$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f409e796-564a-3237-9a12-bc37b08591dc.roa File: f409e796-564a-3237-9a12-bc37b08591dc.roa (raw, json) Hash identifier: Na+4kHj5aj5udQa2qSjzmhd4sOVT4vKPDfSg7gRdeMI= Subject key identifier: F7:37:F0:49:6D:07:44:1F:2E:2C:03:08:98:CB:47:A2:CE:E9:A2:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9AB87A7FEFF250025680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f409e796-564a-3237-9a12-bc37b08591dc.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 173.186.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9a:b8:7a:7f:ef:f2:50:02:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d81334be-49a2-44a8-8c2e-7ca97f24399a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:7e:8c:0a:ce:ee:a3:bb:46:f9:3d:ec:0b: ff:aa:69:66:25:bd:2a:45:e7:dc:a1:3a:f9:89:f2: ae:f7:cc:45:91:c5:4c:e9:ce:95:25:78:a4:0c:0e: fd:97:19:aa:87:a8:7d:7f:1b:ff:69:99:91:97:07: 70:0d:8e:47:bb:b9:37:ac:b9:b7:d9:6f:3d:be:cd: 08:63:fb:8b:44:d8:9b:13:8a:26:ab:f8:8a:d8:66: 6c:bd:3e:f8:eb:0d:0c:a3:4a:46:5e:d8:f7:5c:aa: 93:fa:4f:90:91:23:db:49:83:7f:fb:49:8c:e4:ff: f7:73:71:b5:71:b8:83:b8:4c:bd:ad:d6:01:d7:2c: 73:44:f4:18:27:9f:2e:31:a6:d5:39:3c:21:7d:a3: 07:d2:9d:cc:9b:e7:88:9d:6f:b7:ac:55:83:d4:32: 44:0f:b3:51:40:be:53:0d:5f:05:89:c2:ff:18:e7: 43:1d:28:77:ea:fe:f6:20:6f:39:8d:10:00:88:c7: f9:df:aa:8e:59:2c:0d:cb:7e:a6:30:c4:72:da:3f: 8a:90:0b:ac:ad:4c:3d:2e:e6:8c:9f:7b:b9:75:64: 44:a6:5e:f0:b4:85:91:3d:1c:fc:1e:1c:c3:2d:7c: 41:b0:a0:64:df:ed:1a:24:1e:4a:34:8b:d1:e8:37: 89:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:37:F0:49:6D:07:44:1F:2E:2C:03:08:98:CB:47:A2:CE:E9:A2:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f409e796-564a-3237-9a12-bc37b08591dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:53:85:9a:6f:a6:07:c4:28:5a:f1:e1:e0:82:af:c4:f9:49: 1d:61:44:f6:40:e9:af:ac:9e:b7:e2:b8:f4:51:bc:4f:d7:30: 3d:b6:2f:a4:53:2e:a0:30:3a:48:ad:a3:e8:29:40:fd:10:52: c5:9d:f4:8e:be:7f:dd:2a:12:f2:d2:62:f6:83:49:33:c9:55: 1c:07:5e:df:98:da:90:ca:e2:19:94:9e:ca:7f:9f:de:f6:fb: a5:ee:80:5a:c6:c6:5a:4a:0f:f4:14:b8:7f:4e:5c:9a:ff:91: 85:26:a3:e4:ca:18:ef:13:92:c9:aa:ef:b1:5c:cc:06:f0:1b: a3:c2:0d:9c:49:c3:75:fc:eb:70:b6:20:98:91:fd:bb:12:21: bf:71:50:60:9e:b8:f5:7d:82:e7:db:22:47:73:ae:e5:14:f1: 9d:4b:8b:86:7b:a4:64:bf:f1:95:1b:d5:ce:b8:e3:28:0b:14: d7:92:4d:a9:01:50:3b:2c:3f:c2:49:21:2b:1e:a7:65:ea:06: 07:b3:17:87:b1:bd:ae:57:88:51:57:a2:a8:ad:94:ae:d4:35: 5b:55:02:1e:98:f8:be:54:ea:4d:f5:7e:ed:e6:a4:1f:1b:ed: 7e:d9:43:50:cd:e9:8e:af:e5:30:2a:82:0e:5f:0e:8b:05:89: 58:0b:d1:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpq4en/v8lACVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDgxMzM0YmUtNDlhMi00NGE4LThjMmUtN2NhOTdmMjQzOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdN+jArO7qO7Rvk97Av/qmlmJb0qRefcoTr5 ifKu98xFkcVM6c6VJXikDA79lxmqh6h9fxv/aZmRlwdwDY5Hu7k3rLm32W89vs0I Y/uLRNibE4omq/iK2GZsvT746w0Mo0pGXtj3XKqT+k+QkSPbSYN/+0mM5P/3c3G1 cbiDuEy9rdYB1yxzRPQYJ58uMabVOTwhfaMH0p3Mm+eInW+3rFWD1DJED7NRQL5T DV8FicL/GOdDHSh36v72IG85jRAAiMf536qOWSwNy36mMMRy2j+KkAusrUw9LuaM n3u5dWREpl7wtIWRPRz8HhzDLXxBsKBk3+0aJB5KNIvR6DeJrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPc38EltB0QfLiwDCJjLR6LO6aKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQwOWU3OTYtNTY0YS0z MjM3LTlhMTItYmMzN2IwODU5MWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpThZpvpgfEKFrx4eCCr8T5SR1hRPZA6a+snrfiuPRRvE/XMD22L6RT LqAwOkito+gpQP0QUsWd9I6+f90qEvLSYvaDSTPJVRwHXt+Y2pDK4hmUnsp/n972 +6XugFrGxlpKD/QUuH9OXJr/kYUmo+TKGO8Tksmq77FczAbwG6PCDZxJw3X863C2 IJiR/bsSIb9xUGCeuPV9gufbIkdzruUU8Z1Li4Z7pGS/8ZUb1c644ygLFNeSTakB UDssP8JJISsep2XqBgezF4exva5XiFFXoqitlK7UNVtVAh6Y+L5U6k31fu3mpB8b 7X7ZQ1DN6Y6v5TAqgg5fDosFiVgL0R8= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:57 2026 by rpki-client