$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa File: d14864e2-0c04-30bd-aa58-ba30680b128d.roa (raw, json) Hash identifier: VQjBNDpjOm1oAgNw1NWezzy8EUDbYv0U3UawgW0YhXE= Subject key identifier: 00:8F:D2:47:07:3C:8A:11:1D:91:A5:A3:0D:7F:0A:AF:9E:CB:9B:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B244E29389F625EF54A100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 173.187.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:44:e2:93:89:f6:25:ef:54:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=06358abb-1400-4581-9cf2-f053d4f024f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:e9:6c:cc:5d:4c:12:5b:a0:a2:9d:94:85: 25:c3:b1:56:7f:01:6c:89:fa:40:e6:25:ba:05:1f: 6d:45:59:90:44:cc:8e:56:23:e2:6d:20:09:90:b5: fd:c3:ea:65:36:e8:9e:ee:fa:ea:c4:fe:ad:95:b5: 61:44:cb:0a:ad:fb:d8:01:c3:59:20:06:37:ca:81: ce:e3:a6:65:a9:cf:e8:47:63:8a:10:c4:9c:b5:f7: fa:7c:7a:f1:fe:c6:a3:f8:b8:6e:1c:fb:33:69:1f: 06:09:63:ab:f0:e9:12:0c:6c:b2:db:6b:32:de:b3: 03:89:e6:f9:68:36:ba:b3:25:94:93:18:d6:49:2e: 8d:f2:c3:d2:5f:d5:b7:a3:54:01:80:63:47:54:7b: 61:d2:32:b8:f0:dd:0d:41:fb:74:49:c8:f0:4a:87: f9:67:ff:c1:0f:cd:1c:ee:7f:a3:72:26:a2:64:80: 15:76:0e:f6:65:52:ab:6f:19:77:9d:43:f7:47:5e: c3:af:66:88:65:c9:f2:e5:c0:5c:9e:b5:16:eb:98: eb:27:f0:00:8e:fe:14:d7:1b:fc:6d:88:2c:ee:cb: 4b:ed:df:7c:b1:02:55:bd:2b:bf:6a:42:85:e7:47: 08:84:a5:11:05:9f:77:d1:e6:de:8a:eb:58:47:68: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8F:D2:47:07:3C:8A:11:1D:91:A5:A3:0D:7F:0A:AF:9E:CB:9B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:cf:36:14:72:f5:ce:fb:52:78:15:a3:30:4f:17:74:f0:9d: 58:25:40:7c:66:48:db:ab:9a:01:65:33:3c:8d:bb:32:9a:04: 9c:45:03:7b:89:a2:2a:fd:27:49:b6:9b:cb:a9:a3:26:38:61: 19:28:dc:9c:ce:91:49:c7:e4:91:94:a9:0b:6e:c5:fb:3c:c5: 85:ec:fd:b5:88:f2:e5:45:70:1c:50:24:7b:85:e5:be:d9:93: 77:69:48:88:21:b0:57:c5:4c:6b:e8:60:28:be:3c:89:c3:95: ac:20:53:6b:e8:bf:9c:69:9f:79:a7:51:47:30:ba:33:b2:7e: 0f:c2:fe:4b:e0:a6:66:00:d1:5f:05:0c:1c:b4:61:e1:8c:9b: bc:3a:44:3a:0c:30:34:52:b9:c5:b8:b6:09:e4:2c:c1:fe:4c: f6:86:1b:76:b8:fd:e7:36:30:d9:3d:68:cb:ac:53:32:e1:87: 11:28:57:48:b8:88:3c:5f:ca:b4:eb:d5:0a:6c:94:06:cf:12: e6:1a:d4:b6:ab:25:00:c3:c0:03:9c:01:6b:a8:f9:2d:17:ed: 92:97:87:53:81:3f:5b:c1:c3:dd:cf:a2:2f:8d:2a:f2:55:67: 14:35:96:eb:62:9f:ef:8a:ed:fd:6e:6b:0d:04:39:2b:29:29: 3c:39:6c:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AskTik4n2Je9UoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MDYzNThhYmItMTQwMC00NTgxLTljZjItZjA1M2Q0ZjAyNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeDpbMxdTBJboKKdlIUlw7FWfwFsifpA5iW6 BR9tRVmQRMyOViPibSAJkLX9w+plNuie7vrqxP6tlbVhRMsKrfvYAcNZIAY3yoHO 46Zlqc/oR2OKEMSctff6fHrx/saj+LhuHPszaR8GCWOr8OkSDGyy22sy3rMDieb5 aDa6syWUkxjWSS6N8sPSX9W3o1QBgGNHVHth0jK48N0NQft0ScjwSof5Z//BD80c 7n+jciaiZIAVdg72ZVKrbxl3nUP3R17Dr2aIZcny5cBcnrUW65jrJ/AAjv4U1xv8 bYgs7stL7d98sQJVvSu/akKF50cIhKURBZ930ebeiutYR2j7AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACP0kcHPIoRHZGlow1/Cq+ey5tNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDE0ODY0ZTItMGMwNC0z MGJkLWFhNTgtYmEzMDY4MGIxMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjPNhRy9c77UngVozBPF3TwnVglQHxmSNurmgFlMzyNuzKaBJxFA3uJ oir9J0m2m8upoyY4YRko3JzOkUnH5JGUqQtuxfs8xYXs/bWI8uVFcBxQJHuF5b7Z k3dpSIghsFfFTGvoYCi+PInDlawgU2vov5xpn3mnUUcwujOyfg/C/kvgpmYA0V8F DBy0YeGMm7w6RDoMMDRSucW4tgnkLMH+TPaGG3a4/ec2MNk9aMusUzLhhxEoV0i4 iDxfyrTr1QpslAbPEuYa1LarJQDDwAOcAWuo+S0X7ZKXh1OBP1vBw93Poi+NKvJV ZxQ1lutin++K7f1uaw0EOSspKTw5bCk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:27:51 2026 by rpki-client