$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa File: 885c11da-75ed-30f3-be92-905354edd7ef.roa (raw, json) Hash identifier: 3uX4jHOi46mtoS06LktDuP+SKJYF/MXy55PIVCuwI68= Subject key identifier: 52:0F:5E:A1:8F:A1:B7:22:DB:24:30:DB:BD:E2:6F:09:86:69:4C:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BA41E6B606308295657D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 173.189.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:41:e6:b6:06:30:82:95:65:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2c4160c5-75f6-465d-825c-10c31629ea07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:72:4e:a8:6a:05:34:92:2c:09:1d:64:24: 08:75:bd:17:3d:7d:54:24:ef:91:67:f2:b5:11:92: f8:f2:37:71:54:1e:d1:0d:8b:d2:a7:9f:ec:13:83: de:de:62:93:4a:8c:2e:b5:c8:8f:4e:fc:6e:f6:68: 77:07:a8:c9:b5:11:b1:22:f1:5f:91:3b:06:39:5f: c7:ba:1a:04:95:14:0a:a0:48:d4:73:54:df:85:44: 27:67:7e:dc:a3:4a:02:34:c9:f0:0f:51:c0:22:b0: 6c:ac:7b:3a:7c:cd:68:b8:2c:d7:33:9d:c0:47:36: b1:c3:fe:d0:a0:48:89:a0:6b:70:4e:3a:4a:f2:dd: 8c:36:ae:08:e4:f6:cf:1c:33:07:50:b7:cf:29:16: 9d:b8:dc:42:ad:27:af:47:d1:d7:a2:56:8a:fb:e4: a3:cc:10:96:63:ed:53:a7:d5:b6:d5:69:06:b4:16: a4:1f:72:6c:a8:10:96:c7:b0:84:b1:a8:85:64:07: 74:36:c7:7c:e1:2f:ba:3b:8f:9e:5e:b3:08:b3:cd: 4b:f2:d7:65:76:b6:ee:0a:1a:fe:01:13:49:8e:ad: f3:ee:2c:ae:e5:55:4e:46:b2:35:28:1c:de:b1:ed: 78:66:c8:e8:78:82:91:d7:40:60:66:26:11:24:59: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0F:5E:A1:8F:A1:B7:22:DB:24:30:DB:BD:E2:6F:09:86:69:4C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2b:9f:94:99:c6:03:3d:a2:fb:11:57:a5:ac:d7:5c:1c:e1: ad:26:12:37:45:6f:cd:d2:95:58:fa:4a:46:c3:43:fc:93:70: f5:c1:d6:ca:ae:3a:84:b9:ff:51:cf:67:26:e9:15:22:cb:8e: f3:75:26:c5:d2:21:3a:07:46:d7:79:43:f1:81:53:dd:77:50: c6:7f:da:7b:4b:fb:af:71:66:cd:3d:85:59:26:d3:fc:bf:bd: 7a:5a:c8:59:25:41:8e:b3:82:49:82:15:1d:0b:ba:0f:02:a8: 41:06:2e:42:de:88:9a:93:ea:4d:2b:81:34:73:83:a9:b0:40: 4c:d7:d6:8d:2e:a2:07:af:c7:c6:7d:2a:20:c5:a0:f8:14:bd: 8f:24:c8:f4:8b:e7:51:42:69:69:97:aa:8f:4d:2d:99:28:d3: 1f:fe:f3:88:e3:9f:36:24:59:63:27:17:75:30:c8:f7:1b:5f: 65:65:cb:cf:5c:2f:c1:c8:82:0b:a3:c1:dc:0f:fd:96:36:dc: e2:33:4b:f8:0f:fb:58:bf:88:52:ee:49:2e:d4:60:4f:69:4a: 93:5a:9b:5d:73:64:2e:93:f2:63:75:52:8b:74:7f:1f:55:aa: b0:c1:49:8d:0b:2b:41:66:8b:cc:41:19:68:4d:8e:46:5f:75: 23:2d:25:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukHmtgYwgpVlfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmM0MTYwYzUtNzVmNi00NjVkLTgyNWMtMTBjMzE2MjllYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqklyTqhqBTSSLAkdZCQIdb0XPX1UJO+RZ/K1 EZL48jdxVB7RDYvSp5/sE4Pe3mKTSowutciPTvxu9mh3B6jJtRGxIvFfkTsGOV/H uhoElRQKoEjUc1TfhUQnZ37co0oCNMnwD1HAIrBsrHs6fM1ouCzXM53ARzaxw/7Q oEiJoGtwTjpK8t2MNq4I5PbPHDMHULfPKRaduNxCrSevR9HXolaK++SjzBCWY+1T p9W21WkGtBakH3JsqBCWx7CEsaiFZAd0Nsd84S+6O4+eXrMIs81L8tdldrbuChr+ ARNJjq3z7iyu5VVORrI1KBzese14ZsjoeIKR10BgZiYRJFlJXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIPXqGPobci2yQw273ibwmGaUwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODg1YzExZGEtNzVlZC0z MGYzLWJlOTItOTA1MzU0ZWRkN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYrn5SZxgM9ovsRV6Ws11wc4a0mEjdFb83SlVj6SkbDQ/yTcPXB1squ OoS5/1HPZybpFSLLjvN1JsXSIToHRtd5Q/GBU913UMZ/2ntL+69xZs09hVkm0/y/ vXpayFklQY6zgkmCFR0Lug8CqEEGLkLeiJqT6k0rgTRzg6mwQEzX1o0uogevx8Z9 KiDFoPgUvY8kyPSL51FCaWmXqo9NLZko0x/+84jjnzYkWWMnF3UwyPcbX2Vly89c L8HIggujwdwP/ZY23OIzS/gP+1i/iFLuSS7UYE9pSpNam11zZC6T8mN1Uot0fx9V qrDBSY0LK0Fmi8xBGWhNjkZfdSMtJcU= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:36 2026 by rpki-client