$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5296b952-e20a-395e-87fb-f67bf024bf41.roa File: 5296b952-e20a-395e-87fb-f67bf024bf41.roa (raw, json) Hash identifier: bhMXkQ/Nr7CvnSVnooDVnheFiUi2tRp6B2L1ZcEqjAo= Subject key identifier: A5:15:8E:7E:A0:17:1C:2A:80:93:1C:91:65:E8:8B:72:B4:BB:04:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B25C33222D86B6D46DA200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5296b952-e20a-395e-87fb-f67bf024bf41.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 173.186.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:5c:33:22:2d:86:b6:d4:6d:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=8a151dcf-65f9-4824-8fbc-eb305567c70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:6e:4e:75:e4:9c:1a:1f:39:b0:b0:cc:87: a0:f2:0b:ef:b6:db:cb:45:57:9e:31:c3:12:2e:ea: 33:fb:71:87:b1:7f:ba:20:8f:ff:c7:16:87:20:18: 6a:a5:38:72:cb:d0:2e:b8:00:18:d9:8a:60:41:51: 0e:69:28:09:8e:a9:0a:f8:73:4e:39:ec:fe:0f:9c: 43:1c:53:ec:a0:c1:a8:2a:e5:f9:b7:0b:2d:5d:b8: 18:2c:8f:c3:34:88:e6:e0:cf:72:2b:ed:11:f3:e6: 06:fa:22:ab:48:76:a2:d0:ae:c6:40:cd:42:d6:72: c5:b9:10:73:79:ea:4e:aa:ad:c8:03:6e:c8:bb:17: c5:85:57:d2:65:a8:b8:4f:29:3b:b6:31:09:3d:7d: f7:29:8d:3e:8c:7a:2e:d0:5c:eb:13:61:ab:f1:af: 37:e5:87:9b:e7:bc:32:96:38:7f:c4:79:2d:21:a4: 59:80:7c:eb:f5:2e:6a:da:ff:9f:2e:4b:9b:8d:a3: 29:99:eb:9a:80:0c:cc:19:47:51:76:0d:22:9e:62: cb:8b:f4:c8:21:4a:4d:d4:26:78:9d:73:35:3d:eb: 4a:dc:e0:6c:bf:6f:ee:86:4f:21:55:39:4b:2f:14: 4a:a8:29:39:62:5f:6e:83:98:18:cd:ef:6a:a2:9a: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:15:8E:7E:A0:17:1C:2A:80:93:1C:91:65:E8:8B:72:B4:BB:04:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5296b952-e20a-395e-87fb-f67bf024bf41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:0b:21:dd:7a:4a:ae:27:81:a7:7e:3a:d2:80:f8:15:c0:eb: 8f:33:16:6e:89:08:dd:f4:ed:22:0d:03:4e:d8:4c:9d:c0:b7: c3:81:be:2e:4b:68:f9:76:c7:0a:39:cf:77:79:e0:f6:b9:03: 3e:09:38:e1:05:28:ef:af:2a:19:c8:a2:ef:53:2f:85:e0:4d: 82:c0:38:77:12:f6:45:19:a8:2c:5b:57:d7:57:cb:a3:78:35: ee:5a:bc:d1:c4:2f:94:c3:ed:bb:73:cd:b8:35:d2:a8:5e:ba: c5:be:bb:60:55:7e:bc:0b:a7:e2:b5:88:71:28:76:dd:7f:48: 52:9c:4a:f3:23:79:1e:bf:a2:61:99:34:42:c1:e3:57:3b:4b: 62:1c:f3:fe:2c:b9:66:f3:dd:fb:8d:c4:72:15:a1:e4:4b:d4: 48:d7:63:8d:59:fa:82:62:00:f5:f0:5a:fe:68:92:d0:07:62: 5b:e7:07:70:c3:4b:2a:70:f2:a1:eb:a4:df:b0:2c:56:24:83: c6:d3:1e:ae:09:e4:fc:5d:25:37:6a:09:af:fb:42:e5:9e:18: 0f:7e:6e:49:b7:51:c2:af:03:38:6a:f2:a7:d3:32:b8:e6:05: f9:58:ea:ab:28:2b:4b:15:66:9b:b6:1f:2b:c7:81:f1:2c:47: 62:a0:dd:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AslwzIi2GttRtogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk OGExNTFkY2YtNjVmOS00ODI0LThmYmMtZWIzMDU1NjdjNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5JuTnXknBofObCwzIeg8gvvttvLRVeeMcMS Luoz+3GHsX+6II//xxaHIBhqpThyy9AuuAAY2YpgQVEOaSgJjqkK+HNOOez+D5xD HFPsoMGoKuX5twstXbgYLI/DNIjm4M9yK+0R8+YG+iKrSHai0K7GQM1C1nLFuRBz eepOqq3IA27IuxfFhVfSZai4Tyk7tjEJPX33KY0+jHou0FzrE2Gr8a835Yeb57wy ljh/xHktIaRZgHzr9S5q2v+fLkubjaMpmeuagAzMGUdRdg0inmLLi/TIIUpN1CZ4 nXM1PetK3OBsv2/uhk8hVTlLLxRKqCk5Yl9ug5gYze9qopoQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUVjn6gFxwqgJMckWXoi3K0uwRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTI5NmI5NTItZTIwYS0z OTVlLTg3ZmItZjY3YmYwMjRiZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADELId16Sq4ngad+OtKA+BXA648zFm6JCN307SINA07YTJ3At8OBvi5L aPl2xwo5z3d54Pa5Az4JOOEFKO+vKhnIou9TL4XgTYLAOHcS9kUZqCxbV9dXy6N4 Ne5avNHEL5TD7btzzbg10qheusW+u2BVfrwLp+K1iHEodt1/SFKcSvMjeR6/omGZ NELB41c7S2Ic8/4suWbz3fuNxHIVoeRL1EjXY41Z+oJiAPXwWv5oktAHYlvnB3DD Sypw8qHrpN+wLFYkg8bTHq4J5PxdJTdqCa/7QuWeGA9+bkm3UcKvAzhq8qfTMrjm BflY6qsoK0sVZpu2HyvHgfEsR2Kg3Tc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:03:03 2026 by rpki-client