$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa File: d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa (raw, json) Hash identifier: vjuaciXtb5G4FkhASnH9Jh9Ryj14tFnsE/ZNE/9FtZ8= Subject key identifier: 2D:94:18:22:5E:CD:D7:93:95:08:E9:13:4E:A8:84:C1:39:BC:9A:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D4D5A4A7EF4ED8DB3E7FDD900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7029 IP address blocks: 173.189.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4a:7e:f4:ed:8d:b3:e7:fd:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=e061fe66-08c3-4446-9f60-0b3e81f57e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b6:20:01:27:ae:85:c6:22:3f:ed:7d:af:50: a8:7c:d2:8c:72:c4:bf:0e:92:83:3d:e2:73:01:59: 7a:c4:74:d5:75:52:e7:bd:ee:e7:d5:2a:ea:51:e3: be:37:c9:9f:27:ac:2c:e7:f4:0a:45:99:65:71:4c: 9a:98:aa:e3:40:48:16:19:7e:ab:c0:e9:90:9f:ae: 57:24:eb:0c:ba:84:3d:8e:6d:e9:bf:a0:8f:bd:e9: f4:44:d1:21:5a:00:ea:1b:cf:d7:22:59:5d:86:18: e6:6c:23:6b:67:24:33:0d:a4:94:af:07:8d:c5:63: 3a:24:16:36:c6:fe:bc:74:04:1e:72:d1:56:ba:18: 98:19:96:9f:cd:09:71:2c:e1:d7:95:ac:b2:d5:33: 2a:ae:de:4a:03:94:37:0b:6e:77:5f:17:f5:90:03: 2a:d6:87:62:47:f7:cd:de:2e:c0:3f:b3:fd:e4:1a: 39:d8:a9:44:2d:22:8b:44:a4:cc:93:4e:43:c4:56: 4e:cc:af:10:f5:0a:8c:28:75:cd:e2:92:b7:8b:de: 47:cd:79:21:80:17:4a:e4:2a:00:0b:dc:3a:ee:ad: 84:3b:e7:4d:e4:1a:c4:9c:92:e6:93:14:48:5c:a1: bc:25:f5:94:1d:e1:4b:18:9e:4f:63:4b:bc:da:0e: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:94:18:22:5E:CD:D7:93:95:08:E9:13:4E:A8:84:C1:39:BC:9A:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d03a215c-cd4e-37d2-8a48-2b31308c35d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:55:50:28:40:c6:3f:af:f4:7c:43:ab:40:47:78:9d:27:e2: a3:a7:0b:9f:55:94:ce:df:5f:06:dc:9f:a3:13:17:70:5c:6b: c1:67:65:7a:b4:6d:36:3f:e1:cd:3d:4e:5f:f7:5c:ce:a2:ea: a8:3e:56:0c:ed:e9:35:eb:a9:94:89:f4:3f:11:c1:90:e6:49: 3b:d6:ba:6b:55:16:12:44:d5:bd:4c:34:57:fc:86:b3:77:12: 02:01:58:ce:d4:29:0e:3d:87:80:d8:dd:40:47:6a:0b:df:78: 73:50:28:0e:c5:ba:1d:c3:26:f6:93:3d:dc:3f:9f:c2:ef:aa: 63:e7:bf:ea:2b:51:f6:f2:ab:bf:35:38:d0:c7:54:25:e6:a2: 02:fb:23:77:2d:37:cc:58:1e:fc:8c:af:5c:ed:07:a6:53:c1: 63:ad:2b:43:51:7e:38:8b:a5:0e:ff:b2:b4:f9:fd:66:a9:3d: 0c:80:6e:ae:06:e5:5c:22:f8:f0:38:2d:8e:03:44:21:52:f1: 84:43:4c:26:21:38:e7:e9:8b:30:9f:34:b0:00:5c:04:67:85: a1:69:09:91:1d:98:99:66:13:11:fa:cf:46:45:e9:e4:02:04: df:c4:dc:86:20:42:46:51:b0:a2:dd:70:94:ac:74:3d:3d:be: 00:52:e7:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkp+9O2Ns+f92QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZTA2MWZlNjYtMDhjMy00NDQ2LTlmNjAtMGIzZTgxZjU3ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLYgASeuhcYiP+19r1CofNKMcsS/DpKDPeJz AVl6xHTVdVLnve7n1SrqUeO+N8mfJ6ws5/QKRZllcUyamKrjQEgWGX6rwOmQn65X JOsMuoQ9jm3pv6CPven0RNEhWgDqG8/XIlldhhjmbCNrZyQzDaSUrweNxWM6JBY2 xv68dAQectFWuhiYGZafzQlxLOHXlayy1TMqrt5KA5Q3C253Xxf1kAMq1odiR/fN 3i7AP7P95Bo52KlELSKLRKTMk05DxFZOzK8Q9QqMKHXN4pK3i95HzXkhgBdK5CoA C9w67q2EO+dN5BrEnJLmkxRIXKG8JfWUHeFLGJ5PY0u82g7r5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2UGCJezdeTlQjpE06ohME5vJqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDAzYTIxNWMtY2Q0ZS0z N2QyLThhNDgtMmIzMTMwOGMzNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERVUChAxj+v9HxDq0BHeJ0n4qOnC59VlM7fXwbcn6MTF3Bca8FnZXq0 bTY/4c09Tl/3XM6i6qg+Vgzt6TXrqZSJ9D8RwZDmSTvWumtVFhJE1b1MNFf8hrN3 EgIBWM7UKQ49h4DY3UBHagvfeHNQKA7Fuh3DJvaTPdw/n8LvqmPnv+orUfbyq781 ONDHVCXmogL7I3ctN8xYHvyMr1ztB6ZTwWOtK0NRfjiLpQ7/srT5/WapPQyAbq4G 5Vwi+PA4LY4DRCFS8YRDTCYhOOfpizCfNLAAXARnhaFpCZEdmJlmExH6z0ZF6eQC BN/E3IYgQkZRsKLdcJSsdD09vgBS51E= -----END CERTIFICATE-----Generated at Mon Apr 13 11:38:43 2026 by rpki-client