$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa File: e38090fc-da46-3531-9381-e5b4953d080a.roa (raw, json) Hash identifier: caolAqNt7ZLGGP2T+gxSp2TZRoytqJJ/izACdLAb/Ko= Subject key identifier: A5:63:19:EB:13:C7:74:3A:C2:E3:AA:A5:C9:82:31:EC:83:77:F7:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B25C9C4A5973ADC960A900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 173.188.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:5c:9c:4a:59:73:ad:c9:60:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=23ec40ff-c3e1-4142-8699-a4eee16e5ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:02:87:a9:3c:15:2b:1f:b7:ba:7b:33:fa: 33:74:b3:12:a5:35:17:4b:40:dd:72:47:b4:7a:b2: 14:65:77:35:05:df:f4:3c:7c:cf:71:a2:18:75:e5: e8:b4:65:61:b5:ff:fc:53:dc:e0:48:45:8e:33:a5: cf:4c:4b:ac:77:df:b6:66:0f:b5:31:8d:ca:f1:e9: 0c:a8:3b:95:e6:8a:58:10:d2:1f:f1:1c:54:94:3c: fa:79:27:61:a1:43:29:83:f9:c5:c8:f3:45:41:0b: ef:f5:0c:54:63:8c:30:27:b3:6e:95:bc:28:c1:98: a3:69:8f:c3:09:a2:ff:f7:30:45:e0:0e:4e:53:20: 79:1e:4a:18:b6:af:5c:5c:55:99:97:43:2d:b7:03: e2:8e:d7:3b:8b:63:41:f9:09:ea:8e:36:30:33:cd: a8:3c:f6:4e:2e:ee:47:01:62:39:62:97:1a:95:2c: f7:58:ab:3d:5f:33:de:9c:63:44:ab:51:92:53:29: 6d:16:1a:b6:af:95:11:36:ed:e2:4a:df:eb:8f:58: 69:61:f1:e7:fd:6f:19:db:5e:8a:bb:cf:f9:9c:35: 19:88:36:bb:b8:c4:dc:e7:82:65:01:cb:e4:78:0f: 70:81:6c:5a:02:0c:80:2f:19:a7:cc:1f:71:e6:a6: 1c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:63:19:EB:13:C7:74:3A:C2:E3:AA:A5:C9:82:31:EC:83:77:F7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e38090fc-da46-3531-9381-e5b4953d080a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:45:70:de:7a:c9:53:6a:99:37:16:00:39:bd:a5:1e:6b:06: 9f:0e:02:c7:1d:b4:47:58:7f:d2:3f:19:87:c6:9e:33:34:83: 6a:34:01:0e:4b:35:86:14:ca:62:2c:c3:b9:51:7e:5e:dc:7f: 4c:d3:8c:0e:d3:c2:57:ef:b6:14:a6:af:df:49:01:ca:1a:ab: 3c:00:79:2a:31:48:cb:56:00:c9:33:58:70:6c:42:b0:77:5a: ec:0f:3b:d2:59:e9:a1:de:6a:13:45:0a:95:7f:fe:85:e0:fd: 52:32:34:8a:b3:52:e5:f5:f4:b3:01:fc:d8:55:16:a7:86:f0: a8:bb:1f:22:0e:4b:ca:48:dc:e3:f8:48:0c:4a:c1:6e:71:7b: 93:1f:09:9f:d2:c4:69:03:d7:cf:a8:f7:08:c1:ab:81:d0:bd: 36:1e:43:e7:75:ad:41:b2:9e:90:d7:af:38:40:45:54:03:22: ac:d1:f0:d8:ca:e4:36:fa:80:0f:b3:0f:84:36:90:22:b4:8e: 8e:4f:7f:6f:29:55:e2:31:40:bd:6b:59:b0:72:97:f3:39:43: 5f:94:8a:23:f0:d3:f8:01:2e:d2:2b:41:6e:a3:93:76:e1:68: bd:c2:66:62:26:8b:c1:eb:18:b2:d8:c3:19:6e:bd:28:1f:41: 17:9a:8d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AslycSllzrclgqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MjNlYzQwZmYtYzNlMS00MTQyLTg2OTktYTRlZWUxNmU1ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYwCh6k8FSsft7p7M/ozdLMSpTUXS0Ddcke0 erIUZXc1Bd/0PHzPcaIYdeXotGVhtf/8U9zgSEWOM6XPTEusd9+2Zg+1MY3K8ekM qDuV5opYENIf8RxUlDz6eSdhoUMpg/nFyPNFQQvv9QxUY4wwJ7NulbwowZijaY/D CaL/9zBF4A5OUyB5HkoYtq9cXFWZl0MttwPijtc7i2NB+QnqjjYwM82oPPZOLu5H AWI5YpcalSz3WKs9XzPenGNEq1GSUyltFhq2r5URNu3iSt/rj1hpYfHn/W8Z216K u8/5nDUZiDa7uMTc54JlAcvkeA9wgWxaAgyALxmnzB9x5qYcZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVjGesTx3Q6wuOqpcmCMeyDd/cFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTM4MDkwZmMtZGE0Ni0z NTMxLTkzODEtZTViNDk1M2QwODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1FcN56yVNqmTcWADm9pR5rBp8OAscdtEdYf9I/GYfGnjM0g2o0AQ5L NYYUymIsw7lRfl7cf0zTjA7TwlfvthSmr99JAcoaqzwAeSoxSMtWAMkzWHBsQrB3 WuwPO9JZ6aHeahNFCpV//oXg/VIyNIqzUuX19LMB/NhVFqeG8Ki7HyIOS8pI3OP4 SAxKwW5xe5MfCZ/SxGkD18+o9wjBq4HQvTYeQ+d1rUGynpDXrzhARVQDIqzR8NjK 5Db6gA+zD4Q2kCK0jo5Pf28pVeIxQL1rWbByl/M5Q1+UiiPw0/gBLtIrQW6jk3bh aL3CZmImi8HrGLLYwxluvSgfQReajTc= -----END CERTIFICATE-----Generated at Sun Mar 1 18:34:16 2026 by rpki-client