$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd06b437-700f-3b72-a4ee-8555c8263896.roa File: fd06b437-700f-3b72-a4ee-8555c8263896.roa (raw, json) Hash identifier: mtDyWYYDV1rKL8nuR6tq01p2V55h07eHrORJQNEVJlc= Subject key identifier: A0:66:6A:02:5A:DB:06:E5:5F:77:02:39:F6:98:1D:FA:7D:52:2C:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB8EBF0B9DBBE0FE71140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd06b437-700f-3b72-a4ee-8555c8263896.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 173.184.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b8:eb:f0:b9:db:be:0f:e7:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=786b72fd-0a8c-4769-b3a3-90fcb3e77143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:30:7c:f3:8e:96:26:e6:9e:84:3d:e1:c1: a6:48:0d:c1:e8:c8:17:b2:c8:2d:c2:6f:ba:4b:33: 3b:23:24:7a:4d:57:dd:0a:da:ef:25:50:8f:f1:1e: bb:79:6f:2e:25:04:1c:76:52:5d:0c:42:b9:e4:c4: ee:22:99:e7:5c:29:0c:61:10:39:d5:5d:76:05:95: f7:80:9d:fb:50:a2:4f:c9:60:ee:0e:03:01:b4:a6: ab:25:94:02:b6:d8:bc:d4:f4:27:f8:6c:e4:27:32: 63:45:a2:0c:cb:b1:60:e5:ab:37:d4:94:bb:a3:35: 92:12:ca:cf:15:db:11:ed:a6:e1:de:80:ac:02:48: 84:a8:ec:6f:ca:83:d4:18:58:85:5d:49:33:ec:02: 7b:dc:71:bb:e4:98:e6:24:2b:e1:84:26:05:b0:17: 9d:48:e2:69:0c:c6:74:70:bc:5f:2a:dc:28:c2:91: b4:79:96:02:b5:4e:1c:33:96:fc:7e:69:77:e8:35: 50:81:a6:5a:d0:ea:8b:62:fe:76:13:e1:e5:ff:0f: c9:38:16:e7:89:b5:ab:90:0c:c6:f0:a7:c4:e1:1e: 6b:b6:46:4a:ac:37:44:ac:4b:7e:9f:7d:03:74:93: 02:1e:2e:11:de:09:84:6a:fc:37:f3:a5:a1:25:aa: 4d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:6A:02:5A:DB:06:E5:5F:77:02:39:F6:98:1D:FA:7D:52:2C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd06b437-700f-3b72-a4ee-8555c8263896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2a:64:a0:43:08:c5:30:cd:eb:d5:c4:b3:28:88:ae:b7:d3: 3f:15:90:7b:31:30:d4:86:0c:e3:79:1f:5b:c0:02:28:58:04: bf:5a:fa:86:62:67:a0:a9:4f:d8:c1:3b:ce:7e:e5:10:2c:b0: 61:1d:ac:d2:b1:51:b7:32:8e:22:b9:66:25:0a:3f:0d:26:2e: 2f:59:e8:96:b0:44:59:04:f4:28:8d:b7:7b:c0:bb:a4:b6:4d: 68:3f:37:1b:af:a3:b7:8a:ff:d5:47:d5:23:5b:5c:81:5c:d2: 7e:77:9d:08:b6:de:58:b0:68:c0:20:00:85:3c:bf:68:05:92: ca:5e:69:40:f8:c0:15:60:81:34:aa:ac:7c:1c:3e:dd:c9:cc: 0a:96:dc:d3:4c:8f:80:ae:86:81:34:97:2a:33:b3:4b:c5:e2: 2b:1a:d6:40:e5:50:f6:47:4b:d7:44:b8:fb:18:02:27:d9:03: bd:77:45:87:52:18:b4:70:95:eb:84:f7:94:f6:3a:d8:a6:5c: 6e:00:29:bc:6e:0f:d3:0b:bb:40:04:2e:98:81:3a:fe:f8:cf: aa:0a:55:df:5c:e9:71:78:50:96:e2:ed:12:3d:4e:c2:8b:07: 8a:46:4b:3e:d3:73:fb:78:e5:aa:c9:60:64:88:be:e5:54:2b: 50:37:32:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLjr8Lnbvg/nEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Nzg2YjcyZmQtMGE4Yy00NzY5LWIzYTMtOTBmY2IzZTc3MTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF4wfPOOlibmnoQ94cGmSA3B6MgXssgtwm+6 SzM7IyR6TVfdCtrvJVCP8R67eW8uJQQcdlJdDEK55MTuIpnnXCkMYRA51V12BZX3 gJ37UKJPyWDuDgMBtKarJZQCtti81PQn+GzkJzJjRaIMy7Fg5as31JS7ozWSEsrP FdsR7abh3oCsAkiEqOxvyoPUGFiFXUkz7AJ73HG75JjmJCvhhCYFsBedSOJpDMZ0 cLxfKtwowpG0eZYCtU4cM5b8fml36DVQgaZa0OqLYv52E+Hl/w/JOBbnibWrkAzG 8KfE4R5rtkZKrDdErEt+n30DdJMCHi4R3gmEavw386WhJapNiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBmagJa2wblX3cCOfaYHfp9UizZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmQwNmI0MzctNzAwZi0z YjcyLWE0ZWUtODU1NWM4MjYzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsqZKBDCMUwzevVxLMoiK630z8VkHsxMNSGDON5H1vAAihYBL9a+oZi Z6CpT9jBO85+5RAssGEdrNKxUbcyjiK5ZiUKPw0mLi9Z6JawRFkE9CiNt3vAu6S2 TWg/Nxuvo7eK/9VH1SNbXIFc0n53nQi23liwaMAgAIU8v2gFkspeaUD4wBVggTSq rHwcPt3JzAqW3NNMj4CuhoE0lyozs0vF4isa1kDlUPZHS9dEuPsYAifZA713RYdS GLRwleuE95T2OtimXG4AKbxuD9MLu0AELpiBOv74z6oKVd9c6XF4UJbi7RI9TsKL B4pGSz7Tc/t45arJYGSIvuVUK1A3Mqo= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:26 2026 by rpki-client