$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba71499f-61cb-3cab-88f2-136507fa9afd.roa File: ba71499f-61cb-3cab-88f2-136507fa9afd.roa (raw, json) Hash identifier: Mpd4wSPxXYvFgc43jdYAloRa5tGXhW3qi/YhT39FX4Y= Subject key identifier: C7:6E:28:C9:62:EA:18:71:7D:E9:10:EE:FC:CF:AB:A7:50:9B:41:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D48A7A685A0D4E542A249DB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba71499f-61cb-3cab-88f2-136507fa9afd.roa Signing time: Wed 25 Mar 2026 08:37:34 +0000 ROA not before: Wed 25 Mar 2026 08:37:34 +0000 ROA not after: Tue 23 Jun 2026 08:37:34 +0000 asID: 7029 IP address blocks: 173.190.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:a7:a6:85:a0:d4:e5:42:a2:49:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 08:37:34 2026 GMT Not After : Jun 23 08:37:34 2026 GMT Subject: CN=76b9fea7-c9b1-43b4-94b8-f4ba0aa86eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:27:9a:ef:52:58:56:a5:9b:de:aa:31:a5: f8:af:f9:22:88:e0:fd:6e:d7:2d:31:66:4e:0a:75: a7:45:7d:ff:dc:0d:7d:7e:ca:d2:15:f8:ac:09:d8: 74:c4:0b:44:63:5d:cd:10:96:e4:f0:91:2b:9a:07: 4f:68:4d:ef:c4:67:2e:76:e0:b1:c4:88:d4:2a:db: 06:59:dc:71:0f:67:69:e0:e4:00:e9:79:de:a2:42: 6a:7f:33:78:9c:6e:f5:75:73:3e:74:dd:16:a4:93: 0f:f7:7a:96:b3:5a:ae:a6:a9:44:fe:6a:f2:64:71: 0b:4c:77:91:c5:47:9a:2d:fc:b9:eb:1a:eb:e0:e2: 9d:b3:37:96:8b:ae:56:b5:b8:e6:55:11:b7:1a:65: 96:21:fc:44:99:99:15:63:cd:73:e3:42:14:eb:a1: 09:b4:34:47:8e:1b:80:f2:87:09:88:3f:cd:33:8d: 38:4f:c2:78:9d:47:f3:b7:77:9c:62:5a:16:14:fe: dc:95:d4:d5:e7:91:8a:07:99:ce:83:c7:1e:07:90: 98:25:62:1b:bd:a4:a1:38:62:7e:0f:bd:d3:30:1b: b4:84:db:5c:4f:dc:74:76:7c:18:d4:48:f3:ab:17: 0c:41:1e:7f:50:62:cc:76:e1:31:a7:55:31:70:71: 69:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6E:28:C9:62:EA:18:71:7D:E9:10:EE:FC:CF:AB:A7:50:9B:41:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba71499f-61cb-3cab-88f2-136507fa9afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c5:04:91:ea:e0:86:dd:8a:b9:66:fc:36:8a:b4:7a:9c:85: a4:25:cf:ae:2b:a3:cb:5f:3a:32:6b:53:fd:05:f1:2b:d6:b0: 2a:6a:18:38:1e:10:37:91:90:de:dc:4f:37:1b:db:f3:68:8b: ca:ef:5c:3f:c3:f2:a0:0e:9a:84:01:6c:11:e5:c0:5a:8a:1b: 3a:15:68:f4:b7:4c:85:c8:fb:d4:85:86:65:4c:67:6d:5a:e6: 0a:17:60:eb:82:d4:1d:8d:12:73:60:ea:94:91:c8:a9:e1:2b: 8d:57:1d:96:1c:9b:01:2b:76:a0:74:26:0b:60:2e:33:21:f8: e5:1a:b2:07:06:54:1e:69:62:61:37:37:d9:45:a6:2a:6d:5a: 3c:59:3e:4c:ce:fc:30:99:4f:dc:4c:e0:c6:71:b2:a9:eb:57: c0:92:e4:7b:58:76:75:85:85:7a:d9:c7:04:3a:0e:20:02:e5: 63:1a:a1:07:03:f6:ec:4a:a5:2d:61:1e:63:d2:ae:ea:8b:6a: cc:41:b5:83:a4:a4:44:b8:69:e4:5e:2e:c9:c1:14:aa:29:c3: 24:c9:2f:e9:75:12:6a:a8:4b:23:e5:09:2e:9b:e1:c3:cf:5c: bc:e0:6d:f8:e9:0a:77:6f:9e:3a:0f:09:15:5d:ea:11:7a:fc: 83:b4:89:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ip6aFoNTlQqJJ24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTA4MzczNFoXDTI2MDYyMzA4MzczNFowLzEtMCsGA1UEAxMk NzZiOWZlYTctYzliMS00M2I0LTk0YjgtZjRiYTBhYTg2ZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Unmu9SWFalm96qMaX4r/kiiOD9btctMWZO CnWnRX3/3A19fsrSFfisCdh0xAtEY13NEJbk8JErmgdPaE3vxGcuduCxxIjUKtsG WdxxD2dp4OQA6XneokJqfzN4nG71dXM+dN0WpJMP93qWs1qupqlE/mryZHELTHeR xUeaLfy56xrr4OKdszeWi65WtbjmVRG3GmWWIfxEmZkVY81z40IU66EJtDRHjhuA 8ocJiD/NM404T8J4nUfzt3ecYloWFP7cldTV55GKB5nOg8ceB5CYJWIbvaShOGJ+ D73TMBu0hNtcT9x0dnwY1EjzqxcMQR5/UGLMduExp1UxcHFpgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMduKMli6hhxfekQ7vzPq6dQm0ExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE3MTQ5OWYtNjFjYi0z Y2FiLTg4ZjItMTM2NTA3ZmE5YWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLFBJHq4Ibdirlm/DaKtHqchaQlz64ro8tfOjJrU/0F8SvWsCpqGDge EDeRkN7cTzcb2/Noi8rvXD/D8qAOmoQBbBHlwFqKGzoVaPS3TIXI+9SFhmVMZ21a 5goXYOuC1B2NEnNg6pSRyKnhK41XHZYcmwErdqB0JgtgLjMh+OUasgcGVB5pYmE3 N9lFpiptWjxZPkzO/DCZT9xM4MZxsqnrV8CS5HtYdnWFhXrZxwQ6DiAC5WMaoQcD 9uxKpS1hHmPSruqLasxBtYOkpES4aeReLsnBFKopwyTJL+l1EmqoSyPlCS6b4cPP XLzgbfjpCndvnjoPCRVd6hF6/IO0iQc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:45:39 2026 by rpki-client