$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4e8cf53-78d3-381b-922b-9ce033ac6581.roa File: e4e8cf53-78d3-381b-922b-9ce033ac6581.roa (raw, json) Hash identifier: LhaK3X1jT8fua5FNxliUhCFDztL/ugcBwV5OuwgTeJo= Subject key identifier: 2A:4A:2A:66:57:2E:31:BE:9A:39:D6:3C:01:22:F9:50:7E:83:E0:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D0FC7C52755B0CAE99E33DA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4e8cf53-78d3-381b-922b-9ce033ac6581.roa Signing time: Wed 04 Mar 2026 23:41:13 +0000 ROA not before: Wed 04 Mar 2026 23:41:13 +0000 ROA not after: Tue 02 Jun 2026 22:41:13 +0000 asID: 7029 IP address blocks: 173.187.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0f:c7:c5:27:55:b0:ca:e9:9e:33:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 4 23:41:13 2026 GMT Not After : Jun 2 22:41:13 2026 GMT Subject: CN=d62f5637-0300-499d-a76b-8a14c776eee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:c4:ac:2d:e8:d2:44:77:5f:08:5f:0c:d4: 3a:68:a3:48:92:2c:24:11:5f:bd:df:6c:f4:cb:5d: e6:dd:01:f9:bd:3b:9c:5b:9b:81:cf:88:c2:37:9d: 47:5c:21:54:6d:0e:3c:59:49:a5:e8:e2:f7:27:0c: e4:c4:d1:59:4c:d9:21:da:c5:bf:2d:45:83:b5:0a: 28:03:2c:2a:49:cf:ba:1e:f0:6c:a4:04:a4:43:bf: 87:cc:14:0f:c6:5c:56:32:81:89:57:7d:52:ec:fa: 5b:bf:11:66:a2:e4:9d:b3:d0:11:ed:80:93:97:1c: 52:9e:74:e8:df:95:20:ee:30:60:f0:56:e9:b9:7c: 0b:dc:c5:e3:00:b1:47:4f:31:8f:38:f7:1f:b9:16: d4:e1:43:18:ef:43:c0:53:3f:db:0c:b8:8f:4f:99: bb:7a:41:e2:ff:72:46:08:ea:ae:12:5f:67:40:16: 2f:4e:ae:c8:1d:ec:50:42:16:10:c5:ec:47:8f:a1: 4e:84:9d:86:c2:ab:94:b5:f9:a9:cd:3a:78:f5:85: 32:a4:a2:de:5b:0b:11:71:75:1d:42:1c:ba:e7:69: d9:94:8d:b1:20:6a:33:87:9e:d1:d8:3d:2a:48:4b: 84:48:25:c2:b2:c4:a1:b0:0c:b3:11:76:38:38:57: af:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4A:2A:66:57:2E:31:BE:9A:39:D6:3C:01:22:F9:50:7E:83:E0:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4e8cf53-78d3-381b-922b-9ce033ac6581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f7:e3:8b:33:db:ae:36:a1:93:1b:92:19:10:e0:c5:28:3e: 8f:96:c8:83:31:31:7f:9d:d6:4c:b2:82:ae:bd:c8:9d:89:7d: 7b:6b:9b:b4:d6:15:59:c9:d6:04:8b:2f:51:2a:ed:49:34:f4: 23:75:16:d9:ba:00:36:b1:22:33:41:87:57:7a:50:ff:eb:a2: 95:41:8e:0a:6d:34:5a:81:e2:5d:0c:8b:92:3e:96:2f:cd:89: ac:16:f8:0f:8f:00:ee:e3:42:e7:aa:fb:f0:1c:de:cd:e1:42: 39:d0:f2:17:f8:92:6c:b2:65:24:d2:88:0a:ab:69:3b:e2:5d: 5f:d0:81:80:79:55:00:4d:4a:03:91:bb:96:88:81:43:4c:2a: a9:b2:37:c8:9b:87:40:90:13:63:c9:f1:9d:80:26:e3:b4:d8: 04:5f:6f:57:e3:15:a4:17:bd:52:fe:1d:b9:60:ab:ef:a6:02: b3:58:fc:91:f4:d8:5f:c4:26:b6:0e:35:8e:c1:37:1a:d0:5e: 5b:4b:fc:9a:60:0f:58:d4:62:f8:be:da:49:3e:92:41:43:9a: 3e:09:f3:2c:f9:18:7a:48:de:52:c2:a0:5f:a0:a3:3d:01:7c: fd:ef:6d:01:39:83:fe:75:a1:e9:62:35:d5:a1:b8:a6:3f:fb: 81:db:02:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Px8UnVbDK6Z4z2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwNDIzNDExM1oXDTI2MDYwMjIyNDExM1owLzEtMCsGA1UEAxMk ZDYyZjU2MzctMDMwMC00OTlkLWE3NmItOGExNGM3NzZlZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpjErC3o0kR3XwhfDNQ6aKNIkiwkEV+932z0 y13m3QH5vTucW5uBz4jCN51HXCFUbQ48WUml6OL3JwzkxNFZTNkh2sW/LUWDtQoo AywqSc+6HvBspASkQ7+HzBQPxlxWMoGJV31S7PpbvxFmouSds9AR7YCTlxxSnnTo 35Ug7jBg8FbpuXwL3MXjALFHTzGPOPcfuRbU4UMY70PAUz/bDLiPT5m7ekHi/3JG COquEl9nQBYvTq7IHexQQhYQxexHj6FOhJ2GwquUtfmpzTp49YUypKLeWwsRcXUd Qhy652nZlI2xIGozh57R2D0qSEuESCXCssShsAyzEXY4OFevOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpKKmZXLjG+mjnWPAEi+VB+g+CjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTRlOGNmNTMtNzhkMy0z ODFiLTkyMmItOWNlMDMzYWM2NTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbueMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH344sz2642oZMbkhkQ4MUoPo+WyIMxMX+d1kyygq69yJ2JfXtrm7TW FVnJ1gSLL1Eq7Uk09CN1Ftm6ADaxIjNBh1d6UP/ropVBjgptNFqB4l0Mi5I+li/N iawW+A+PAO7jQueq+/Ac3s3hQjnQ8hf4kmyyZSTSiAqraTviXV/QgYB5VQBNSgOR u5aIgUNMKqmyN8ibh0CQE2PJ8Z2AJuO02ARfb1fjFaQXvVL+Hblgq++mArNY/JH0 2F/EJrYONY7BNxrQXltL/JpgD1jUYvi+2kk+kkFDmj4J8yz5GHpI3lLCoF+goz0B fP3vbQE5g/51oeliNdWhuKY/+4HbAi4= -----END CERTIFICATE-----Generated at Thu Mar 26 09:33:42 2026 by rpki-client