$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa File: 64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa (raw, json) Hash identifier: X82p3IOkXNyuEP8W2Ylb62sLc0YTjCjSkAf0nsTLzxs= Subject key identifier: F2:2A:1F:E5:78:1D:0E:85:3A:01:BE:7B:7C:8B:0D:A7:B2:26:C8:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BDDDF2FCAE08E971CD40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 173.190.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:bd:dd:f2:fc:ae:08:e9:71:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=9f28bec9-a5c5-49e8-8d76-347d4c6c5e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:60:6a:6f:6b:ce:3c:71:72:26:2a:ec:88: 70:7e:82:e5:96:b8:60:ef:c9:8a:a8:d4:86:08:ac: 50:4e:97:cf:de:c6:8b:68:24:35:e3:d9:9f:09:79: b2:ed:ce:5a:c7:f7:0a:67:24:38:0b:6c:fc:e6:a7: 9a:7b:d8:fa:6d:37:16:1a:91:f6:a4:1e:75:ae:4b: e3:f0:62:fe:51:4d:60:a0:4e:1a:b7:b6:59:dc:1f: 4d:57:30:e8:29:7a:23:51:4c:15:66:0d:8e:e1:20: 5e:34:10:77:a7:e3:c4:07:a9:b6:a8:7f:b1:cd:e2: 7b:4a:cf:b3:f7:ca:cd:74:bf:e0:de:7b:3e:e8:73: 79:27:b8:3b:7a:e0:ab:be:22:73:4b:e9:a2:f0:c6: 53:5c:c6:a9:d6:4d:01:88:b0:08:34:75:11:a1:3b: ab:d4:bf:5d:a3:a5:87:a9:f9:0c:68:f2:cf:f8:c6: e9:ae:b4:b8:49:5b:4d:66:c2:1a:65:85:16:32:2f: 03:09:29:92:32:a0:cc:92:65:18:ce:6e:f4:48:84: 21:56:ac:90:3f:23:08:a7:5f:a2:00:25:28:49:a9: 1d:61:cd:82:52:6f:f6:9c:db:f3:dd:94:ed:82:9c: f6:11:5b:2d:94:ef:ed:50:c6:1c:4d:5d:28:d1:48: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2A:1F:E5:78:1D:0E:85:3A:01:BE:7B:7C:8B:0D:A7:B2:26:C8:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64f7c3b3-99f4-3d27-a8d9-0162ba6ae154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f7:43:e7:c2:ce:3f:f2:db:80:5a:54:2e:31:84:93:82:d5: 6f:ed:db:73:0c:0b:0d:11:97:0d:aa:43:c7:50:a6:4d:ff:d7: ec:25:7d:9e:1e:df:40:b3:e8:cd:f7:9c:27:a2:a5:dd:77:11: e1:54:dc:eb:4f:ca:f9:27:e5:49:9f:f1:1e:84:7f:65:ef:f6: aa:92:70:f5:b4:61:d0:ab:9f:c2:08:b2:99:c2:81:8e:74:e3: 09:6d:50:05:9d:10:17:f2:d0:00:37:0d:65:eb:b1:42:21:1b: 23:22:4c:42:5f:8b:7e:af:6e:4a:b3:f3:dc:f3:10:c0:eb:a0: 98:0b:a7:d5:70:32:e7:36:90:df:f4:7f:a4:84:ac:29:c5:e5: 10:a2:10:17:cd:13:f0:16:b4:35:59:2b:13:8a:5e:1a:c1:cd: 17:f2:2d:d2:17:38:32:55:90:00:fe:a1:ee:17:8c:b2:f8:18: 56:0a:be:6c:82:c5:15:b4:5e:d8:28:b9:89:76:78:7c:9a:f6: 95:ac:6c:fd:52:17:80:d6:e6:12:15:51:51:ed:da:88:1a:92: 10:32:71:b5:e1:b9:c6:6b:fa:64:84:d4:63:d0:ff:31:8f:98: 2d:f8:38:a3:40:a7:95:28:f2:4d:de:21:af:d2:f9:00:9c:da: d4:aa:08:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ73d8vyuCOlxzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OWYyOGJlYzktYTVjNS00OWU4LThkNzYtMzQ3ZDRjNmM1ZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEdgam9rzjxxciYq7IhwfoLllrhg78mKqNSG CKxQTpfP3saLaCQ149mfCXmy7c5ax/cKZyQ4C2z85qeae9j6bTcWGpH2pB51rkvj 8GL+UU1goE4at7ZZ3B9NVzDoKXojUUwVZg2O4SBeNBB3p+PEB6m2qH+xzeJ7Ss+z 98rNdL/g3ns+6HN5J7g7euCrviJzS+mi8MZTXMap1k0BiLAINHURoTur1L9do6WH qfkMaPLP+MbprrS4SVtNZsIaZYUWMi8DCSmSMqDMkmUYzm70SIQhVqyQPyMIp1+i ACUoSakdYc2CUm/2nNvz3ZTtgpz2EVstlO/tUMYcTV0o0UgNGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIqH+V4HQ6FOgG+e3yLDaeyJsgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRmN2MzYjMtOTlmNC0z ZDI3LWE4ZDktMDE2MmJhNmFlMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH3Q+fCzj/y24BaVC4xhJOC1W/t23MMCw0Rlw2qQ8dQpk3/1+wlfZ4e 30Cz6M33nCeipd13EeFU3OtPyvkn5Umf8R6Ef2Xv9qqScPW0YdCrn8IIspnCgY50 4wltUAWdEBfy0AA3DWXrsUIhGyMiTEJfi36vbkqz89zzEMDroJgLp9VwMuc2kN/0 f6SErCnF5RCiEBfNE/AWtDVZKxOKXhrBzRfyLdIXODJVkAD+oe4XjLL4GFYKvmyC xRW0XtgouYl2eHya9pWsbP1SF4DW5hIVUVHt2ogakhAycbXhucZr+mSE1GPQ/zGP mC34OKNAp5Uo8k3eIa/S+QCc2tSqCJ0= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:07 2026 by rpki-client