$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa File: fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa (raw, json) Hash identifier: NSDO8s2cL48xHVjOsy9l9wKHyx1+oNbeCrxYIt6C8IY= Subject key identifier: CA:8F:17:47:BA:E0:E5:C3:91:97:06:B6:19:45:D1:AE:2A:B4:5B:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA4D7B4033778D9AB8840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 22050 IP address blocks: 173.188.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a4:d7:b4:03:37:78:d9:ab:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=6bd5ec3c-7d23-4b34-936d-9c5753b7b7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c2:b6:21:b6:be:41:37:0a:c3:18:2c:ca:c9: f9:7f:38:3f:a4:07:82:ce:b1:cd:f0:2b:9b:bb:73: 04:1d:9a:cd:ee:36:07:5a:f1:98:46:c5:a3:56:8f: 61:2a:e5:83:c2:f1:e4:31:41:be:74:35:3b:c0:11: 30:ea:33:52:b8:98:4f:d4:c8:77:86:d3:c1:bc:34: b0:89:74:98:7b:7d:94:15:56:fc:d6:53:5e:e9:68: 52:b4:80:be:41:e6:d6:3e:05:5f:1c:44:c0:9f:ee: 7d:9a:b9:22:3b:88:0b:18:59:e3:b4:93:7e:07:97: 4a:13:b9:70:dc:9e:5a:ce:36:76:71:ab:fa:f0:de: 55:53:ec:d3:49:66:96:e9:ac:af:29:23:60:06:77: 5d:ce:1d:be:3e:e5:a2:d6:10:82:2b:5a:8f:67:c4: 01:33:4a:ab:0e:ef:c4:8d:66:15:22:af:f4:93:e5: 2d:ef:a0:d0:65:14:fd:f7:06:4b:c3:40:75:94:fd: e6:53:74:8f:f7:30:77:cc:42:06:16:46:0c:bf:14: 14:c7:9f:b3:4d:5c:83:79:61:02:21:3a:85:93:b4: ef:8f:3d:fd:3c:58:61:87:b7:f0:ba:2d:6a:b1:48: 6f:5d:54:07:0b:77:70:04:09:c2:0f:57:17:c8:d7: 2b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8F:17:47:BA:E0:E5:C3:91:97:06:B6:19:45:D1:AE:2A:B4:5B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb0a580-2fb4-389f-a68a-983f976fa9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4c:6b:87:c3:bd:53:0c:a7:61:f0:fd:b2:31:83:a7:ac:c7: 4b:08:06:7f:6e:f8:d2:47:10:7f:e0:bd:df:b7:08:db:a5:ad: d4:8f:0b:f9:8c:50:2d:92:e8:a0:e9:ef:33:cf:c7:4b:37:eb: 95:22:7b:7a:21:a8:bd:ec:58:32:66:eb:53:39:79:c9:37:5c: 94:87:b8:43:f8:ea:60:4a:cd:17:20:18:d4:73:f3:69:ec:db: 95:21:58:b6:76:b1:46:82:fb:85:7c:4a:1b:b8:79:5f:48:f1: 8b:d4:b7:6e:67:2d:60:c7:05:3e:50:47:0a:36:31:d9:4d:00: f1:a3:4b:b4:4e:43:45:c4:0c:b0:ab:70:fe:b8:b3:60:95:f0: c9:53:db:5c:da:b0:eb:93:e3:68:16:de:f6:a8:56:45:81:6f: aa:0e:55:8d:22:37:eb:64:42:42:c5:23:6d:1d:3c:06:db:48: 5d:bd:fb:2e:75:b2:d5:4f:4d:c1:5e:b9:62:1c:12:61:d3:4f: 63:4f:11:8a:31:08:ef:40:37:81:c9:4b:e8:5e:0e:9d:67:f1: 1f:48:17:40:e2:69:e9:81:f6:25:b2:54:9f:63:78:60:83:7b: d7:64:ce:b3:36:bc:91:d0:dc:79:06:6a:65:9a:d4:55:48:a0: f7:46:4b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqTXtAM3eNmriEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NmJkNWVjM2MtN2QyMy00YjM0LTkzNmQtOWM1NzUzYjdiN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sK2Iba+QTcKwxgsysn5fzg/pAeCzrHN8Cub u3MEHZrN7jYHWvGYRsWjVo9hKuWDwvHkMUG+dDU7wBEw6jNSuJhP1Mh3htPBvDSw iXSYe32UFVb81lNe6WhStIC+QebWPgVfHETAn+59mrkiO4gLGFnjtJN+B5dKE7lw 3J5azjZ2cav68N5VU+zTSWaW6ayvKSNgBnddzh2+PuWi1hCCK1qPZ8QBM0qrDu/E jWYVIq/0k+Ut76DQZRT99wZLw0B1lP3mU3SP9zB3zEIGFkYMvxQUx5+zTVyDeWEC ITqFk7Tvjz39PFhhh7fwui1qsUhvXVQHC3dwBAnCD1cXyNcrHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqPF0e64OXDkZcGthlF0a4qtFtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmNiMGE1ODAtMmZiNC0z ODlmLWE2OGEtOTgzZjk3NmZhOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVMa4fDvVMMp2Hw/bIxg6esx0sIBn9u+NJHEH/gvd+3CNulrdSPC/mM UC2S6KDp7zPPx0s365Uie3ohqL3sWDJm61M5eck3XJSHuEP46mBKzRcgGNRz82ns 25UhWLZ2sUaC+4V8Shu4eV9I8YvUt25nLWDHBT5QRwo2MdlNAPGjS7ROQ0XEDLCr cP64s2CV8MlT21zasOuT42gW3vaoVkWBb6oOVY0iN+tkQkLFI20dPAbbSF29+y51 stVPTcFeuWIcEmHTT2NPEYoxCO9AN4HJS+heDp1n8R9IF0DiaemB9iWyVJ9jeGCD e9dkzrM2vJHQ3HkGamWa1FVIoPdGS5M= -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:50 2026 by rpki-client