$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa File: 173f706b-4656-32a0-91a1-5138081207a9.roa (raw, json) Hash identifier: x070kP3Vgu+NakBSO8kgqz3XgNtnvSVIWaJ2VsYu7TA= Subject key identifier: 6F:31:BD:86:F6:EF:3E:5E:4A:C0:9E:40:D8:67:55:DF:18:0A:2C:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C9EFC793EB345A764ACFB5F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 7029 IP address blocks: 173.189.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:79:3e:b3:45:a7:64:ac:fb:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=cb92e99a-0b18-4af1-87cd-a459c044fc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ef:4b:29:96:d1:17:3f:e0:a0:68:21:78:10: 55:0f:07:49:be:82:55:34:8e:c8:3b:a9:6d:8e:77: f6:60:0a:ab:36:5c:f4:52:e4:9e:4e:51:e4:82:7b: 33:57:44:2f:59:93:80:c2:40:2a:f7:f1:1e:e5:0c: c7:8e:4d:fa:c0:f6:22:11:48:8d:d5:18:1a:49:a5: b5:cf:23:01:03:fb:40:0a:cf:fb:e7:e9:8e:ac:b4: 2e:86:4c:7d:36:a1:b2:c9:ab:41:25:e9:9d:30:9b: 68:40:09:ab:b3:29:81:e3:8a:9d:d4:d0:4e:67:d9: 84:92:f1:a7:cd:44:0f:a2:74:57:1b:9d:69:c5:97: e9:32:44:08:be:51:c2:86:79:d9:72:c5:ae:86:f8: 6f:59:ef:ad:9f:db:af:e9:0e:f0:89:4b:9e:4b:05: 1b:2b:a1:a5:25:c9:34:3a:cd:cc:fb:46:bd:51:16: 0f:ec:b7:ac:a7:6b:d0:d6:6a:c3:8d:0b:56:5d:b4: 89:ea:89:3c:45:48:ed:3d:49:21:73:c8:b5:02:8b: 03:ba:48:97:a4:17:64:9c:a1:0b:12:fe:cf:ea:af: 78:ab:9a:db:51:d3:5d:57:2d:6c:0e:7a:70:f6:b0: 96:04:e8:8d:50:b9:24:0b:08:40:b0:7e:1f:40:38: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:31:BD:86:F6:EF:3E:5E:4A:C0:9E:40:D8:67:55:DF:18:0A:2C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e3:62:37:fc:6c:7c:e5:04:99:ef:c2:a2:11:a0:bb:7c:62: 13:e4:e6:fb:c8:02:7e:02:9a:98:ff:44:c5:58:7e:37:31:25: 7b:2c:1b:a2:73:d8:36:a0:96:45:9c:64:6a:2b:30:d0:a6:76: 7f:34:e9:ac:c4:16:98:64:76:b6:de:8a:07:22:33:db:53:74: bf:5d:6e:2c:94:8f:85:81:d2:48:45:91:6b:f2:ad:1c:1b:4c: 9d:4c:17:8a:d4:2f:3b:b5:c4:c6:d2:d6:3a:a4:28:48:0f:04: 96:63:56:10:e3:de:8e:71:32:df:1c:38:03:29:83:b1:d5:1b: 97:b2:8f:51:b3:4b:27:4d:bc:5a:86:f4:26:6d:6e:d4:87:07: 12:a3:fa:c3:a0:77:29:7b:87:7e:26:b2:21:a1:a2:6d:0b:7a: 05:27:ad:70:9a:6b:23:b1:13:82:06:67:23:75:92:44:1e:95: 1f:00:ee:9f:aa:a9:04:1e:b0:1f:10:f7:ec:5f:50:1f:ae:5a: e5:2c:04:cd:4b:02:69:af:db:eb:1a:2d:33:9d:75:2c:2a:c5: 70:c0:e9:3a:3b:87:b7:ef:d3:25:01:50:c9:ba:3a:50:8e:52: 59:b1:84:7e:ff:39:6f:3e:0e:87:17:7a:69:30:a7:da:22:d5: 13:f8:b8:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/Hk+s0WnZKz7XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk Y2I5MmU5OWEtMGIxOC00YWYxLTg3Y2QtYTQ1OWMwNDRmYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u9LKZbRFz/goGgheBBVDwdJvoJVNI7IO6lt jnf2YAqrNlz0UuSeTlHkgnszV0QvWZOAwkAq9/Ee5QzHjk36wPYiEUiN1RgaSaW1 zyMBA/tACs/75+mOrLQuhkx9NqGyyatBJemdMJtoQAmrsymB44qd1NBOZ9mEkvGn zUQPonRXG51pxZfpMkQIvlHChnnZcsWuhvhvWe+tn9uv6Q7wiUueSwUbK6GlJck0 Os3M+0a9URYP7Lesp2vQ1mrDjQtWXbSJ6ok8RUjtPUkhc8i1AosDukiXpBdknKEL Ev7P6q94q5rbUdNdVy1sDnpw9rCWBOiNULkkCwhAsH4fQDg/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8xvYb27z5eSsCeQNhnVd8YCiyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTczZjcwNmItNDY1Ni0z MmEwLTkxYTEtNTEzODA4MTIwN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfjYjf8bHzlBJnvwqIRoLt8YhPk5vvIAn4Cmpj/RMVYfjcxJXssG6Jz 2DaglkWcZGorMNCmdn806azEFphkdrbeigciM9tTdL9dbiyUj4WB0khFkWvyrRwb TJ1MF4rULzu1xMbS1jqkKEgPBJZjVhDj3o5xMt8cOAMpg7HVG5eyj1GzSydNvFqG 9CZtbtSHBxKj+sOgdyl7h34msiGhom0LegUnrXCaayOxE4IGZyN1kkQelR8A7p+q qQQesB8Q9+xfUB+uWuUsBM1LAmmv2+saLTOddSwqxXDA6To7h7fv0yUBUMm6OlCO UlmxhH7/OW8+DocXemkwp9oi1RP4uNc= -----END CERTIFICATE-----Generated at Thu Feb 26 06:34:45 2026 by rpki-client