$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa File: e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa (raw, json) Hash identifier: eW+3CZ+d8bryPG2/OSMJ8cz9Nd1AvyONUb90uha0EmM= Subject key identifier: 2D:7F:39:46:E9:BC:12:86:85:0C:33:62:6F:71:6E:B1:C1:D5:66:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9268252886505D1C51C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7018 IP address blocks: 173.186.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:92:68:25:28:86:50:5d:1c:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=706f52a8-7034-4a61-9c59-898f35bd88dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:6d:29:63:b7:2b:10:c2:b3:a1:11:de:a9: 7f:53:a8:56:e2:90:70:85:b5:3c:01:e8:b6:1c:d2: 3e:7d:1e:09:d2:c5:6b:06:2d:cc:c6:0f:70:77:0b: ae:60:9f:eb:dd:90:b0:13:42:02:90:3a:03:5e:6e: 30:c1:91:70:7e:9e:61:c4:f2:18:f6:50:ce:b8:71: df:5e:0a:85:aa:db:8c:6f:18:0f:26:37:93:fa:f3: 9f:ec:db:3e:ad:5c:12:dc:6e:26:d7:ff:4c:af:7e: 9d:bb:74:fe:51:7b:28:45:1b:32:d6:d9:b5:71:a7: 4c:6f:a6:1d:56:d2:7c:ea:19:b4:fe:6f:19:12:69: e5:34:5e:df:c6:38:1b:cb:65:25:f5:d8:96:13:11: d7:da:a7:57:e4:57:4d:cf:98:5f:82:d2:66:b6:10: 83:84:07:2f:5d:9d:2e:81:33:e9:61:b0:7a:20:a7: 88:3f:27:b8:43:a2:62:99:d9:77:2e:4f:7c:45:47: 35:78:05:59:f6:d1:5a:bf:55:27:a0:95:e3:77:ba: 84:7b:03:6c:12:e3:e4:b7:10:ba:43:6e:3c:51:68: 9f:90:c3:b2:ba:ea:3c:23:f5:2e:c8:21:d6:9f:fa: fb:02:f5:3d:b9:1a:ed:2b:5b:48:a5:6a:8c:c8:43: 35:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7F:39:46:E9:BC:12:86:85:0C:33:62:6F:71:6E:B1:C1:D5:66:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8398280-5017-3fd7-aa3c-e2b9f27f35e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:57:9a:16:68:83:99:68:47:a1:4a:a4:20:fa:3f:14:cf:4b: 0e:60:3d:52:65:b9:e5:c3:f5:d1:81:f6:4d:65:50:20:0e:ac: e2:11:9b:34:dc:60:5b:c2:e0:92:48:16:5d:5f:95:b4:b1:c7: 7f:2c:45:2a:8a:f2:5e:3b:aa:23:ec:af:bf:84:a8:73:fc:7f: c5:88:25:bf:32:02:b1:a2:0a:56:b7:a8:b4:70:fa:36:f3:2b: 34:bd:24:de:e0:fd:77:35:e6:5d:1b:65:15:ac:9b:97:f0:ca: 28:69:98:aa:0b:ca:14:77:37:73:65:7f:bb:03:38:6c:dd:fa: 15:9e:68:b3:95:16:39:4c:10:cd:5b:d8:98:8c:58:e9:a0:36: 74:77:e3:e9:7e:45:de:94:e1:8e:ec:e0:0f:a7:a6:d0:f0:20: cc:27:93:38:f3:4b:3f:2c:fd:c7:a9:f2:09:e1:a4:d5:be:7e: b1:7b:0f:38:cd:28:4e:04:45:97:de:03:48:aa:5c:ca:fc:3d: 8f:8b:14:a6:e7:30:10:41:10:11:d8:69:e8:02:1d:11:11:db: f6:c8:ea:ee:95:e0:5f:0c:a1:e7:4e:8f:31:6c:a4:ff:a7:c4: 94:5a:fc:eb:3b:39:30:1e:11:e7:a0:ff:ad:c5:d6:06:3d:65: 97:f4:0b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpJoJSiGUF0cUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NzA2ZjUyYTgtNzAzNC00YTYxLTljNTktODk4ZjM1YmQ4OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqBtKWO3KxDCs6ER3ql/U6hW4pBwhbU8Aei2 HNI+fR4J0sVrBi3Mxg9wdwuuYJ/r3ZCwE0ICkDoDXm4wwZFwfp5hxPIY9lDOuHHf XgqFqtuMbxgPJjeT+vOf7Ns+rVwS3G4m1/9Mr36du3T+UXsoRRsy1tm1cadMb6Yd VtJ86hm0/m8ZEmnlNF7fxjgby2Ul9diWExHX2qdX5FdNz5hfgtJmthCDhAcvXZ0u gTPpYbB6IKeIPye4Q6Jimdl3Lk98RUc1eAVZ9tFav1UnoJXjd7qEewNsEuPktxC6 Q248UWifkMOyuuo8I/UuyCHWn/r7AvU9uRrtK1tIpWqMyEM1NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1/OUbpvBKGhQwzYm9xbrHB1WYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgzOTgyODAtNTAxNy0z ZmQ3LWFhM2MtZTJiOWYyN2YzNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlXmhZog5loR6FKpCD6PxTPSw5gPVJlueXD9dGB9k1lUCAOrOIRmzTc YFvC4JJIFl1flbSxx38sRSqK8l47qiPsr7+EqHP8f8WIJb8yArGiCla3qLRw+jbz KzS9JN7g/Xc15l0bZRWsm5fwyihpmKoLyhR3N3Nlf7sDOGzd+hWeaLOVFjlMEM1b 2JiMWOmgNnR34+l+Rd6U4Y7s4A+nptDwIMwnkzjzSz8s/cep8gnhpNW+frF7DzjN KE4ERZfeA0iqXMr8PY+LFKbnMBBBEBHYaegCHRER2/bI6u6V4F8MoedOjzFspP+n xJRa/Os7OTAeEeeg/63F1gY9ZZf0CyI= -----END CERTIFICATE-----Generated at Wed Mar 25 23:23:56 2026 by rpki-client