$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3cc95dc-10d3-3511-9e56-5f371bb8217e.roa File: f3cc95dc-10d3-3511-9e56-5f371bb8217e.roa (raw, json) Hash identifier: kMLRw6Be9WvwS25c0Dp9YxCYH3e+Ll72CYrYngbye3Q= Subject key identifier: BD:16:69:5E:D3:CF:83:DD:0A:D1:6C:2D:44:D0:10:58:4A:76:B7:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F92061774BCCA559A0CE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3cc95dc-10d3-3511-9e56-5f371bb8217e.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 173.187.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:92:06:17:74:bc:ca:55:9a:0c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8b785625-3d6c-4735-a58a-294347633c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4e:46:bc:52:ff:c6:e5:d7:aa:9c:fb:7b:3c: ce:a4:7b:7e:64:1a:55:6d:83:94:c9:0b:c3:8a:50: ed:89:6b:62:ee:64:63:e6:ec:44:b9:33:53:9f:26: d5:05:01:0d:05:d3:6f:42:d0:83:cf:70:94:8b:04: 1c:5f:1e:47:65:75:dc:de:24:0d:e8:78:33:a6:4a: 16:74:26:11:90:70:30:0d:31:4c:5a:6a:87:72:c2: 2a:68:90:bb:ea:06:ea:5a:7f:77:32:f2:63:ee:3e: 83:6a:98:ef:5b:64:de:1e:44:9f:5c:aa:b1:e6:b4: b6:cb:f8:a1:b3:26:d2:92:18:71:76:48:e3:56:c1: d0:ab:0a:30:2c:df:7f:28:eb:0e:da:8c:97:bc:4e: ad:60:34:24:29:e5:a9:99:af:ab:a3:fb:81:a3:40: 97:d4:a9:42:bd:8d:13:8b:ad:5d:47:11:10:35:0d: 5c:d6:0b:99:2a:0a:ba:53:6a:6a:f0:13:54:63:37: 2c:4b:16:38:38:78:05:33:5d:f8:c5:49:c8:e6:06: 29:25:9f:b8:14:e1:57:34:9c:28:b9:d0:ca:9f:1f: 99:85:b3:1c:a1:ae:b9:a9:81:6f:e7:ae:23:88:aa: 63:a1:f4:fe:e2:2a:e7:fc:66:b1:d4:b1:bf:3e:25: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:16:69:5E:D3:CF:83:DD:0A:D1:6C:2D:44:D0:10:58:4A:76:B7:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3cc95dc-10d3-3511-9e56-5f371bb8217e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:99:6c:93:60:57:53:4e:83:22:a4:0c:b2:90:d5:c5:85:13: 2d:63:8d:d6:55:47:62:46:5b:48:e4:4a:0f:9d:6c:3a:35:ab: 42:2a:f6:b2:f1:2b:6f:2e:b3:04:1e:eb:95:00:83:ae:f5:f2: 95:25:8e:5e:7e:de:66:65:16:c7:75:44:d1:4d:db:67:67:f4: f5:68:e3:06:8e:43:4f:43:a5:bc:2e:10:f4:e6:fb:24:9e:fd: a8:4e:15:2f:09:24:5e:ea:99:50:7a:52:c6:f7:25:20:c6:ef: 65:ac:21:39:30:7e:f6:95:e4:48:b3:7f:16:1b:c4:48:34:b6: 7c:95:31:24:9f:bb:d6:b5:75:1e:05:6f:21:ba:cb:a7:30:aa: 57:9d:75:c5:18:36:46:d9:f6:13:e0:47:a8:aa:08:71:8a:2e: bf:90:d1:ab:9d:57:cb:7c:6a:1e:e5:73:71:41:01:34:41:39: d7:9d:7d:09:57:8f:4c:ba:55:92:de:f5:2d:a8:43:d5:7e:a2: 15:5c:54:81:c2:c8:b0:a8:03:2e:9c:49:54:f6:d3:dd:4a:0b: 83:57:b9:cc:d7:44:84:f7:d8:ba:60:80:c5:ec:b4:90:4f:4c: e0:88:3e:4a:ea:59:39:73:d4:d1:aa:c3:2c:e9:c5:b6:9e:df: 50:58:ce:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5IGF3S8ylWaDOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OGI3ODU2MjUtM2Q2Yy00NzM1LWE1OGEtMjk0MzQ3NjMzYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE5GvFL/xuXXqpz7ezzOpHt+ZBpVbYOUyQvD ilDtiWti7mRj5uxEuTNTnybVBQENBdNvQtCDz3CUiwQcXx5HZXXc3iQN6HgzpkoW dCYRkHAwDTFMWmqHcsIqaJC76gbqWn93MvJj7j6DapjvW2TeHkSfXKqx5rS2y/ih sybSkhhxdkjjVsHQqwowLN9/KOsO2oyXvE6tYDQkKeWpma+ro/uBo0CX1KlCvY0T i61dRxEQNQ1c1guZKgq6U2pq8BNUYzcsSxY4OHgFM134xUnI5gYpJZ+4FOFXNJwo udDKnx+ZhbMcoa65qYFv564jiKpjofT+4irn/Gax1LG/PiX0mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0WaV7Tz4PdCtFsLUTQEFhKdrdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjNjYzk1ZGMtMTBkMy0z NTExLTllNTYtNWYzNzFiYjgyMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbumMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWZbJNgV1NOgyKkDLKQ1cWFEy1jjdZVR2JGW0jkSg+dbDo1q0Iq9rLx K28uswQe65UAg6718pUljl5+3mZlFsd1RNFN22dn9PVo4waOQ09DpbwuEPTm+ySe /ahOFS8JJF7qmVB6Usb3JSDG72WsITkwfvaV5EizfxYbxEg0tnyVMSSfu9a1dR4F byG6y6cwqleddcUYNkbZ9hPgR6iqCHGKLr+Q0audV8t8ah7lc3FBATRBOdedfQlX j0y6VZLe9S2oQ9V+ohVcVIHCyLCoAy6cSVT2091KC4NXuczXRIT32LpggMXstJBP TOCIPkrqWTlz1NGqwyzpxbae31BYznc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:09 2026 by rpki-client