$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa File: 1359896e-50e4-34a1-9043-424e4c0414c3.roa (raw, json) Hash identifier: +kIheMkdZ48YxambJKprWN4em+FcR7hROKDm8G0J2Ws= Subject key identifier: 1E:33:76:A9:29:C5:DF:FC:9A:FB:84:EC:33:E4:9D:3A:15:EE:6E:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB68AA2183D71E8E43A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 173.187.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b6:8a:a2:18:3d:71:e8:e4:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=fdd3b54c-3973-49d5-9122-a30aac4c5aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e0:ee:1b:d7:d9:65:26:9e:a6:64:30:0a:3e: d6:3b:25:1e:9d:fa:d3:be:21:00:e8:20:81:6d:6f: ab:58:af:45:03:6e:a0:8a:c0:1b:85:ad:ed:ed:aa: 0e:d8:43:77:81:3c:08:31:2d:ae:52:ed:fc:fd:db: 50:09:29:eb:dc:60:74:66:c2:96:ba:b4:55:dd:f0: e7:58:73:73:bb:81:33:18:5d:5b:08:5d:97:5c:63: 8e:8e:02:f8:68:d3:b0:7a:a2:d2:a1:9f:e3:38:fb: 78:c2:1e:8c:b1:39:f1:c2:7e:2a:e7:a6:d4:fa:ed: 86:d8:9b:eb:dc:00:8b:67:2c:2f:b0:a6:f4:94:36: 29:a5:1d:a6:1c:94:8a:57:65:01:a4:54:d6:56:27: f2:d6:59:2e:f0:f6:24:fe:4f:80:64:6c:a1:b9:fb: b2:61:52:81:67:de:0a:c1:6c:a9:5b:46:dc:15:38: c9:f8:f6:2c:2d:ff:11:74:1f:5b:25:83:f7:86:7d: 47:ec:5c:d1:99:af:9a:2e:76:a5:69:c9:db:d4:bf: 19:9c:4e:62:29:d0:44:2a:d9:5a:90:e9:a2:26:6f: 9d:81:9c:e8:db:1b:e5:78:d2:7a:a5:d7:87:5f:61: bf:26:75:29:b5:34:ba:2d:29:05:2f:b8:c4:33:ba: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:33:76:A9:29:C5:DF:FC:9A:FB:84:EC:33:E4:9D:3A:15:EE:6E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:45:f4:5a:37:b5:ff:ac:a1:6f:7b:f1:e3:47:e4:14:1f:53: bd:c7:c4:d8:e6:7d:a3:cf:3f:97:14:16:f8:20:ae:d0:2d:c4: 82:dd:35:89:9a:5f:47:ad:21:40:df:de:ad:37:96:e5:8d:57: 43:7d:27:30:99:38:51:0a:3c:f3:f3:18:04:00:e3:41:41:2c: 7a:49:0c:0f:60:1d:a6:45:c1:b7:33:e1:97:ff:85:de:4a:9e: 9f:fc:1e:ed:38:99:bd:d1:94:78:b0:d2:6f:25:be:79:ac:be: cf:91:96:bf:5c:ca:03:dd:8c:70:68:fc:92:79:f3:63:ca:54: 7b:6e:cf:d8:03:e7:8e:39:00:c8:c7:fc:30:66:2f:e6:d4:75: 8a:4c:c3:b8:d4:60:f7:fb:23:35:df:01:6f:09:50:52:91:99: c7:12:95:71:d1:d0:0f:21:1f:08:e9:d0:66:49:7d:30:bd:fd: 4e:33:97:54:48:82:a8:d6:25:73:96:57:ce:25:2f:27:6f:ef: 87:a6:8c:78:ef:57:78:c5:11:e0:4f:ae:f7:86:59:56:5b:1b: d1:a1:67:9a:1f:17:bb:1f:c9:b2:79:89:6d:d5:31:22:c3:d6: 31:88:a2:83:12:f2:a6:ef:52:03:0a:09:83:72:bc:73:5c:23: c9:29:41:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLaKohg9cejkOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZmRkM2I1NGMtMzk3My00OWQ1LTkxMjItYTMwYWFjNGM1YWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuODuG9fZZSaepmQwCj7WOyUenfrTviEA6CCB bW+rWK9FA26gisAbha3t7aoO2EN3gTwIMS2uUu38/dtQCSnr3GB0ZsKWurRV3fDn WHNzu4EzGF1bCF2XXGOOjgL4aNOweqLSoZ/jOPt4wh6MsTnxwn4q56bU+u2G2Jvr 3ACLZywvsKb0lDYppR2mHJSKV2UBpFTWVify1lku8PYk/k+AZGyhufuyYVKBZ94K wWypW0bcFTjJ+PYsLf8RdB9bJYP3hn1H7FzRma+aLnalacnb1L8ZnE5iKdBEKtla kOmiJm+dgZzo2xvleNJ6pdeHX2G/JnUptTS6LSkFL7jEM7pFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4zdqkpxd/8mvuE7DPknToV7m4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTM1OTg5NmUtNTBlNC0z NGExLTkwNDMtNDI0ZTRjMDQxNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBF9Fo3tf+soW978eNH5BQfU73HxNjmfaPPP5cUFvggrtAtxILdNYma X0etIUDf3q03luWNV0N9JzCZOFEKPPPzGAQA40FBLHpJDA9gHaZFwbcz4Zf/hd5K np/8Hu04mb3RlHiw0m8lvnmsvs+Rlr9cygPdjHBo/JJ582PKVHtuz9gD5445AMjH /DBmL+bUdYpMw7jUYPf7IzXfAW8JUFKRmccSlXHR0A8hHwjp0GZJfTC9/U4zl1RI gqjWJXOWV84lLydv74emjHjvV3jFEeBPrveGWVZbG9GhZ5ofF7sfybJ5iW3VMSLD 1jGIooMS8qbvUgMKCYNyvHNcI8kpQY8= -----END CERTIFICATE-----Generated at Mon Apr 13 11:42:05 2026 by rpki-client