$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd00e9be-c91f-36ec-9fb1-9e5f6c3845a0.roa File: cd00e9be-c91f-36ec-9fb1-9e5f6c3845a0.roa (raw, json) Hash identifier: QnXj8MuF2UwYXDoIHL3s7Ac653mXXlhDvEQ2OdqU8HI= Subject key identifier: 42:F3:D9:A1:3E:FE:A4:97:9F:40:C2:94:BA:DD:B2:76:39:74:DB:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B244115D23EE7753534800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd00e9be-c91f-36ec-9fb1-9e5f6c3845a0.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 173.189.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:44:11:5d:23:ee:77:53:53:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=f1dfbe85-62f9-4cda-bf9c-e7d2c5b03499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c0:6b:f5:54:dd:cb:79:32:d3:3c:7c:dd:b1: e6:4e:68:ac:dd:12:d3:b5:d3:49:54:eb:f4:66:15: 4a:ad:aa:da:67:1b:32:73:79:a0:f6:9c:2d:b7:66: 0c:c6:63:fa:8d:56:8e:28:7d:cf:92:65:67:21:a1: 2d:ac:e8:b7:29:26:ce:bb:7b:c4:af:4c:d1:67:39: 1a:89:c9:10:02:9e:d9:43:16:1b:62:b6:1f:cd:ce: 6d:c4:6c:ce:22:aa:18:e0:3a:fb:39:d7:6d:5a:a0: 95:63:0b:d1:19:09:0f:93:80:1c:67:97:b2:85:e0: 96:2c:65:95:bc:8b:8b:0f:3b:5e:d7:26:03:f6:f5: af:90:53:f5:5b:99:c5:79:f2:c2:84:50:3f:82:19: 6b:3e:d1:d8:e7:b0:75:b0:80:d2:ac:04:91:6d:5f: 37:6a:7c:75:75:a8:67:cf:6b:a1:43:45:d3:49:8c: a1:4c:19:2f:b1:29:7a:cd:60:8c:8e:44:2b:ee:92: 15:a3:ed:ee:fa:5b:54:47:39:0f:57:61:e4:bf:ce: f4:5d:d5:41:b4:53:ff:70:b9:34:b4:ae:9b:c6:c9: 0d:10:e8:47:a6:a6:79:b4:56:4a:8d:8b:d3:2b:ec: d5:2f:01:ae:4d:ca:44:0d:2b:08:1c:87:b1:77:1e: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F3:D9:A1:3E:FE:A4:97:9F:40:C2:94:BA:DD:B2:76:39:74:DB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd00e9be-c91f-36ec-9fb1-9e5f6c3845a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:75:52:d3:dd:60:63:4e:d9:f5:67:a1:7a:70:b3:86:30:fd: 2f:e6:60:ef:5b:84:e6:c9:7c:5c:ca:15:37:f4:6e:21:bc:fa: 3c:2d:a7:55:2e:48:e8:d7:00:8c:c2:c9:13:93:dc:25:06:43: da:75:b9:5f:35:15:0c:78:e7:0e:90:67:38:06:9f:bc:f3:05: 6c:78:63:33:5d:0f:29:79:8e:f1:9c:75:09:23:22:e9:ae:4f: eb:08:e2:04:4c:28:c5:8b:f1:02:c5:6a:2e:55:c8:d0:b6:fb: 3c:73:0a:3b:66:ad:98:9b:7c:66:72:62:2c:64:34:64:a0:39: a2:69:d4:84:60:93:37:fd:87:d8:7d:3d:79:5c:e4:ea:ee:5b: c0:15:d4:b1:2a:65:8c:7f:04:65:e3:d2:75:31:2b:f8:93:cf: 3a:de:de:d7:8e:40:17:76:24:30:b8:b7:ae:8d:65:bc:87:03: ee:5f:3b:04:c1:9a:01:b8:8e:b5:5b:23:4b:6d:55:8c:63:f7: ed:df:8c:a8:41:5d:23:5e:7b:b9:3f:b6:8d:be:3c:96:b3:77: fa:88:9e:71:41:2e:eb:6f:8a:42:ea:6b:51:2d:22:a6:c2:99: 23:65:f2:b4:90:af:bd:82:b3:9d:93:5d:14:14:f5:10:9f:4e: ea:61:8a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AskQRXSPud1NTSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk ZjFkZmJlODUtNjJmOS00Y2RhLWJmOWMtZTdkMmM1YjAzNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Br9VTdy3ky0zx83bHmTmis3RLTtdNJVOv0 ZhVKraraZxsyc3mg9pwtt2YMxmP6jVaOKH3PkmVnIaEtrOi3KSbOu3vEr0zRZzka ickQAp7ZQxYbYrYfzc5txGzOIqoY4Dr7OddtWqCVYwvRGQkPk4AcZ5eyheCWLGWV vIuLDzte1yYD9vWvkFP1W5nFefLChFA/ghlrPtHY57B1sIDSrASRbV83anx1dahn z2uhQ0XTSYyhTBkvsSl6zWCMjkQr7pIVo+3u+ltURzkPV2Hkv870XdVBtFP/cLk0 tK6bxskNEOhHpqZ5tFZKjYvTK+zVLwGuTcpEDSsIHIexdx4sEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELz2aE+/qSXn0DClLrdsnY5dNtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2QwMGU5YmUtYzkxZi0z NmVjLTlmYjEtOWU1ZjZjMzg0NWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb20MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd1UtPdYGNO2fVnoXpws4Yw/S/mYO9bhObJfFzKFTf0biG8+jwtp1Uu SOjXAIzCyROT3CUGQ9p1uV81FQx45w6QZzgGn7zzBWx4YzNdDyl5jvGcdQkjIumu T+sI4gRMKMWL8QLFai5VyNC2+zxzCjtmrZibfGZyYixkNGSgOaJp1IRgkzf9h9h9 PXlc5OruW8AV1LEqZYx/BGXj0nUxK/iTzzre3teOQBd2JDC4t66NZbyHA+5fOwTB mgG4jrVbI0ttVYxj9+3fjKhBXSNee7k/to2+PJazd/qInnFBLutvikLqa1EtIqbC mSNl8rSQr72Cs52TXRQU9RCfTuphik4= -----END CERTIFICATE-----Generated at Sun Mar 1 18:34:09 2026 by rpki-client