$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc591ba8-70c5-3874-aed2-1a2e13b76126.roa File: cc591ba8-70c5-3874-aed2-1a2e13b76126.roa (raw, json) Hash identifier: FLP1ykeTwDIz/4Rx487aFBrMOXmID6WPKqQkdMLNIek= Subject key identifier: 36:58:60:C6:2E:D8:1A:66:EF:43:E2:C4:98:38:46:7E:CA:4E:CD:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D49948927CA41A2E789A0C4C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc591ba8-70c5-3874-aed2-1a2e13b76126.roa Signing time: Wed 25 Mar 2026 16:34:52 +0000 ROA not before: Wed 25 Mar 2026 16:34:52 +0000 ROA not after: Tue 23 Jun 2026 16:34:52 +0000 asID: 7029 IP address blocks: 173.190.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:94:89:27:ca:41:a2:e7:89:a0:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 16:34:52 2026 GMT Not After : Jun 23 16:34:52 2026 GMT Subject: CN=0ebadf3b-7ee5-4c88-8184-f4efb5e85afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:86:9c:89:e2:81:c7:ac:b9:08:c8:49:fd:88: 15:58:ed:03:b0:f0:aa:3c:0f:9b:74:4f:e1:f6:07: 7a:7e:f9:1f:24:c1:14:c0:00:f4:8c:61:d0:ed:4c: ee:fe:4d:44:af:f1:1e:23:fd:e8:76:42:f6:dc:f8: 95:bb:18:3b:21:1a:4f:60:f4:65:b1:25:4d:85:25: bc:fd:45:96:5e:df:86:e5:88:49:98:6a:92:76:31: 22:e9:6a:6f:29:91:d3:95:8a:83:83:45:14:05:5e: ae:79:42:13:8d:b3:98:d9:a2:47:10:2f:31:74:46: a6:d7:e2:81:32:bc:14:3a:b6:56:3f:e2:3b:d4:8f: fc:ea:cf:95:40:85:2a:6c:db:97:aa:43:9d:b3:04: 9b:9b:e8:f4:9a:16:b9:d4:75:cd:3a:a0:e9:d2:fd: fa:a7:78:06:bd:b5:e6:cc:4a:92:40:76:c3:a7:16: d9:61:75:8b:36:3c:11:22:b6:73:79:7d:34:f7:11: ca:c8:83:c3:c4:b3:d1:4f:a9:e8:8b:56:5c:0c:b0: 27:34:c2:ac:c5:3f:44:5d:9b:81:4c:13:a8:44:fd: 0d:ca:72:c5:96:7e:41:ee:43:03:03:fd:6f:6e:25: fd:2c:d9:ab:ef:54:60:38:d2:9c:30:a0:dd:4d:17: b7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:58:60:C6:2E:D8:1A:66:EF:43:E2:C4:98:38:46:7E:CA:4E:CD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc591ba8-70c5-3874-aed2-1a2e13b76126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:61:fd:b6:b0:45:e2:25:e3:91:9e:53:43:17:7c:e6:f2:f0: 1b:35:83:e6:c3:b4:24:7e:e4:0e:0c:a9:f1:0a:79:8b:33:24: 98:b0:e1:fc:af:28:fe:f2:eb:92:cd:1d:af:0b:9e:d0:85:b5: 5c:1d:63:e4:2c:a5:f9:8c:a5:46:7d:d6:c2:bf:f2:9a:b0:68: f0:cb:66:23:f7:25:0f:cf:f1:00:94:dc:0e:15:3f:09:98:b5: 6d:7c:b9:0f:e8:2f:36:4d:ce:6c:9a:6c:9c:0b:cb:55:de:05: 3d:c0:ad:59:14:2d:6e:c2:7f:0e:5e:cd:86:23:46:22:0f:42: cb:15:9e:2d:5e:23:37:ab:f6:45:e3:1d:26:17:98:de:1a:b8: 03:d6:03:c8:34:59:83:6c:d6:be:ce:bb:3b:a9:d4:f6:1b:91: 42:09:7d:57:7b:86:03:36:6d:13:a8:98:eb:d1:ba:b2:56:be: 17:af:ba:94:4d:3f:d0:f2:40:e0:47:2b:87:b2:74:54:b0:34: 60:a2:bc:47:1d:f8:fe:87:ac:1e:be:23:d7:79:5b:af:bf:49: fc:94:93:3b:b4:40:1b:51:5a:31:5e:54:9c:d0:0a:f1:9e:4c: 99:66:cb:fe:79:e0:12:bc:7c:d1:8f:37:29:80:f0:aa:6b:3f: bf:77:04:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JlIknykGi54mgxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTE2MzQ1MloXDTI2MDYyMzE2MzQ1MlowLzEtMCsGA1UEAxMk MGViYWRmM2ItN2VlNS00Yzg4LTgxODQtZjRlZmI1ZTg1YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIacieKBx6y5CMhJ/YgVWO0DsPCqPA+bdE/h 9gd6fvkfJMEUwAD0jGHQ7Uzu/k1Er/EeI/3odkL23PiVuxg7IRpPYPRlsSVNhSW8 /UWWXt+G5YhJmGqSdjEi6WpvKZHTlYqDg0UUBV6ueUITjbOY2aJHEC8xdEam1+KB MrwUOrZWP+I71I/86s+VQIUqbNuXqkOdswSbm+j0mha51HXNOqDp0v36p3gGvbXm zEqSQHbDpxbZYXWLNjwRIrZzeX009xHKyIPDxLPRT6noi1ZcDLAnNMKsxT9EXZuB TBOoRP0NynLFln5B7kMDA/1vbiX9LNmr71RgONKcMKDdTRe3pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZYYMYu2Bpm70PixJg4Rn7KTs0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2M1OTFiYTgtNzBjNS0z ODc0LWFlZDItMWEyZTEzYjc2MTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5h/bawReIl45GeU0MXfOby8Bs1g+bDtCR+5A4MqfEKeYszJJiw4fyv KP7y65LNHa8LntCFtVwdY+QspfmMpUZ91sK/8pqwaPDLZiP3JQ/P8QCU3A4VPwmY tW18uQ/oLzZNzmyabJwLy1XeBT3ArVkULW7Cfw5ezYYjRiIPQssVni1eIzer9kXj HSYXmN4auAPWA8g0WYNs1r7Ouzup1PYbkUIJfVd7hgM2bROomOvRurJWvhevupRN P9DyQOBHK4eydFSwNGCivEcd+P6HrB6+I9d5W6+/SfyUkzu0QBtRWjFeVJzQCvGe TJlmy/554BK8fNGPNymA8KprP793BEo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:46 2026 by rpki-client