$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa File: 3a5e724c-cda9-381f-a608-217725a36708.roa (raw, json) Hash identifier: PamXRM0UjrQ3Eyj8yUCRXd+oJmeiJesDtGJTcBTdIYc= Subject key identifier: F6:A6:30:3D:B2:24:17:95:B7:FE:B5:C5:6D:C7:00:BF:F8:82:65:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CAB8C60D9E1A326AAB97154D8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 7029 IP address blocks: 173.185.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:60:d9:e1:a3:26:aa:b9:71:54:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=009095b6-1a1c-4c92-bd54-3653fd01c1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d0:2e:2a:d2:35:ee:a1:55:a1:96:76:fe:a1: de:70:13:4d:42:ce:25:26:87:09:6d:c3:cc:45:e7: 67:0c:49:9a:d7:8d:25:d6:69:0c:c4:1b:28:a9:db: 36:c0:96:37:27:7e:7d:30:52:b8:bc:93:e2:eb:ab: 5c:a3:e2:2b:32:bd:84:5f:1a:f0:64:44:f6:ab:34: f9:a8:08:1f:a5:1d:50:bd:b9:98:2d:02:12:54:89: cf:a8:85:7c:14:54:81:a4:64:2b:14:d6:72:59:02: 66:95:21:d9:ee:47:47:f1:dd:b0:d3:51:ed:ab:72: 83:d5:15:89:75:0b:a2:47:33:2b:1b:0d:97:fd:ea: 51:13:de:23:aa:13:80:dd:41:3e:b0:d8:32:d6:67: 92:f9:5b:1a:a4:f7:55:34:10:39:df:65:ac:62:57: b7:2b:e5:03:ae:fb:d0:0d:6c:9c:07:48:19:18:90: 32:8a:95:e7:d7:7f:b4:54:d8:5e:09:ef:17:c1:61: 06:21:9e:ed:ba:d1:72:e2:86:2c:c9:19:d9:fa:d5: 1d:a6:39:15:30:66:63:2d:65:ae:b1:55:02:f2:4e: d1:d5:32:aa:0e:11:10:15:e6:ff:62:7b:d8:9e:4b: fc:05:82:32:2e:08:88:9a:9b:18:b4:47:39:5f:1f: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A6:30:3D:B2:24:17:95:B7:FE:B5:C5:6D:C7:00:BF:F8:82:65:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a5e724c-cda9-381f-a608-217725a36708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2c:b6:1c:18:34:d0:57:5c:cb:8b:ad:5d:b6:48:14:2d:4a: a0:8b:e5:6d:8d:c2:e7:26:65:c2:0d:8a:d0:c0:f1:8b:34:96: 2a:a4:a0:c5:50:39:f4:44:17:11:8f:74:f6:e0:2c:2f:0b:ed: 6e:c0:72:2a:de:3a:21:24:96:6a:97:6b:f9:1a:14:46:cd:5a: 48:49:cd:b6:2a:51:10:79:ef:80:18:46:80:eb:2c:80:39:38: 1f:c0:b5:c1:c1:fa:a7:77:24:49:c1:83:c2:68:27:d1:2a:f7: 7a:1d:12:ea:a7:d6:29:59:9a:57:6b:55:6b:3c:ac:98:dc:e3: 8f:ca:4e:79:0d:91:35:3b:fe:39:54:db:7b:d1:81:c8:e4:f9: 53:ae:8a:84:c3:9e:e9:cb:5a:c7:70:8b:8f:c3:a5:2e:77:56: ab:08:12:60:f5:9f:24:d6:e1:b1:a4:17:74:32:cd:cf:fc:fa: 43:7f:d5:80:e3:c1:9d:69:b2:5b:0a:f5:1c:f3:cb:0e:10:d6: 4c:57:9c:88:5d:4a:e3:7d:fa:40:3d:ee:5a:f5:b2:4e:b6:24: 3b:f0:05:35:e9:71:de:d5:b9:7b:3f:fe:71:40:3f:02:59:1a: 62:42:34:a5:57:27:dd:e2:7a:c2:9d:38:aa:84:b5:72:69:c4: ba:00:dd:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjGDZ4aMmqrlxVNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk MDA5MDk1YjYtMWExYy00YzkyLWJkNTQtMzY1M2ZkMDFjMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tAuKtI17qFVoZZ2/qHecBNNQs4lJocJbcPM RednDEma140l1mkMxBsoqds2wJY3J359MFK4vJPi66tco+IrMr2EXxrwZET2qzT5 qAgfpR1QvbmYLQISVInPqIV8FFSBpGQrFNZyWQJmlSHZ7kdH8d2w01Htq3KD1RWJ dQuiRzMrGw2X/epRE94jqhOA3UE+sNgy1meS+VsapPdVNBA532WsYle3K+UDrvvQ DWycB0gZGJAyipXn13+0VNheCe8XwWEGIZ7tutFy4oYsyRnZ+tUdpjkVMGZjLWWu sVUC8k7R1TKqDhEQFeb/YnvYnkv8BYIyLgiImpsYtEc5Xx9jKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPamMD2yJBeVt/61xW3HAL/4gmVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2E1ZTcyNGMtY2RhOS0z ODFmLWE2MDgtMjE3NzI1YTM2NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbmRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAsthwYNNBXXMuLrV22SBQtSqCL5W2NwucmZcINitDA8Ys0liqkoMVQ OfREFxGPdPbgLC8L7W7AcireOiEklmqXa/kaFEbNWkhJzbYqURB574AYRoDrLIA5 OB/AtcHB+qd3JEnBg8JoJ9Eq93odEuqn1ilZmldrVWs8rJjc44/KTnkNkTU7/jlU 23vRgcjk+VOuioTDnunLWsdwi4/DpS53VqsIEmD1nyTW4bGkF3Qyzc/8+kN/1YDj wZ1pslsK9Rzzyw4Q1kxXnIhdSuN9+kA97lr1sk62JDvwBTXpcd7VuXs//nFAPwJZ GmJCNKVXJ93iesKdOKqEtXJpxLoA3fc= -----END CERTIFICATE-----Generated at Thu Feb 26 06:32:43 2026 by rpki-client