$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed83bbbd-10bf-387e-ab09-1c241b511112.roa File: ed83bbbd-10bf-387e-ab09-1c241b511112.roa (raw, json) Hash identifier: TRdlAIMh1/O7eUKRxWWjtADspjEvfdGXKMrOeHe5PH4= Subject key identifier: 1B:56:45:4D:B2:61:2B:55:7C:DC:2F:D6:02:A3:9F:8F:0A:0C:FF:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2049EEF0E8C4FB1459ED6BB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed83bbbd-10bf-387e-ab09-1c241b511112.roa Signing time: Tue 10 Mar 2026 21:36:25 +0000 ROA not before: Tue 10 Mar 2026 21:36:25 +0000 ROA not after: Mon 08 Jun 2026 21:36:25 +0000 asID: 7029 IP address blocks: 173.188.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:49:ee:f0:e8:c4:fb:14:59:ed:6b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 10 21:36:25 2026 GMT Not After : Jun 8 21:36:25 2026 GMT Subject: CN=a25ebf64-00b1-42b5-87ee-0f7c27444470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:e1:d7:d8:34:0c:db:b2:79:76:50:bf:c8: d0:44:82:db:58:bd:47:ff:c5:7c:c5:86:59:20:c9: e4:81:67:7e:21:e7:26:ef:d6:53:5e:28:5f:9d:19: f5:14:e9:0d:79:d6:6a:49:19:a0:ea:42:b0:34:4c: 7f:75:0b:78:c1:46:d0:09:d0:80:22:e3:d1:47:24: eb:bd:89:d2:ee:1f:7d:7c:cc:05:c9:e3:08:4c:54: d8:4e:32:2f:e3:29:c0:9c:4f:99:b1:84:95:ef:99: c7:33:51:ef:66:e2:e4:df:8b:2a:4e:97:27:92:14: 27:23:93:fc:be:56:fd:cc:5b:30:64:b5:2f:32:58: 7b:4f:17:d8:00:46:99:e4:db:74:60:80:d1:b4:8d: 0f:67:08:58:9a:f4:5d:93:5c:f0:be:2b:57:cf:3b: cf:c8:e6:d8:9d:be:e0:3b:25:c0:a5:e0:5b:07:08: f1:e8:fa:07:80:cb:90:9d:bb:bd:da:b5:4d:1d:1d: 43:d4:2a:23:5b:ee:c2:a3:f1:66:e8:5a:93:ac:9a: 1d:7e:f0:1d:c6:96:d7:35:3d:51:05:32:cf:d6:e6: 1f:8c:ac:3a:95:ec:7a:98:e5:2d:4e:d7:b8:a2:24: ce:d8:da:b8:8f:34:a9:65:78:f8:bf:4a:b1:b1:92: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:56:45:4D:B2:61:2B:55:7C:DC:2F:D6:02:A3:9F:8F:0A:0C:FF:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed83bbbd-10bf-387e-ab09-1c241b511112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4a:25:6c:47:d2:da:c5:c6:bb:8d:52:3a:68:04:48:5b:4a: 2b:1c:cd:e2:29:df:33:5a:ad:16:d9:e7:c5:d9:37:a6:ef:77: d0:43:cc:7b:cd:67:51:c5:92:a4:58:10:c8:63:4a:63:72:e6: 6f:ce:67:a3:e2:97:ec:94:9e:0b:d2:28:67:0a:65:39:1f:27: 1e:18:59:33:7e:50:82:e0:dc:54:c8:22:cc:f8:84:a9:c4:d1: 6c:aa:35:a9:e0:b4:75:80:4c:56:bb:f7:ba:3e:4c:e4:6c:30: 2f:a2:67:6c:f5:b2:54:35:56:7c:be:aa:8d:6a:96:97:3e:a8: 5e:db:6e:1f:ef:c9:07:38:63:b7:e5:9b:63:53:f5:0f:1a:81: 7c:92:8f:9c:cc:96:28:42:9b:6a:47:fa:0c:ae:78:e9:79:40: c0:0c:1f:80:9d:c2:fd:5e:3c:c1:ec:50:d9:44:56:f4:04:5b: 9f:73:2b:b9:6a:d0:fd:3d:21:db:83:d9:d5:c9:e7:64:66:44: 26:ca:0a:63:aa:18:11:2c:23:4b:1c:33:e6:84:93:59:7c:c1: 78:84:d2:16:8c:48:f2:6a:bb:02:f8:df:19:8e:af:3b:87:39: 11:02:f6:09:55:73:0c:76:14:88:6a:9e:50:b0:22:20:84:01: fa:62:4a:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gSe7w6MT7FFnta7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMDIxMzYyNVoXDTI2MDYwODIxMzYyNVowLzEtMCsGA1UEAxMk YTI1ZWJmNjQtMDBiMS00MmI1LTg3ZWUtMGY3YzI3NDQ0NDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZDh19g0DNuyeXZQv8jQRILbWL1H/8V8xYZZ IMnkgWd+Iecm79ZTXihfnRn1FOkNedZqSRmg6kKwNEx/dQt4wUbQCdCAIuPRRyTr vYnS7h99fMwFyeMITFTYTjIv4ynAnE+ZsYSV75nHM1HvZuLk34sqTpcnkhQnI5P8 vlb9zFswZLUvMlh7TxfYAEaZ5Nt0YIDRtI0PZwhYmvRdk1zwvitXzzvPyObYnb7g OyXApeBbBwjx6PoHgMuQnbu92rVNHR1D1CojW+7Co/Fm6FqTrJodfvAdxpbXNT1R BTLP1uYfjKw6lex6mOUtTte4oiTO2Nq4jzSpZXj4v0qxsZIHJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtWRU2yYStVfNwv1gKjn48KDP8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWQ4M2JiYmQtMTBiZi0z ODdlLWFiMDktMWMyNDFiNTExMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFKJWxH0trFxruNUjpoBEhbSisczeIp3zNarRbZ58XZN6bvd9BDzHvN Z1HFkqRYEMhjSmNy5m/OZ6Pil+yUngvSKGcKZTkfJx4YWTN+UILg3FTIIsz4hKnE 0WyqNangtHWATFa797o+TORsMC+iZ2z1slQ1Vny+qo1qlpc+qF7bbh/vyQc4Y7fl m2NT9Q8agXySj5zMlihCm2pH+gyueOl5QMAMH4Cdwv1ePMHsUNlEVvQEW59zK7lq 0P09IduD2dXJ52RmRCbKCmOqGBEsI0scM+aEk1l8wXiE0haMSPJquwL43xmOrzuH OREC9glVcwx2FIhqnlCwIiCEAfpiSts= -----END CERTIFICATE-----Generated at Thu Mar 26 11:08:31 2026 by rpki-client