$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88d3b95d-f0f9-3bf2-ab83-120da0963712.roa File: 88d3b95d-f0f9-3bf2-ab83-120da0963712.roa (raw, json) Hash identifier: 7DPvKfB5C6eDNXk8YCkqfpTw5r2x0xQlwYiCpuCRavA= Subject key identifier: E1:FD:F3:4C:04:8A:F5:1B:9B:EB:BF:7D:AD:F1:01:A6:24:E8:21:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D71230AF8478E874E79333600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88d3b95d-f0f9-3bf2-ab83-120da0963712.roa Signing time: Wed 08 Apr 2026 20:38:32 +0000 ROA not before: Wed 08 Apr 2026 20:38:32 +0000 ROA not after: Tue 07 Jul 2026 20:38:32 +0000 asID: 7029 IP address blocks: 173.213.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:23:0a:f8:47:8e:87:4e:79:33:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 8 20:38:32 2026 GMT Not After : Jul 7 20:38:32 2026 GMT Subject: CN=9762b303-743d-4dba-b0d7-33e9643a8dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bd:92:27:40:eb:e9:59:e2:1f:7a:4b:9f:9e: 49:ea:0a:ae:ff:3b:c1:55:15:89:96:27:26:8b:00: 61:c8:b5:a2:d3:dd:26:a1:da:68:a4:56:dc:99:0d: d1:16:32:bf:ec:c2:52:d7:af:07:09:cd:51:f9:3d: 07:9b:73:e8:ec:08:58:18:04:65:f2:10:df:72:ce: 77:a3:ce:5d:bc:60:1b:84:4f:4b:5b:d8:db:ed:c0: 0a:5c:d1:54:94:e3:18:04:c0:11:44:b4:c8:d9:e6: 8a:15:5e:c0:8f:00:d7:04:47:34:46:20:f0:9c:f3: a5:6a:e8:77:94:f5:ea:27:9a:cd:b4:0e:36:9c:ab: 7b:fe:37:ed:b5:5e:07:63:33:c4:6e:cb:e2:58:f1: de:9f:77:3c:c8:b9:23:72:72:6c:bd:96:a3:8a:84: 2d:1b:dd:b6:1d:d3:23:4f:29:d8:cc:68:09:52:78: 37:b8:3d:0b:db:6c:15:46:d2:ec:aa:73:36:4e:ae: 75:93:1f:bc:46:00:20:3e:a2:58:9f:1d:4f:33:a1: 6b:7e:4f:ee:d3:2f:73:ed:75:ef:e9:ec:a9:4c:9f: 38:4e:c9:46:7d:43:c4:00:c1:27:71:32:3e:f6:5e: 6c:3c:56:47:81:c8:1f:67:dc:9d:7d:44:e4:3a:bd: 6d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FD:F3:4C:04:8A:F5:1B:9B:EB:BF:7D:AD:F1:01:A6:24:E8:21:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88d3b95d-f0f9-3bf2-ab83-120da0963712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b3:68:2b:bb:ac:fc:73:26:91:f3:c6:95:e7:01:cf:67:27: 2d:aa:12:32:cb:d5:ad:a5:11:2a:79:09:d5:e3:da:99:df:48: 0e:8d:c9:54:0d:ce:74:70:f0:ab:b7:ba:fb:29:12:86:7a:eb: e6:ae:c3:9a:fb:1f:10:f1:c5:09:4b:07:21:c9:c9:a5:63:cd: ac:78:90:37:e1:ce:a2:b2:8d:53:c2:11:0a:3d:9f:d9:08:6a: 30:27:c1:23:ff:ea:e4:f8:8d:ed:c9:2a:2a:bd:aa:71:ce:9c: 55:4a:97:63:be:ac:7e:80:68:8a:49:ec:a3:38:85:04:5d:4f: 09:08:41:ff:95:04:a3:60:da:0c:a2:2f:5d:65:89:6c:30:1e: c5:c2:c1:84:bc:5a:a2:ae:3b:31:1c:bf:4c:b1:df:ea:92:a0: a2:ad:ac:1b:b0:e3:be:c9:78:49:28:bd:12:2a:36:05:2c:81: 86:61:27:99:f1:9f:20:5f:53:29:fe:d6:11:34:97:e8:b9:7c: 4e:90:6a:5b:26:ea:39:f6:39:34:53:87:bf:d6:7d:41:69:7a: a4:d6:c9:6f:80:33:47:9e:f8:a5:0e:b8:e4:dc:3a:ec:2b:76: 8f:0d:b9:a8:ca:1c:e6:21:77:cd:df:84:76:74:23:a6:57:88: c7:3a:26:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xIwr4R46HTnkzNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwODIwMzgzMloXDTI2MDcwNzIwMzgzMlowLzEtMCsGA1UEAxMk OTc2MmIzMDMtNzQzZC00ZGJhLWIwZDctMzNlOTY0M2E4ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r2SJ0Dr6VniH3pLn55J6gqu/zvBVRWJlicm iwBhyLWi090modpopFbcmQ3RFjK/7MJS168HCc1R+T0Hm3Po7AhYGARl8hDfcs53 o85dvGAbhE9LW9jb7cAKXNFUlOMYBMARRLTI2eaKFV7AjwDXBEc0RiDwnPOlauh3 lPXqJ5rNtA42nKt7/jfttV4HYzPEbsviWPHen3c8yLkjcnJsvZajioQtG922HdMj TynYzGgJUng3uD0L22wVRtLsqnM2Tq51kx+8RgAgPqJYnx1PM6Frfk/u0y9z7XXv 6eypTJ84TslGfUPEAMEncTI+9l5sPFZHgcgfZ9ydfUTkOr1t0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOH980wEivUbm+u/fa3xAaYk6CEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODhkM2I5NWQtZjBmOS0z YmYyLWFiODMtMTIwZGEwOTYzNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJazaCu7rPxzJpHzxpXnAc9nJy2qEjLL1a2lESp5CdXj2pnfSA6NyVQN znRw8Ku3uvspEoZ66+auw5r7HxDxxQlLByHJyaVjzax4kDfhzqKyjVPCEQo9n9kI ajAnwSP/6uT4je3JKiq9qnHOnFVKl2O+rH6AaIpJ7KM4hQRdTwkIQf+VBKNg2gyi L11liWwwHsXCwYS8WqKuOzEcv0yx3+qSoKKtrBuw477JeEkovRIqNgUsgYZhJ5nx nyBfUyn+1hE0l+i5fE6Qalsm6jn2OTRTh7/WfUFpeqTWyW+AM0ee+KUOuOTcOuwr do8NuajKHOYhd83fhHZ0I6ZXiMc6JjA= -----END CERTIFICATE-----Generated at Mon Apr 13 11:38:27 2026 by rpki-client