$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1107219f-7c6b-3cf1-88c1-4e68939eb125.roa File: 1107219f-7c6b-3cf1-88c1-4e68939eb125.roa (raw, json) Hash identifier: 6GgS7Fty6aH+nJUhst1iS4GjjfteSPpkRnp3X5jq7q0= Subject key identifier: A3:78:B9:81:7C:74:C9:AA:E3:B7:BE:64:B3:F3:60:80:F3:A3:28:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6A5BEF3830FA7D8F9770 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1107219f-7c6b-3cf1-88c1-4e68939eb125.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 69.66.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6a:5b:ef:38:30:fa:7d:8f:97:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=dc4b7e45-1698-4253-abdc-5097e8dc1a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b8:be:00:bc:67:8b:26:f9:b4:ee:9b:a8:f8: 10:05:fd:a5:a8:4f:cd:14:4b:d4:5e:57:ed:45:d2: 2a:6e:ff:c2:7d:60:31:0c:2f:a1:b2:33:2c:2b:05: 64:59:dc:ac:af:01:e5:f7:b7:02:e4:5c:cc:e3:cf: 7d:5e:c2:62:a0:2c:d5:78:63:80:c0:72:50:55:66: 3c:e5:b6:21:c6:d2:d8:45:8f:2d:5a:31:36:a8:00: 6c:a9:e9:d5:bb:f8:20:20:33:08:61:13:18:83:92: a4:e3:72:fc:b9:d5:d9:48:04:9f:f5:29:a3:df:94: 72:f2:84:ab:86:ca:01:ce:95:15:ef:40:63:d2:22: 67:7a:02:45:65:e1:a1:ed:91:0f:3f:fc:32:97:c7: 02:5b:b1:bf:4c:a1:a6:dd:bb:b6:ef:7a:7b:86:56: 7c:e0:2b:78:c5:a2:e9:9e:b2:89:65:76:76:81:e5: 70:57:46:c9:ed:89:c1:ec:df:33:5c:b7:2c:fd:33: 19:63:64:0f:64:0b:42:f5:38:97:f7:36:4c:ad:c7: fc:64:b3:68:e3:71:93:c5:d6:c8:47:5c:c5:f5:f2: 0a:16:c2:dc:2e:b9:76:d2:7b:98:20:61:6e:bb:79: 6f:4f:f5:a3:94:ee:27:05:89:bc:6c:84:66:ca:ee: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:78:B9:81:7C:74:C9:AA:E3:B7:BE:64:B3:F3:60:80:F3:A3:28:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1107219f-7c6b-3cf1-88c1-4e68939eb125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:40:5f:99:9f:b0:9a:de:58:c3:5c:e8:55:3e:f1:29:aa:4a: 4c:cf:0d:43:9d:71:e0:48:84:ce:85:d2:1e:fa:47:76:bc:f0: 0b:24:ae:11:22:92:e1:d7:6e:31:3e:e8:f9:08:ae:30:49:ae: 97:da:82:82:b7:04:ef:62:04:ab:cf:98:19:fb:2a:f4:6a:b1: 86:72:9b:2c:36:3d:62:94:8d:6a:64:ce:65:a5:b6:4f:d1:e3: e2:42:1e:4b:fb:78:83:ab:60:bd:72:5b:ef:1a:af:5b:49:48: aa:83:c1:e4:e4:04:5a:f2:b9:9e:52:ea:93:9f:e9:3a:eb:29: d2:e2:97:cc:08:85:6a:91:db:ea:5d:b2:c8:8e:d2:54:ac:2b: 03:f6:8c:11:32:3c:16:50:0b:2c:94:7c:a9:8c:fc:f2:d8:92: 69:52:40:f9:d4:da:f3:da:f8:75:86:c6:40:8e:ff:36:e5:c8: dc:dc:38:5d:b7:b6:c4:64:d4:13:90:35:96:94:c1:ea:b8:20: 0d:4d:21:0d:26:a6:89:92:d7:4b:88:1b:43:7a:db:74:05:4d: 89:d4:30:40:85:c6:fe:20:be:48:6b:27:c4:e8:f2:01:d4:04: da:05:10:5b:dc:6b:71:b8:37:32:cf:c0:28:8c:cf:ea:a7:69: 07:6c:5e:04 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCmpb7zgw+n2Pl3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZGM0YjdlNDUtMTY5OC00MjUzLWFiZGMtNTA5N2U4ZGMxYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bi+ALxniyb5tO6bqPgQBf2lqE/NFEvUXlft RdIqbv/CfWAxDC+hsjMsKwVkWdysrwHl97cC5FzM4899XsJioCzVeGOAwHJQVWY8 5bYhxtLYRY8tWjE2qABsqenVu/ggIDMIYRMYg5Kk43L8udXZSASf9Smj35Ry8oSr hsoBzpUV70Bj0iJnegJFZeGh7ZEPP/wyl8cCW7G/TKGm3bu273p7hlZ84Ct4xaLp nrKJZXZ2geVwV0bJ7YnB7N8zXLcs/TMZY2QPZAtC9TiX9zZMrcf8ZLNo43GTxdbI R1zF9fIKFsLcLrl20nuYIGFuu3lvT/WjlO4nBYm8bIRmyu4/dwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKN4uYF8dMmq47e+ZLPzYIDzoyi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTEwNzIxOWYtN2M2Yi0z Y2YxLTg4YzEtNGU2ODkzOWViMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASEBfmZ+wmt5Yw1zoVT7xKapKTM8NQ51x4EiEzoXSHvpHdrzwCySuESKS 4dduMT7o+QiuMEmul9qCgrcE72IEq8+YGfsq9GqxhnKbLDY9YpSNamTOZaW2T9Hj 4kIeS/t4g6tgvXJb7xqvW0lIqoPB5OQEWvK5nlLqk5/pOusp0uKXzAiFapHb6l2y yI7SVKwrA/aMETI8FlALLJR8qYz88tiSaVJA+dTa89r4dYbGQI7/NuXI3Nw4Xbe2 xGTUE5A1lpTB6rggDU0hDSamiZLXS4gbQ3rbdAVNidQwQIXG/iC+SGsnxOjyAdQE 2gUQW9xrcbg3Ms/AKIzP6qdpB2xeBA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:10:05 2026 by rpki-client