$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5e80bcf6-b1a7-3f1d-ac5e-7c2041d15147.roa File: 5e80bcf6-b1a7-3f1d-ac5e-7c2041d15147.roa (raw, json) Hash identifier: 30/9E0VpPl8EK1XPSTxY8uO1x6hRW+vJvUj6Re6sDhk= Subject key identifier: 65:4E:F5:DC:3E:33:C1:82:45:78:6F:42:26:4D:6F:83:62:79:D0:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B247A8BD8E5A067F5EB7C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5e80bcf6-b1a7-3f1d-ac5e-7c2041d15147.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 173.190.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:47:a8:bd:8e:5a:06:7f:5e:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=49b4e576-0365-4e46-8376-bfd44c9c0697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:0e:f8:cb:8c:fd:9b:f0:ba:8a:a9:d4:ff: 49:bd:e7:9e:fd:a5:3b:b1:d4:54:84:87:be:77:90: b4:82:6b:e4:47:6f:c1:cb:8f:5e:15:74:84:6d:ff: d8:e1:29:94:cc:2c:e0:51:ff:40:8b:8a:63:e0:ec: 4a:5a:50:d6:92:be:54:89:b6:48:72:47:70:4b:5f: 85:d0:49:fc:2d:a4:b2:10:2f:c1:a7:74:88:e3:1a: 88:f2:4e:2f:82:75:af:8c:06:07:e2:07:e0:67:9d: 6c:b2:fe:2d:de:93:45:23:71:37:cd:e0:0b:29:21: f3:1f:d0:b7:c2:f4:43:32:e4:58:26:ca:39:39:2d: 6a:b9:b6:e0:ca:f0:77:59:87:6a:56:ac:86:87:58: 3e:ec:48:8f:0e:90:d6:28:5c:7a:29:c1:0a:43:56: 76:20:d6:4b:8f:20:87:8c:ef:4f:3d:0e:b7:2d:32: 71:60:b0:ef:5d:5a:29:60:22:a0:7b:ee:37:f0:2f: af:d7:68:ce:e6:e4:64:09:b6:38:a2:41:e0:20:c7: bb:d3:fb:4a:b6:fb:59:6a:ab:7c:77:4f:0e:6b:ea: 25:55:55:50:55:d6:51:44:82:3b:44:73:b7:5d:7e: 67:b8:b5:d0:67:c2:ed:25:60:1c:34:d8:ef:fe:44: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4E:F5:DC:3E:33:C1:82:45:78:6F:42:26:4D:6F:83:62:79:D0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5e80bcf6-b1a7-3f1d-ac5e-7c2041d15147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c3:97:97:95:7f:08:88:81:c1:68:e9:63:cb:98:df:05:40: bd:20:a4:4e:a5:fd:8d:ac:5d:25:19:cf:cc:ee:59:4d:c6:77: cf:ea:49:e5:44:65:8a:4f:47:a2:6f:bf:82:d6:4a:2f:90:99: 74:4d:99:cb:37:9e:93:28:ab:ab:eb:88:30:fe:77:5e:39:31: 1a:b8:9c:a3:65:b7:23:33:21:9e:dd:63:1f:d4:31:4a:b4:8d: dd:33:e9:fa:9e:b2:18:bc:0c:41:59:be:36:04:69:ab:13:53: 3d:fc:38:2f:e5:79:d3:60:a2:84:23:6b:76:a5:8f:a8:60:e7: 6e:29:1e:f6:c9:47:5a:3e:e4:bc:90:57:73:67:f6:2f:2f:e0: f2:14:a9:ab:4f:1d:2d:e1:fc:e5:1c:82:c8:c7:0a:5b:f4:59: 28:0b:3d:ee:46:8d:f4:10:3c:f5:c9:5d:7f:28:ed:8a:91:6d: 4b:d0:a2:2b:d4:01:e6:3f:69:3c:73:ec:60:44:a7:9b:d9:5d: a8:f6:cf:20:ce:fd:b8:b5:5e:cb:33:82:e8:80:f9:ff:7e:56: b2:7f:48:1d:3a:65:d8:2a:e0:1f:a6:77:a7:c0:f8:97:82:65: 15:f5:29:84:2d:48:dc:96:54:09:de:42:5f:de:f5:be:69:25: 72:c6:d7:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AskeovY5aBn9et8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NDliNGU1NzYtMDM2NS00ZTQ2LTgzNzYtYmZkNDRjOWMwNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8IO+MuM/Zvwuoqp1P9Jveee/aU7sdRUhIe+ d5C0gmvkR2/By49eFXSEbf/Y4SmUzCzgUf9Ai4pj4OxKWlDWkr5UibZIckdwS1+F 0En8LaSyEC/Bp3SI4xqI8k4vgnWvjAYH4gfgZ51ssv4t3pNFI3E3zeALKSHzH9C3 wvRDMuRYJso5OS1qubbgyvB3WYdqVqyGh1g+7EiPDpDWKFx6KcEKQ1Z2INZLjyCH jO9PPQ63LTJxYLDvXVopYCKge+438C+v12jO5uRkCbY4okHgIMe70/tKtvtZaqt8 d08Oa+olVVVQVdZRRII7RHO3XX5nuLXQZ8LtJWAcNNjv/kR8hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVO9dw+M8GCRXhvQiZNb4NiedDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWU4MGJjZjYtYjFhNy0z ZjFkLWFjNWUtN2MyMDQxZDE1MTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTDl5eVfwiIgcFo6WPLmN8FQL0gpE6l/Y2sXSUZz8zuWU3Gd8/qSeVE ZYpPR6Jvv4LWSi+QmXRNmcs3npMoq6vriDD+d145MRq4nKNltyMzIZ7dYx/UMUq0 jd0z6fqeshi8DEFZvjYEaasTUz38OC/ledNgooQja3alj6hg524pHvbJR1o+5LyQ V3Nn9i8v4PIUqatPHS3h/OUcgsjHClv0WSgLPe5GjfQQPPXJXX8o7YqRbUvQoivU AeY/aTxz7GBEp5vZXaj2zyDO/bi1XsszguiA+f9+VrJ/SB06Zdgq4B+md6fA+JeC ZRX1KYQtSNyWVAneQl/e9b5pJXLG12w= -----END CERTIFICATE-----Generated at Sun Mar 1 18:40:15 2026 by rpki-client