$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa File: ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa (raw, json) Hash identifier: fgrlRfP60MS9T9erU+N12fXlAHmb4uDaz7SpW+an4TY= Subject key identifier: 9F:E3:92:C3:FA:64:DF:87:A5:B5:59:EC:78:25:B4:2B:D1:78:D5:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F926132F125A16A28BB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 174.130.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:92:61:32:f1:25:a1:6a:28:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=01c356a8-2917-4247-a173-8a068c385f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:ba:80:8b:62:64:73:07:fe:ed:22:c5:59: e5:de:56:d7:ff:6b:19:f9:0a:cd:2f:4a:7b:c3:76: 4e:ad:f5:3a:a3:5b:c3:cf:39:61:dd:f4:d1:53:76: 03:89:29:2b:09:5e:22:b5:ee:c9:cf:f4:3e:07:3d: da:2f:34:f1:db:89:30:7c:d6:00:6c:89:1d:fe:23: 21:b5:74:63:f6:97:95:bb:a7:16:e8:c4:ee:cc:87: 0e:c9:1a:5c:87:5b:d6:fb:60:eb:a5:1c:79:68:25: 0c:78:63:e0:a5:ba:da:a5:9d:f1:9e:75:b5:67:14: 66:09:ed:dd:f3:34:07:ed:e0:77:06:64:18:ba:84: 1f:aa:f5:16:f1:8b:45:6f:db:a3:e3:4c:13:b2:0c: c4:5a:0d:15:96:6e:40:6e:94:c3:f1:ad:56:13:3a: ab:3b:49:23:a3:21:65:74:7b:d1:4d:0a:cc:3f:e3: d2:62:09:21:fc:16:86:1d:8e:0d:ad:c8:2a:0b:08: 4e:f6:39:85:fe:6b:4d:c1:56:a8:e5:15:c2:b5:4c: 1f:de:0d:78:b1:01:cc:07:94:0c:54:94:59:48:3c: 20:6f:44:22:4f:61:bf:5a:e0:7e:5f:3e:62:15:ec: 27:aa:c1:b4:35:a2:41:70:4c:56:e9:44:e2:a5:1e: 89:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E3:92:C3:FA:64:DF:87:A5:B5:59:EC:78:25:B4:2B:D1:78:D5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecc4dcd5-7bb9-38a7-9b35-5d0552cba17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ab:ff:78:f4:b8:08:4c:48:e7:c9:a9:b4:86:1c:86:98:e3: 61:76:20:dd:8a:a9:1d:27:13:52:3b:7f:98:c7:25:13:52:56: 03:65:01:08:ce:82:25:a9:f1:e0:24:75:75:dc:e9:35:08:43: 5b:14:c0:a2:52:c8:77:b2:72:54:30:35:4c:52:0c:a8:a5:66: 9e:5f:f9:33:b2:fe:e4:9e:b5:51:60:58:22:65:c0:ef:91:aa: 3c:70:c1:20:78:27:e8:6f:02:95:b1:b3:93:52:b5:0e:da:2a: 9f:38:48:ab:17:cc:c8:19:64:6d:9d:29:c5:cc:4b:6c:f0:8d: b9:6a:27:bb:4b:5b:0d:12:76:f5:de:3b:a2:2d:9f:91:7c:b1: 4b:f4:1d:3b:04:cb:b6:4c:4c:84:16:3f:c1:6f:f8:86:44:81: d1:59:aa:58:b3:33:c0:aa:7c:3c:02:92:8e:7a:95:c6:07:c2: c4:5c:97:44:4c:44:41:3c:c8:ca:6a:ac:ea:2f:e3:e1:57:ce: 4a:32:af:5b:e0:3d:7f:6e:ab:67:bd:10:e3:f1:21:55:7b:63: 94:0e:3c:b5:84:91:86:7c:b0:54:29:d4:23:17:4c:0a:6d:f4: 8e:cf:6d:b2:fb:0d:20:f0:58:73:3f:26:4b:a8:22:49:fc:50: b8:a1:2c:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5JhMvEloWoou4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MDFjMzU2YTgtMjkxNy00MjQ3LWExNzMtOGEwNjhjMzg1ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO+6gItiZHMH/u0ixVnl3lbX/2sZ+QrNL0p7 w3ZOrfU6o1vDzzlh3fTRU3YDiSkrCV4ite7Jz/Q+Bz3aLzTx24kwfNYAbIkd/iMh tXRj9peVu6cW6MTuzIcOyRpch1vW+2DrpRx5aCUMeGPgpbrapZ3xnnW1ZxRmCe3d 8zQH7eB3BmQYuoQfqvUW8YtFb9uj40wTsgzEWg0Vlm5AbpTD8a1WEzqrO0kjoyFl dHvRTQrMP+PSYgkh/BaGHY4NrcgqCwhO9jmF/mtNwVao5RXCtUwf3g14sQHMB5QM VJRZSDwgb0QiT2G/WuB+Xz5iFewnqsG0NaJBcExW6UTipR6J/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/jksP6ZN+HpbVZ7HgltCvReNWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNjNGRjZDUtN2JiOS0z OGE3LTliMzUtNWQwNTUyY2JhMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2r/3j0uAhMSOfJqbSGHIaY42F2IN2KqR0nE1I7f5jHJRNSVgNlAQjO giWp8eAkdXXc6TUIQ1sUwKJSyHeyclQwNUxSDKilZp5f+TOy/uSetVFgWCJlwO+R qjxwwSB4J+hvApWxs5NStQ7aKp84SKsXzMgZZG2dKcXMS2zwjblqJ7tLWw0SdvXe O6Itn5F8sUv0HTsEy7ZMTIQWP8Fv+IZEgdFZqlizM8CqfDwCko56lcYHwsRcl0RM REE8yMpqrOov4+FXzkoyr1vgPX9uq2e9EOPxIVV7Y5QOPLWEkYZ8sFQp1CMXTApt 9I7PbbL7DSDwWHM/JkuoIkn8ULihLLM= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:19 2026 by rpki-client