$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9e13f2-242e-3632-ac7f-25413d6418e7.roa File: 0f9e13f2-242e-3632-ac7f-25413d6418e7.roa (raw, json) Hash identifier: pgwvMpaj+PAe/Uo88/eItzsoNet3GhNkQv6HuOBKPA4= Subject key identifier: 79:47:CA:24:57:DC:D5:D2:7E:C9:4F:97:E2:04:44:F8:2A:93:21:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B25F7712AC2D70172F0680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9e13f2-242e-3632-ac7f-25413d6418e7.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 173.190.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:5f:77:12:ac:2d:70:17:2f:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=b8dd2135-f52e-4597-9a87-27a9796010e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:e4:aa:b9:7a:f5:79:39:c3:23:19:b2:d0: dd:00:d5:9a:79:1d:bb:b4:44:4f:5a:f8:5c:67:61: 73:9b:f7:48:f3:bb:91:ce:87:73:25:68:ef:38:5a: ee:c3:62:45:95:52:75:d5:40:38:90:11:8e:bb:38: 22:23:7b:43:cf:a9:e5:19:a7:f1:49:d9:5d:2e:d0: bb:68:9b:ad:ff:fe:66:36:18:b1:c4:45:cf:5d:98: 17:c9:4c:bb:3c:b1:6b:f6:7b:49:6f:a5:28:73:be: db:ff:6c:48:15:fa:7b:38:4f:1b:6d:07:f4:65:57: af:55:46:bd:f4:4c:21:0f:b9:5b:8c:5b:d1:ca:86: 59:84:f7:84:10:29:73:75:d0:e2:83:8f:c1:b0:3a: c7:e6:f5:93:55:81:f1:ce:4d:5a:9e:da:d6:e9:00: f7:34:3f:45:06:99:d4:aa:b1:e8:bd:70:d4:48:d4: 09:10:5b:9b:57:1f:8f:28:65:f8:e5:39:7d:6e:ac: dc:1e:3f:5d:b6:15:26:67:f8:4d:3f:52:b7:76:1e: 16:ce:3e:7d:ef:42:06:00:50:1b:9e:9f:e0:de:9a: 39:ac:65:f2:24:4b:fa:d7:1d:6b:5d:b8:12:26:c9: 7f:7e:7d:ac:f9:01:15:fe:9a:48:da:d2:c8:fb:aa: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:47:CA:24:57:DC:D5:D2:7E:C9:4F:97:E2:04:44:F8:2A:93:21:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9e13f2-242e-3632-ac7f-25413d6418e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c7:e3:0f:15:be:f1:50:eb:a5:66:c1:c5:a4:33:9f:c7:c2: f4:68:17:42:9e:d8:f1:1f:ea:84:ec:14:c6:4b:a7:40:0a:c6: 1c:f2:9d:88:d4:e9:a1:01:42:af:a8:86:e7:9c:40:e0:29:47: 58:45:72:fa:70:f0:25:ba:0a:31:12:07:61:a0:39:6f:4f:28: 4c:ba:20:e3:90:a8:a0:22:9b:6e:b0:19:76:76:50:43:51:3d: e4:6d:82:9d:d4:74:c7:bc:14:ae:73:84:ca:22:04:f5:de:85: 51:91:92:46:87:f5:a2:f6:c1:c4:d4:47:e6:6d:fd:b1:d3:ef: c4:08:e4:12:e1:76:73:58:fd:af:5b:a3:70:64:76:b1:e9:ec: 44:0d:8f:ac:26:95:7e:c2:c4:98:37:40:b3:92:86:01:55:2d: 6b:36:68:f2:4b:77:64:30:d6:5c:4c:0b:42:a2:94:5c:59:f0: 70:5e:ad:69:3c:10:4b:8d:eb:97:1e:e1:aa:45:97:1c:73:fd: a6:f0:ad:39:e7:cd:d3:50:ab:a0:c4:20:d7:27:e2:26:76:1b: 3f:9b:bb:02:f6:3a:7d:38:ab:36:cc:a7:f7:20:3a:b1:e0:65: 1f:d9:1d:56:2e:68:91:0a:50:c6:b6:3f:a4:2b:a3:ac:bb:e8: b7:38:92:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asl93EqwtcBcvBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk YjhkZDIxMzUtZjUyZS00NTk3LTlhODctMjdhOTc5NjAxMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlozkqrl69Xk5wyMZstDdANWaeR27tERPWvhc Z2Fzm/dI87uRzodzJWjvOFruw2JFlVJ11UA4kBGOuzgiI3tDz6nlGafxSdldLtC7 aJut//5mNhixxEXPXZgXyUy7PLFr9ntJb6Uoc77b/2xIFfp7OE8bbQf0ZVevVUa9 9EwhD7lbjFvRyoZZhPeEEClzddDig4/BsDrH5vWTVYHxzk1antrW6QD3ND9FBpnU qrHovXDUSNQJEFubVx+PKGX45Tl9bqzcHj9dthUmZ/hNP1K3dh4Wzj5970IGAFAb np/g3po5rGXyJEv61x1rXbgSJsl/fn2s+QEV/ppI2tLI+6paywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlHyiRX3NXSfslPl+IERPgqkyF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGY5ZTEzZjItMjQyZS0z NjMyLWFjN2YtMjU0MTNkNjQxOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb7KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfH4w8VvvFQ66VmwcWkM5/HwvRoF0Ke2PEf6oTsFMZLp0AKxhzynYjU 6aEBQq+ohuecQOApR1hFcvpw8CW6CjESB2GgOW9PKEy6IOOQqKAim26wGXZ2UENR PeRtgp3UdMe8FK5zhMoiBPXehVGRkkaH9aL2wcTUR+Zt/bHT78QI5BLhdnNY/a9b o3BkdrHp7EQNj6wmlX7CxJg3QLOShgFVLWs2aPJLd2Qw1lxMC0KilFxZ8HBerWk8 EEuN65ce4apFlxxz/abwrTnnzdNQq6DEINcn4iZ2Gz+buwL2On04qzbMp/cgOrHg ZR/ZHVYuaJEKUMa2P6Qro6y76Lc4km0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:27:52 2026 by rpki-client