$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1155578-fa9e-3582-a636-4fbedf01e3c9.roa File: f1155578-fa9e-3582-a636-4fbedf01e3c9.roa (raw, json) Hash identifier: d0AAZsCfDGPEMqeardtqfISXJ3fg2MyRKtSZxYmRTL0= Subject key identifier: 1D:73:9A:C0:88:E4:D6:40:1C:02:AE:4B:7F:F1:51:AE:03:F3:31:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BF362A1366D72BB298E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1155578-fa9e-3582-a636-4fbedf01e3c9.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 173.189.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:bf:36:2a:13:66:d7:2b:b2:98:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=2e9572ec-9c53-4278-81aa-a7b0ca602f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:5a:45:0e:2c:a5:3a:f8:d1:f7:ff:58:72: 4e:b6:46:9c:c4:0b:44:85:db:78:6e:a0:b1:f0:a5: 20:00:a6:70:83:48:93:1c:31:7d:fa:e7:6b:c1:99: 65:b6:ff:b1:b2:9f:38:ed:fe:a4:66:ae:09:23:35: 8e:c7:12:18:a9:31:75:17:cc:00:d0:b5:8f:41:bd: 13:c5:cd:41:b7:83:2f:2c:34:14:8b:0a:d3:90:2d: ea:72:2a:9a:6a:45:78:53:59:86:f5:f0:eb:56:af: 36:46:8b:f5:b6:db:67:f5:f9:55:27:1e:36:38:a0: 3d:63:21:64:39:a4:cb:f5:ea:c1:2c:8e:c7:31:57: f5:1e:e6:32:73:59:b1:5d:e6:4e:fa:99:bc:cc:67: 31:de:6e:d2:39:b3:b0:d7:e1:a7:f1:e1:f8:36:61: bd:5b:b3:30:4d:c5:27:84:8f:1a:74:5d:94:2c:c5: 03:82:59:84:35:dd:af:1c:55:c1:a3:c0:2b:b5:2a: 66:ed:91:c4:60:63:45:47:24:c4:a4:f7:e6:7b:01: e3:76:75:14:9a:13:23:be:57:b5:61:67:74:06:e2: 90:c2:e7:41:74:5d:c9:31:a6:86:38:45:8a:fd:22: 60:1d:7c:52:36:89:20:01:4a:3e:ca:7a:31:66:e0: 8a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:73:9A:C0:88:E4:D6:40:1C:02:AE:4B:7F:F1:51:AE:03:F3:31:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1155578-fa9e-3582-a636-4fbedf01e3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5d:93:a4:b0:87:f4:62:aa:11:f1:09:78:61:27:39:05:dc: 8e:43:19:e4:98:2e:9e:0d:1e:72:f4:63:17:1d:99:ce:51:d1: b7:e3:d5:d3:30:c3:ac:6e:9e:2b:cd:c2:ed:f9:20:79:31:b3: 34:02:63:2a:28:fd:43:1a:07:bd:c6:58:42:a1:a6:43:dd:55: 41:98:cc:24:42:d1:49:42:fb:25:36:2b:82:0a:e4:1f:65:49: 01:68:95:26:04:26:8e:46:15:0e:bc:32:90:09:cc:ea:45:cf: 07:a7:66:42:f5:ec:80:92:6c:77:3a:48:e1:7d:3c:85:7d:25: 51:2e:2b:96:b2:cc:39:48:c8:25:0a:d7:4b:60:59:19:ca:a0: dd:21:90:d4:08:74:a4:d9:7c:f7:d0:60:e3:f5:ef:11:df:b3: 19:2f:b3:29:b8:94:e3:6f:c2:37:b5:79:6c:cb:8d:c6:1c:c6: ee:b3:bb:6d:f9:3d:c2:73:37:22:04:fd:e7:be:4f:61:c7:d5: fa:52:a8:a1:d3:3e:fc:46:d8:c4:03:e6:1a:7a:cc:2c:04:64: b0:18:17:1d:06:65:76:6e:2f:e0:4f:51:b5:56:97:f7:48:fa: cd:8f:ff:3f:da:99:82:b8:de:e9:6a:0f:6e:65:a8:12:55:04: 58:d8:a1:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ782KhNm1yuymOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MmU5NTcyZWMtOWM1My00Mjc4LTgxYWEtYTdiMGNhNjAyZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/paRQ4spTr40ff/WHJOtkacxAtEhdt4bqCx 8KUgAKZwg0iTHDF9+udrwZlltv+xsp847f6kZq4JIzWOxxIYqTF1F8wA0LWPQb0T xc1Bt4MvLDQUiwrTkC3qciqaakV4U1mG9fDrVq82Rov1tttn9flVJx42OKA9YyFk OaTL9erBLI7HMVf1HuYyc1mxXeZO+pm8zGcx3m7SObOw1+Gn8eH4NmG9W7MwTcUn hI8adF2ULMUDglmENd2vHFXBo8ArtSpm7ZHEYGNFRyTEpPfmewHjdnUUmhMjvle1 YWd0BuKQwudBdF3JMaaGOEWK/SJgHXxSNokgAUo+ynoxZuCKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1zmsCI5NZAHAKuS3/xUa4D8zEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjExNTU1NzgtZmE5ZS0z NTgyLWE2MzYtNGZiZWRmMDFlM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBdk6Swh/RiqhHxCXhhJzkF3I5DGeSYLp4NHnL0Yxcdmc5R0bfj1dMw w6xunivNwu35IHkxszQCYyoo/UMaB73GWEKhpkPdVUGYzCRC0UlC+yU2K4IK5B9l SQFolSYEJo5GFQ68MpAJzOpFzwenZkL17ICSbHc6SOF9PIV9JVEuK5ayzDlIyCUK 10tgWRnKoN0hkNQIdKTZfPfQYOP17xHfsxkvsym4lONvwje1eWzLjcYcxu6zu235 PcJzNyIE/ee+T2HH1fpSqKHTPvxG2MQD5hp6zCwEZLAYFx0GZXZuL+BPUbVWl/dI +s2P/z/amYK43ulqD25lqBJVBFjYoaQ= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:59 2026 by rpki-client