyZaNjyKpXDbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDIyNmNjNWEtNmNhNy00ZmJkLWIxMzUtYzhkYjU4NTNmYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhBq8/rowHEVVpJhUtnfDo0sCGSa0l9XY8Kt ykJRzJswLlA9ShPrG7NtGfOpsfeS19Fjo+0xQfAGfaDpkVdSL3g3Lev1C/rnxcix GTpAlU4n4ZdW5FxTIBgu9/aXXvnPzY4Bzi3Eve4dQ2k8OZKU1aceda7Rgk3PSmk7 Heu+iflQTw8U2gBYXk40whBiZglyhHRUCBDWmhJ0UtpovQ7/cW/1ZnXMR1D/hpGQ R3WqC4C2A2gaG4tA4VZei7Of6exf0eK4gUIB2cYIkpCCClKUOsM6HxfCaArbJMMX aXJmQRkrgnC06UhclEP04CPWUaz4sutkv+6XbEtabyLxiJNZkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdMEiUzok0kRi6Y/58HmG+T6/FBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg1YWNlZTItNjE4Yy0z YmY5LWExMmMtMmYzOTBiODRiNDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ/uY8ZVu1Mbr6YpLJxpXFmu5i73XCocqKCKWW13kc2zZpWMm92NWOi MWbxrJ1QQd7rUidaoIyRXNpLzeQNEo043ZJJaLiPaO5d31IzwUmfTKY9gzxdBOeO hch6Mwk7zVpMyFFoLRZoO9hCSpzfGemkcxzDGN33T+o6Q42NvQMz8ZD2e5/uOYKX XKKcXSbifl7G6x9uP2Hwxo226gTGgBqtiyoDg6N5e4YpKM1IFdCxe1tYkIh/fZQ1 /vj3163rtIdbLenkGzsdfzFv1Kmv2gjL4r9iG5aL/Vuf5YYoPu60Yx1abuKasuIU oO3uLM/6v/mK3zY+f3AIyl/WKA3Wnpw= -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:54 2026 by rpki-client