$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/befc6b50-9ca9-3112-a53b-fa2783f11471.roa File: befc6b50-9ca9-3112-a53b-fa2783f11471.roa (raw, json) Hash identifier: ng9lR52/nskmqq51DEOQ8R6VSj5VNUt/6KSFgxMtxEY= Subject key identifier: 67:9B:0C:E0:5B:0E:7A:0F:17:6F:A0:B0:03:9F:6F:59:CA:1C:CC:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D49924588FEFE20DDDFC04C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/befc6b50-9ca9-3112-a53b-fa2783f11471.roa Signing time: Wed 25 Mar 2026 16:30:18 +0000 ROA not before: Wed 25 Mar 2026 16:30:18 +0000 ROA not after: Tue 23 Jun 2026 16:30:18 +0000 asID: 7029 IP address blocks: 173.190.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:92:45:88:fe:fe:20:dd:df:c0:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 16:30:18 2026 GMT Not After : Jun 23 16:30:18 2026 GMT Subject: CN=e146c500-b5be-463a-a612-0cc91dc27660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:13:d9:2a:48:fe:78:42:c1:e8:48:61:43: b2:7e:3c:67:f0:78:d5:97:76:64:5a:6b:1f:cd:a4: 9a:56:83:f2:a0:85:2d:49:91:cb:61:44:7b:da:45: 2a:5f:3e:79:e8:2c:1e:44:2c:4c:88:09:69:a9:77: 8d:ce:82:94:0b:28:89:3c:1c:dc:6c:09:d7:90:1c: 03:c4:81:ac:5c:65:3f:45:b1:73:8c:24:cc:6e:13: 5b:2a:84:4b:ae:e3:f1:b9:ef:3e:15:13:8a:ef:68: 3e:b3:af:1c:20:9d:33:da:3c:8f:f5:f1:35:73:e7: b4:64:75:1e:0f:a3:fe:6c:f7:a9:8f:f2:36:2a:d2: ff:00:1b:56:16:ba:8b:4b:ae:e4:49:ee:ee:a2:29: c3:9c:63:f9:ec:c9:f0:70:cb:45:f3:70:9c:38:48: 73:80:ce:1a:21:4e:7d:24:b8:f3:fb:d2:43:56:5b: b6:31:ff:90:33:5f:fb:c3:ea:dc:75:c7:45:75:e6: c6:2f:31:cb:78:18:ff:67:1a:0f:b4:d4:92:c6:63: 82:93:fd:88:f7:9a:a4:bd:f0:20:9b:65:41:17:61: a3:ff:e0:52:e7:f2:20:49:67:ee:40:4c:88:4e:74: 08:94:b4:4f:2b:f0:92:bf:45:3d:63:44:e4:38:55: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9B:0C:E0:5B:0E:7A:0F:17:6F:A0:B0:03:9F:6F:59:CA:1C:CC:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/befc6b50-9ca9-3112-a53b-fa2783f11471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:91:3f:4d:88:6e:20:25:cd:6e:3f:dc:06:41:60:38:40:35: 04:d4:b3:27:55:1c:79:56:94:49:c5:0f:20:fd:2a:67:90:e1: 33:4c:39:74:48:2b:74:bf:e0:33:81:29:03:b4:23:bd:42:61: 44:30:79:4a:f2:d5:c9:52:b8:26:23:d5:1e:45:76:b4:69:11: 25:64:d9:26:51:68:96:16:c6:be:71:2e:db:f1:d2:cc:cd:11: e6:4d:41:7f:54:4b:b1:90:ef:d9:5f:6a:1e:e9:56:0a:04:0a: 6c:3f:6f:ea:74:1e:ae:0c:03:41:64:15:14:cb:4c:14:00:d1: 8c:1e:d9:37:23:41:9f:6f:51:d2:ef:4f:88:71:89:90:9f:cf: 13:c7:59:16:0e:ea:a0:0a:2c:b8:23:69:40:d7:17:57:7c:e8: dc:88:7b:09:40:5e:0b:a5:68:71:76:76:08:47:43:56:6f:1d: d7:84:8a:a2:e5:da:f7:14:52:62:f2:48:1b:55:e5:e0:1f:c7: bd:2a:73:ad:ae:8a:52:5d:3b:dd:8f:aa:17:90:90:d6:d4:fc: 00:c2:22:78:d7:74:c2:e9:15:18:f9:e7:2f:d3:71:57:54:29: a7:df:c3:99:ad:c1:d6:57:53:8e:48:36:85:f8:24:2e:28:99: 99:06:79:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JkkWI/v4g3d/ATAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTE2MzAxOFoXDTI2MDYyMzE2MzAxOFowLzEtMCsGA1UEAxMk ZTE0NmM1MDAtYjViZS00NjNhLWE2MTItMGNjOTFkYzI3NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzUT2SpI/nhCwehIYUOyfjxn8HjVl3ZkWmsf zaSaVoPyoIUtSZHLYUR72kUqXz556CweRCxMiAlpqXeNzoKUCyiJPBzcbAnXkBwD xIGsXGU/RbFzjCTMbhNbKoRLruPxue8+FROK72g+s68cIJ0z2jyP9fE1c+e0ZHUe D6P+bPepj/I2KtL/ABtWFrqLS67kSe7uoinDnGP57MnwcMtF83CcOEhzgM4aIU59 JLjz+9JDVlu2Mf+QM1/7w+rcdcdFdebGLzHLeBj/ZxoPtNSSxmOCk/2I95qkvfAg m2VBF2Gj/+BS5/IgSWfuQEyITnQIlLRPK/CSv0U9Y0TkOFX58wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGebDOBbDnoPF2+gsAOfb1nKHMw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmVmYzZiNTAtOWNhOS0z MTEyLWE1M2ItZmEyNzgzZjExNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb6eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaRP02IbiAlzW4/3AZBYDhANQTUsydVHHlWlEnFDyD9KmeQ4TNMOXRI K3S/4DOBKQO0I71CYUQweUry1clSuCYj1R5FdrRpESVk2SZRaJYWxr5xLtvx0szN EeZNQX9US7GQ79lfah7pVgoECmw/b+p0Hq4MA0FkFRTLTBQA0Ywe2TcjQZ9vUdLv T4hxiZCfzxPHWRYO6qAKLLgjaUDXF1d86NyIewlAXgulaHF2dghHQ1ZvHdeEiqLl 2vcUUmLySBtV5eAfx70qc62uilJdO92PqheQkNbU/ADCInjXdMLpFRj55y/TcVdU Kaffw5mtwdZXU45INoX4JC4omZkGefw= -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:37 2026 by rpki-client