$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa File: b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa (raw, json) Hash identifier: z+zuW2xKgplbMg3l/WSrwF8yuip5lHVOu3dS0CJGVgs= Subject key identifier: 0A:D7:F9:75:0C:E8:BD:B9:36:04:82:13:85:F3:C6:EE:06:01:F3:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B24940F9D133993DB91600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 174.130.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:49:40:f9:d1:33:99:3d:b9:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=96c184d4-d658-4a10-b97e-c48860cf35df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:09:a6:05:4e:58:54:95:75:41:2d:79:32: 0e:11:49:1d:6a:09:97:78:c5:02:f7:87:6e:95:59: 95:4a:d9:31:b7:7e:ce:19:17:59:a7:1d:c6:c3:ca: 40:12:6a:ab:2c:46:ba:52:0c:0a:df:07:f7:b5:c7: a8:c1:22:59:f0:9d:81:8c:dd:e3:87:81:ff:06:1d: 7d:32:9a:34:eb:b8:e0:1e:14:38:51:15:73:78:7e: b0:97:34:53:19:0a:06:98:6b:0d:ba:5d:8f:7f:00: 48:63:e8:12:c4:58:dc:a4:e3:3c:f8:46:af:81:74: 01:f1:f0:62:74:e4:3e:d3:ba:26:ef:df:24:c0:16: a6:23:de:3a:3e:17:8a:35:3f:02:8a:ac:b3:ae:0f: 8e:39:a1:12:e1:25:69:86:a6:a9:98:23:4b:6e:bc: 2d:ed:52:b7:49:fa:15:33:d5:f5:ae:7e:1c:20:61: a8:93:9b:0f:9a:af:cf:0e:af:75:a1:57:a5:ad:3c: 4f:99:d6:df:db:bc:dd:8d:f3:6f:16:ca:ef:94:10: f2:ad:37:40:1b:ba:b7:5b:bd:25:a3:e1:ad:b7:e8: b8:15:07:7d:dc:24:d7:e6:76:47:9b:5d:95:f7:b0: 13:dc:7b:f7:9e:eb:cc:7c:f6:26:78:81:f9:e0:20: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D7:F9:75:0C:E8:BD:B9:36:04:82:13:85:F3:C6:EE:06:01:F3:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0c:8f:a1:cc:62:26:69:63:35:04:7b:63:33:39:6c:f0:6d: 0b:0e:03:54:06:c2:97:0b:55:29:c7:67:71:e8:43:b7:7c:80: b9:7c:46:4a:bf:4d:a7:64:b5:c3:1b:6f:1b:a5:97:45:5d:5a: ae:cb:a6:47:3a:c5:e5:8c:be:3c:0b:bc:6e:b6:c1:79:fe:57: c8:90:d8:18:3e:d0:a1:84:79:83:92:2d:a2:57:4b:4f:7a:ec: 5c:98:c2:45:ce:38:77:4a:71:03:0c:82:b2:58:a1:e3:f4:b3: 3b:bd:9a:c6:fc:80:ad:1a:a1:e9:69:bf:27:08:9e:f5:c8:04: 56:80:64:c9:1a:21:a5:04:9f:67:bf:6f:f3:b9:46:53:c9:03: 6e:69:14:26:ec:27:49:0a:35:87:42:9a:e0:a2:cd:55:9a:10: 59:31:41:35:85:55:56:92:0d:62:dc:5c:e9:2b:ab:0f:ed:27: 3b:fb:c0:b9:0a:d3:4b:15:f9:38:8c:f2:1e:82:09:c0:63:35: c2:09:e6:c9:ce:dd:f3:0d:0a:d1:fd:c2:66:ff:ef:a9:e5:d0: 6f:87:3d:f7:a5:a9:d2:e9:9c:ab:52:bf:a3:fa:43:6c:b7:63: 58:40:8c:10:4c:73:09:08:1a:c8:ba:57:69:9a:4a:60:a7:11: 98:da:5c:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsklA+dEzmT25FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk OTZjMTg0ZDQtZDY1OC00YTEwLWI5N2UtYzQ4ODYwY2YzNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl94JpgVOWFSVdUEteTIOEUkdagmXeMUC94du lVmVStkxt37OGRdZpx3Gw8pAEmqrLEa6UgwK3wf3tceowSJZ8J2BjN3jh4H/Bh19 Mpo067jgHhQ4URVzeH6wlzRTGQoGmGsNul2PfwBIY+gSxFjcpOM8+EavgXQB8fBi dOQ+07om798kwBamI946PheKNT8Ciqyzrg+OOaES4SVphqapmCNLbrwt7VK3SfoV M9X1rn4cIGGok5sPmq/PDq91oVelrTxPmdbf27zdjfNvFsrvlBDyrTdAG7q3W70l o+Gtt+i4FQd93CTX5nZHm12V97AT3Hv3nuvMfPYmeIH54CBqnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArX+XUM6L25NgSCE4Xzxu4GAfPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg3ZDhjODYtNzViYi0z MzliLThmZDgtM2Q3MTczYTg4Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkMj6HMYiZpYzUEe2MzOWzwbQsOA1QGwpcLVSnHZ3HoQ7d8gLl8Rkq/ TadktcMbbxull0VdWq7Lpkc6xeWMvjwLvG62wXn+V8iQ2Bg+0KGEeYOSLaJXS096 7FyYwkXOOHdKcQMMgrJYoeP0szu9msb8gK0aoelpvycInvXIBFaAZMkaIaUEn2e/ b/O5RlPJA25pFCbsJ0kKNYdCmuCizVWaEFkxQTWFVVaSDWLcXOkrqw/tJzv7wLkK 00sV+TiM8h6CCcBjNcIJ5snO3fMNCtH9wmb/76nl0G+HPfelqdLpnKtSv6P6Q2y3 Y1hAjBBMcwkIGsi6V2maSmCnEZjaXFI= -----END CERTIFICATE-----Generated at Sun Mar 1 20:49:41 2026 by rpki-client