$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa File: 0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa (raw, json) Hash identifier: Gmju3IqWoKMKNNrBz7MPwQUVM5+pE7HAU991mKBqGqc= Subject key identifier: 47:41:21:6F:62:9C:EA:67:D6:BD:7D:70:58:E4:53:68:88:63:2D:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB67FC34E371DD0433920 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 173.189.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b6:7f:c3:4e:37:1d:d0:43:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=ce3395b4-4293-41ea-ab2b-1a60f177d1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:91:78:60:8d:c6:8a:9a:60:9a:56:8c:56: 96:2b:4e:d6:7b:56:78:ce:c0:a9:bd:c6:59:64:8f: 65:e1:8e:e4:f3:f4:7e:e1:78:bd:68:aa:dc:ad:8b: bb:87:e4:c2:3e:3a:7a:cc:5e:50:2e:cf:38:e5:79: c2:47:7c:26:e5:2a:d5:9e:08:7c:fc:42:5b:32:3b: e3:d6:09:cd:8e:cd:e8:dc:5e:65:a8:4d:68:c5:1a: 6e:fa:49:bc:d8:b4:eb:2a:37:df:8a:f4:ca:6d:76: dd:05:16:66:cc:7b:7e:ee:11:54:2c:6a:b5:05:75: 7e:1f:77:7e:ce:b8:5a:10:44:b9:24:e9:92:82:34: 83:eb:08:03:49:4e:3f:48:8e:10:ac:9e:eb:77:b5: 01:c0:df:5f:e3:af:41:51:07:8e:e9:12:a3:19:23: 7d:23:3b:1a:d1:42:3d:c2:cb:29:0c:51:50:a0:f1: 3d:77:6d:3f:71:90:c5:fb:40:21:2b:52:0d:f8:8e: 38:83:9f:d1:98:6b:26:8a:db:14:54:7d:12:f9:af: 32:ed:70:8c:69:0b:d3:38:fe:be:5b:3d:96:d5:5d: 0c:ef:e6:1e:5c:4d:7c:3a:f8:ab:73:d0:31:ed:b0: 07:1b:c6:78:ff:70:ef:7a:3c:32:6d:83:5e:e6:a6: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:41:21:6F:62:9C:EA:67:D6:BD:7D:70:58:E4:53:68:88:63:2D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0432f3fc-8388-33b7-9f29-1f0f4f5b0486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c0:a1:47:3b:2f:29:2f:b4:87:60:66:b4:da:6e:4c:99:31: d1:26:63:4b:75:28:67:30:2f:38:23:ed:96:fb:a7:b7:0c:c3: 53:86:72:9d:12:3b:c8:61:8a:5b:4f:f3:23:ef:fa:c3:ec:3a: f8:66:e5:f2:27:81:2e:0d:47:52:87:c8:f0:2e:47:e3:d9:a6: ca:52:20:12:81:35:2c:ea:fb:f5:86:82:d5:dd:5a:73:c3:93: 43:ed:86:6f:c6:c6:9e:77:8c:a8:f2:7e:37:ac:15:a2:ed:6f: a2:af:f8:33:ed:42:17:fe:b4:db:32:1d:5b:15:2b:51:95:14: 8d:b7:b4:74:a8:04:54:4a:35:91:8b:47:af:91:09:1c:c8:b8: c8:1d:fe:a0:a9:79:3c:65:97:19:07:9a:98:30:ac:62:63:28: 47:aa:9a:48:b8:62:4e:ba:39:07:04:7c:a7:4b:e2:e8:2f:91: bf:6d:48:3f:61:81:13:7f:a0:5d:cb:1c:1b:84:b9:e4:58:af: 68:6b:ae:6c:e9:50:29:e3:a7:7f:2b:e7:17:76:15:64:b7:41: 5e:92:e4:da:79:9f:a0:9d:2f:23:0a:2e:97:97:cc:59:65:04: 7e:90:a1:4b:ba:78:a5:47:8a:08:42:6c:88:a7:be:4a:37:a1: 47:a5:99:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLZ/w043HdBDOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2UzMzk1YjQtNDI5My00MWVhLWFiMmItMWE2MGYxNzdkMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWaReGCNxoqaYJpWjFaWK07We1Z4zsCpvcZZ ZI9l4Y7k8/R+4Xi9aKrcrYu7h+TCPjp6zF5QLs845XnCR3wm5SrVngh8/EJbMjvj 1gnNjs3o3F5lqE1oxRpu+km82LTrKjffivTKbXbdBRZmzHt+7hFULGq1BXV+H3d+ zrhaEES5JOmSgjSD6wgDSU4/SI4QrJ7rd7UBwN9f469BUQeO6RKjGSN9Izsa0UI9 wsspDFFQoPE9d20/cZDF+0AhK1IN+I44g5/RmGsmitsUVH0S+a8y7XCMaQvTOP6+ Wz2W1V0M7+YeXE18Ovirc9Ax7bAHG8Z4/3DvejwybYNe5qbYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdBIW9inOpn1r19cFjkU2iIYy1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQzMmYzZmMtODM4OC0z M2I3LTlmMjktMWYwZjRmNWIwNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/AoUc7LykvtIdgZrTabkyZMdEmY0t1KGcwLzgj7Zb7p7cMw1OGcp0S O8hhiltP8yPv+sPsOvhm5fIngS4NR1KHyPAuR+PZpspSIBKBNSzq+/WGgtXdWnPD k0Pthm/Gxp53jKjyfjesFaLtb6Kv+DPtQhf+tNsyHVsVK1GVFI23tHSoBFRKNZGL R6+RCRzIuMgd/qCpeTxllxkHmpgwrGJjKEeqmki4Yk66OQcEfKdL4ugvkb9tSD9h gRN/oF3LHBuEueRYr2hrrmzpUCnjp38r5xd2FWS3QV6S5Np5n6CdLyMKLpeXzFll BH6QoUu6eKVHighCbIinvko3oUelmco= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:30 2026 by rpki-client