$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/682e62d0-0292-34c0-a39e-7c968646685b.roa File: 682e62d0-0292-34c0-a39e-7c968646685b.roa (raw, json) Hash identifier: cA/tE55MmJs46gVQbYffd9JaK5njioZU5D09izzoqTI= Subject key identifier: 21:0A:A5:68:60:32:50:E2:11:17:07:3B:7B:67:29:2F:0A:73:FE:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CFB4E306C50589B83B79A9140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/682e62d0-0292-34c0-a39e-7c968646685b.roa Signing time: Wed 25 Feb 2026 15:40:04 +0000 ROA not before: Wed 25 Feb 2026 15:40:04 +0000 ROA not after: Tue 26 May 2026 14:40:04 +0000 asID: 7029 IP address blocks: 173.187.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:4e:30:6c:50:58:9b:83:b7:9a:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 25 15:40:04 2026 GMT Not After : May 26 14:40:04 2026 GMT Subject: CN=601912e0-4b26-47cf-9890-6bb99224b2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:7f:79:07:f4:39:12:12:9f:30:0a:dd:f7: 15:f6:36:08:25:73:08:ed:e3:81:b3:03:4a:e2:81: 30:d1:16:c6:b6:10:02:c6:d6:c5:b0:e2:0c:48:ce: 55:34:8d:8a:57:e9:15:24:2e:da:da:90:20:36:18: 89:bf:d9:61:5b:87:df:4a:ad:ff:f9:b4:41:22:2d: c2:cd:31:8b:6d:44:6f:01:a5:de:be:c6:96:1c:1a: 12:09:9d:81:97:d7:cd:c3:21:a5:09:7c:81:80:5d: 34:bf:ea:9a:8e:f2:8a:bd:2c:6c:9a:31:a7:75:a2: cc:be:46:fc:93:14:22:66:02:4a:ff:1f:35:16:8b: de:ba:13:73:f1:39:87:49:60:5c:bf:39:a6:79:d2: 76:ee:6c:37:d4:55:ea:55:22:3b:c1:93:51:f4:70: 6a:51:b7:bf:1a:1c:fb:9e:23:3b:9a:60:d7:c6:4f: 9f:55:0f:5f:fd:89:93:69:0f:f7:d1:4e:b2:2f:e3: 20:16:74:fa:94:9f:19:3e:ab:85:52:16:2f:30:3e: f7:6c:4d:35:52:5d:87:d0:2d:af:2c:6b:2f:47:65: 21:fb:2f:67:cd:a2:ca:3a:71:2b:ef:25:9e:2d:c2: 28:27:f7:3e:72:31:da:df:13:ef:e8:b1:24:2c:b9: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0A:A5:68:60:32:50:E2:11:17:07:3B:7B:67:29:2F:0A:73:FE:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/682e62d0-0292-34c0-a39e-7c968646685b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d4:94:ea:76:3f:42:88:c2:1f:04:ee:34:72:2f:75:28:37: 17:bd:38:b3:97:39:e7:a6:5f:f4:79:85:d5:a0:91:a1:70:6f: ca:eb:7a:d8:28:fc:2d:06:66:7b:bc:b8:0d:18:87:f0:da:e8: f6:e7:58:09:72:53:92:b1:74:bb:b2:1b:26:4d:00:e0:a1:c0: a2:cc:6f:10:ee:26:ed:3b:47:1d:75:77:1b:c5:7f:17:16:a4: b7:e4:67:35:97:52:b5:fd:0d:5b:bb:aa:93:62:f1:b5:35:63: 22:36:fc:1e:62:35:38:05:1c:ab:90:71:a4:23:e9:2f:b0:9c: 86:db:00:93:42:a6:98:9d:78:d5:06:9d:99:a1:50:df:bf:21: 9d:82:dc:58:80:ab:87:d4:49:81:44:6f:f0:13:6e:f2:3e:07: 3d:d0:91:6e:94:70:1f:7b:f1:2c:c9:8c:00:a2:4e:15:91:9e: f1:76:72:83:ac:1f:74:9c:ce:ea:c8:0a:d9:b6:e3:fc:ac:4d: 6b:fd:b0:4d:24:e9:22:45:47:14:1a:51:a5:23:1b:d6:27:3d: a0:7d:a8:44:8b:27:40:7b:7b:73:8e:6c:6c:bc:f8:9c:89:13: af:29:37:03:d7:7f:1b:10:f4:9b:de:4b:4e:bd:56:a5:4e:cd: 80:b8:55:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7TjBsUFibg7eakUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNTE1NDAwNFoXDTI2MDUyNjE0NDAwNFowLzEtMCsGA1UEAxMk NjAxOTEyZTAtNGIyNi00N2NmLTk4OTAtNmJiOTkyMjRiMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTh/eQf0ORISnzAK3fcV9jYIJXMI7eOBswNK 4oEw0RbGthACxtbFsOIMSM5VNI2KV+kVJC7a2pAgNhiJv9lhW4ffSq3/+bRBIi3C zTGLbURvAaXevsaWHBoSCZ2Bl9fNwyGlCXyBgF00v+qajvKKvSxsmjGndaLMvkb8 kxQiZgJK/x81FoveuhNz8TmHSWBcvzmmedJ27mw31FXqVSI7wZNR9HBqUbe/Ghz7 niM7mmDXxk+fVQ9f/YmTaQ/30U6yL+MgFnT6lJ8ZPquFUhYvMD73bE01Ul2H0C2v LGsvR2Uh+y9nzaLKOnEr7yWeLcIoJ/c+cjHa3xPv6LEkLLmK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEKpWhgMlDiERcHO3tnKS8Kc/6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjgyZTYyZDAtMDI5Mi0z NGMwLWEzOWUtN2M5Njg2NDY2ODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3UlOp2P0KIwh8E7jRyL3UoNxe9OLOXOeemX/R5hdWgkaFwb8rretgo /C0GZnu8uA0Yh/Da6PbnWAlyU5KxdLuyGyZNAOChwKLMbxDuJu07Rx11dxvFfxcW pLfkZzWXUrX9DVu7qpNi8bU1YyI2/B5iNTgFHKuQcaQj6S+wnIbbAJNCppideNUG nZmhUN+/IZ2C3FiAq4fUSYFEb/ATbvI+Bz3QkW6UcB978SzJjACiThWRnvF2coOs H3SczurICtm24/ysTWv9sE0k6SJFRxQaUaUjG9YnPaB9qESLJ0B7e3OObGy8+JyJ E68pNwPXfxsQ9JveS069VqVOzYC4VQg= -----END CERTIFICATE-----Generated at Thu Feb 26 06:28:35 2026 by rpki-client