$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6e69095-b1c0-3f83-ba7b-59f8d59cb12a.roa File: c6e69095-b1c0-3f83-ba7b-59f8d59cb12a.roa (raw, json) Hash identifier: oBOCCjsRNfjKPPhnfNHHjMJ/U19bRyzpcWalNqnmhG0= Subject key identifier: 74:DF:47:97:8C:42:00:31:6B:4C:FE:38:F0:02:35:32:77:66:93:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F903A63766D3FB9958C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6e69095-b1c0-3f83-ba7b-59f8d59cb12a.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.189.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:90:3a:63:76:6d:3f:b9:95:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8f7cf17f-23a7-4a6c-bb59-664840387662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:87:5d:58:9c:e3:a6:d6:06:b9:11:7a:ff: 08:e9:fa:4f:f2:b3:e3:d6:a4:91:4b:64:d8:32:fe: 5d:4e:0d:57:25:db:82:36:0c:fa:5d:70:ee:b0:bf: 7f:fb:6d:b6:a0:05:10:f4:53:0a:61:41:c8:d6:b7: 42:d8:ab:fa:a8:ab:0f:52:e8:46:d2:7a:70:ae:9f: 79:89:2e:1f:b0:f3:7e:db:5c:5f:8f:b7:92:99:95: 20:e2:f0:01:d1:f1:5d:65:30:bb:b0:93:f6:be:2b: 22:6c:88:c9:c6:e0:55:b5:ee:21:e5:fc:36:8c:92: 1e:56:41:27:7a:02:f3:67:98:4b:5c:07:b1:fb:c4: 28:b6:08:e6:b6:2c:70:45:d3:1e:81:60:0a:24:a9: a7:37:76:d1:4f:75:21:67:fa:ac:91:48:c4:cd:4e: 28:f1:ba:34:ee:28:c5:c6:85:35:7c:34:9e:5e:d6: ff:86:56:fe:2a:73:f2:bd:76:e9:62:e7:06:bc:74: 1a:65:65:8e:8e:ef:c0:8c:71:61:3e:79:f1:72:42: 99:50:e4:58:39:7e:ff:0b:f1:19:5e:d3:7a:35:ed: 87:6f:25:aa:d2:b6:e0:9f:c9:ee:d6:27:1c:f1:ba: d6:2f:c7:ee:99:3c:ee:e2:12:1d:db:1a:d0:91:22: cb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DF:47:97:8C:42:00:31:6B:4C:FE:38:F0:02:35:32:77:66:93:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6e69095-b1c0-3f83-ba7b-59f8d59cb12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:56:04:b8:2b:e4:a5:d4:5f:f0:04:de:50:2d:0e:9b:a8:10: 7b:67:22:79:de:9e:96:cb:b8:0a:59:c9:eb:eb:c1:3e:46:e2: 85:6e:91:31:76:15:20:a8:5a:b4:99:af:45:2a:70:93:70:e9: 32:6f:e7:0a:73:6c:16:1a:54:40:bc:64:00:27:e5:2b:0b:c3: 74:f3:3a:28:52:10:3d:34:3f:38:77:df:5c:3e:f6:0e:66:47: 3d:46:48:1d:af:05:a8:3b:a0:be:a8:a1:84:81:10:ad:36:4d: c0:01:0e:33:ef:72:26:55:ff:8a:b2:13:77:e3:e0:de:39:65: 68:4f:43:d3:19:35:b2:9a:65:cb:41:6c:cb:33:c4:65:40:13: fb:d7:88:3b:27:23:3b:ed:e7:a5:29:3c:08:ec:85:3a:e8:53: 63:ce:89:de:27:09:60:98:4d:ff:ce:39:c0:1b:cb:21:87:d8: 96:14:de:2e:7f:81:0e:c0:b2:52:d0:cd:62:07:96:07:a1:e3: 4d:c9:56:f1:3c:c7:75:b4:e0:66:b8:85:40:51:39:41:da:d1: 4a:08:cd:b9:e7:ce:46:08:3f:27:95:66:5a:ac:a8:f5:f4:39: 9f:ac:33:94:9e:1b:ec:fb:4b:40:1c:79:16:f4:df:76:9b:a9: 76:40:62:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5A6Y3ZtP7mVjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OGY3Y2YxN2YtMjNhNy00YTZjLWJiNTktNjY0ODQwMzg3NjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWmHXVic46bWBrkRev8I6fpP8rPj1qSRS2TY Mv5dTg1XJduCNgz6XXDusL9/+222oAUQ9FMKYUHI1rdC2Kv6qKsPUuhG0npwrp95 iS4fsPN+21xfj7eSmZUg4vAB0fFdZTC7sJP2visibIjJxuBVte4h5fw2jJIeVkEn egLzZ5hLXAex+8QotgjmtixwRdMegWAKJKmnN3bRT3UhZ/qskUjEzU4o8bo07ijF xoU1fDSeXtb/hlb+KnPyvXbpYucGvHQaZWWOju/AjHFhPnnxckKZUORYOX7/C/EZ XtN6Ne2HbyWq0rbgn8nu1icc8brWL8fumTzu4hId2xrQkSLLHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTfR5eMQgAxa0z+OPACNTJ3ZpNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzZlNjkwOTUtYjFjMC0z ZjgzLWJhN2ItNTlmOGQ1OWNiMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBWBLgr5KXUX/AE3lAtDpuoEHtnInnenpbLuApZyevrwT5G4oVukTF2 FSCoWrSZr0UqcJNw6TJv5wpzbBYaVEC8ZAAn5SsLw3TzOihSED00Pzh331w+9g5m Rz1GSB2vBag7oL6ooYSBEK02TcABDjPvciZV/4qyE3fj4N45ZWhPQ9MZNbKaZctB bMszxGVAE/vXiDsnIzvt56UpPAjshTroU2POid4nCWCYTf/OOcAbyyGH2JYU3i5/ gQ7AslLQzWIHlgeh403JVvE8x3W04Ga4hUBROUHa0UoIzbnnzkYIPyeVZlqsqPX0 OZ+sM5SeG+z7S0AceRb033abqXZAYio= -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:17 2026 by rpki-client