$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cda663b3-8e52-372d-af57-6e3f7757d199.roa File: cda663b3-8e52-372d-af57-6e3f7757d199.roa (raw, json) Hash identifier: PZL3A94rcv26Sdot/Admu0HMoXzNmVGm35TAH2goowQ= Subject key identifier: 06:DE:F4:8A:36:42:89:29:95:08:5F:C6:53:BD:6F:B3:83:DB:1A:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D36078BFBE0116EDA7CFDCEB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cda663b3-8e52-372d-af57-6e3f7757d199.roa Signing time: Wed 18 Mar 2026 16:30:26 +0000 ROA not before: Wed 18 Mar 2026 16:30:26 +0000 ROA not after: Tue 16 Jun 2026 16:30:26 +0000 asID: 7029 IP address blocks: 173.189.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:07:8b:fb:e0:11:6e:da:7c:fd:ce:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 18 16:30:26 2026 GMT Not After : Jun 16 16:30:26 2026 GMT Subject: CN=c172ca52-aece-4563-800d-2f7114beb8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:a2:55:2e:d5:a5:d8:4e:6a:f2:24:92:a0: 79:5e:73:41:ed:4b:87:fc:63:77:f3:3a:3b:a0:48: 48:cb:f2:3e:a8:37:27:69:69:74:1a:b4:a9:66:95: b9:a3:6e:f2:4b:36:cb:da:8c:c1:ab:9a:31:4f:fb: b4:a1:d5:41:96:b9:d0:4b:05:d2:91:fb:de:0a:13: 66:01:0d:85:b5:e0:1b:e9:20:01:09:66:18:d6:af: 38:71:ab:37:02:4c:44:2e:2d:d3:fe:86:36:34:1c: 81:ce:9f:8e:c2:41:bc:0c:bf:a6:33:04:da:0f:97: 39:90:2b:7e:94:fd:7f:4b:46:da:3e:a3:33:a3:09: 32:9a:96:2a:d4:f1:3a:b8:b5:4e:c0:56:5c:f7:71: 7e:6a:09:f9:cf:b8:bf:f2:d0:27:82:e6:0b:fb:27: 03:6d:67:e3:c4:84:45:61:c3:1a:fd:c2:bc:ff:35: 74:3e:d9:f5:fe:31:e4:06:e2:ee:dc:eb:d0:bd:cc: 4c:ca:d6:b3:8b:44:03:c6:08:8a:8e:b4:14:db:53: 6b:6d:71:0e:78:d9:03:c5:03:b1:2c:71:3c:91:c1: 70:40:f1:36:fd:f8:c5:8c:64:05:76:06:d2:4e:bc: 37:00:f7:92:02:d6:84:4d:4c:d6:68:88:10:1c:a3: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DE:F4:8A:36:42:89:29:95:08:5F:C6:53:BD:6F:B3:83:DB:1A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cda663b3-8e52-372d-af57-6e3f7757d199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9a:8c:63:ee:97:c0:38:51:3d:45:5a:62:2c:2c:b7:de:e8: b5:e9:f3:b2:c8:fa:a6:59:4e:ef:48:d5:c9:28:84:31:f8:14: 3c:2e:46:cb:74:38:70:94:80:e6:3d:aa:32:c2:dd:5c:31:1c: be:5f:a8:5d:81:85:29:17:c0:d7:54:7e:9d:45:33:4d:0e:d7: 32:75:12:5c:d8:c7:62:d3:cb:d0:2f:7d:f0:40:6c:fe:b8:02: a5:b0:e6:2d:37:0d:5d:24:26:f8:39:8f:c4:72:72:28:15:fa: 74:6e:58:51:c7:79:3c:f7:2c:9c:e6:a6:98:8e:83:96:8a:29: 2a:39:b1:3d:c8:f3:8d:29:be:97:7b:4b:d9:20:6f:7a:de:fb: a3:7b:f7:c7:b4:36:99:b7:8d:79:57:ec:ea:84:90:89:a6:13: 60:02:47:c0:71:4d:4f:ec:ec:f2:b2:e4:e6:5a:93:f6:d5:48: 76:12:05:30:97:49:17:ef:25:74:75:ae:15:7c:0a:bb:8f:44: 4a:fc:61:36:f1:97:d1:ee:db:99:12:21:e1:dc:22:ea:11:8c: 39:e5:4d:d2:70:8a:a0:5a:6b:62:32:7a:ed:25:42:c2:56:67: af:d9:76:3a:9b:cc:4f:0a:41:2b:3e:fc:22:c8:a5:49:05:85: b6:19:68:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02B4v74BFu2nz9zrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxODE2MzAyNloXDTI2MDYxNjE2MzAyNlowLzEtMCsGA1UEAxMk YzE3MmNhNTItYWVjZS00NTYzLTgwMGQtMmY3MTE0YmViOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCaiVS7VpdhOavIkkqB5XnNB7UuH/GN38zo7 oEhIy/I+qDcnaWl0GrSpZpW5o27ySzbL2ozBq5oxT/u0odVBlrnQSwXSkfveChNm AQ2FteAb6SABCWYY1q84cas3AkxELi3T/oY2NByBzp+OwkG8DL+mMwTaD5c5kCt+ lP1/S0baPqMzowkympYq1PE6uLVOwFZc93F+agn5z7i/8tAnguYL+ycDbWfjxIRF YcMa/cK8/zV0Ptn1/jHkBuLu3OvQvcxMytazi0QDxgiKjrQU21NrbXEOeNkDxQOx LHE8kcFwQPE2/fjFjGQFdgbSTrw3APeSAtaETUzWaIgQHKPyqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbe9Io2QokplQhfxlO9b7OD2xplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2RhNjYzYjMtOGU1Mi0z NzJkLWFmNTctNmUzZjc3NTdkMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb3KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGajGPul8A4UT1FWmIsLLfe6LXp87LI+qZZTu9I1ckohDH4FDwuRst0 OHCUgOY9qjLC3VwxHL5fqF2BhSkXwNdUfp1FM00O1zJ1ElzYx2LTy9AvffBAbP64 AqWw5i03DV0kJvg5j8RycigV+nRuWFHHeTz3LJzmppiOg5aKKSo5sT3I840pvpd7 S9kgb3re+6N798e0Npm3jXlX7OqEkImmE2ACR8BxTU/s7PKy5OZak/bVSHYSBTCX SRfvJXR1rhV8CruPREr8YTbxl9Hu25kSIeHcIuoRjDnlTdJwiqBaa2Iyeu0lQsJW Z6/ZdjqbzE8KQSs+/CLIpUkFhbYZaEQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:21:39 2026 by rpki-client