$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c09918d-953c-38fb-aeff-7363939b6d9a.roa File: 1c09918d-953c-38fb-aeff-7363939b6d9a.roa (raw, json) Hash identifier: 8CtGXde5JY0v/BMuNYqhmxdA2RYkzkVbtmCES3oKw/o= Subject key identifier: 44:5C:8C:B9:C4:7B:E5:4B:81:99:DA:C1:CD:B3:FE:12:8D:22:B9:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D28054ED59FEFCE1D7B0E7C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c09918d-953c-38fb-aeff-7363939b6d9a.roa Signing time: Fri 13 Mar 2026 16:04:36 +0000 ROA not before: Fri 13 Mar 2026 16:04:36 +0000 ROA not after: Thu 11 Jun 2026 16:04:36 +0000 asID: 7029 IP address blocks: 67.141.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:05:4e:d5:9f:ef:ce:1d:7b:0e:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 13 16:04:36 2026 GMT Not After : Jun 11 16:04:36 2026 GMT Subject: CN=15689676-3bbc-4c7d-85e7-f0cce871b931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:3c:5c:9f:cd:0e:72:39:e4:64:81:a9:cb: ec:e1:37:ef:be:74:79:9c:24:e1:6c:d0:49:69:90: f8:6c:3c:b7:a2:ff:a1:d4:b1:14:a3:09:81:ad:86: 44:c0:4b:fd:de:8b:43:7c:d6:ee:e7:01:3b:74:52: 39:86:2e:07:a4:08:b0:ef:29:b7:dc:8d:0c:06:80: 54:3c:75:21:23:79:59:f2:61:8a:83:82:5e:9e:45: 3d:64:84:34:36:77:9b:b2:80:23:21:10:db:52:80: 2b:5a:5f:42:b4:ee:a5:fa:f5:6a:af:9d:55:d5:e0: c6:a2:43:90:17:8a:bc:1e:5d:59:7a:27:88:c2:b6: df:00:11:74:ad:d0:13:21:02:40:7e:b8:e1:14:f4: af:a4:db:d3:38:21:d2:68:dc:1d:b8:79:df:2f:50: 3a:12:cf:03:79:35:a8:eb:cb:f2:0d:d7:7a:21:2e: 84:4f:0a:4e:00:ec:ca:c7:6b:57:42:e3:4b:ea:b5: 7c:09:fc:d2:93:6a:15:ad:72:2a:74:56:d3:18:94: a9:c7:97:87:f9:81:85:24:41:f8:2c:97:a8:4f:d2: 19:8d:93:9b:b5:76:c9:57:70:77:e1:be:eb:89:ee: 43:4d:b0:85:0b:b3:5a:ea:78:fe:ec:c4:d2:19:f8: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5C:8C:B9:C4:7B:E5:4B:81:99:DA:C1:CD:B3:FE:12:8D:22:B9:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c09918d-953c-38fb-aeff-7363939b6d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:4f:0a:19:95:82:98:e3:00:5f:b6:b7:eb:9a:db:8a:55:ab: 85:fe:91:f1:dd:36:ec:2e:b1:03:61:52:9a:26:ed:f8:11:8e: f8:60:51:f1:95:27:dc:32:66:be:0c:dc:05:2a:9b:70:3f:19: 69:4b:5f:17:f9:f0:19:36:b4:66:c2:96:2d:09:32:da:fb:5f: cf:cd:2a:c8:53:86:69:e3:2d:98:74:cc:37:93:67:e1:46:61: 50:26:63:fb:f0:af:d3:22:09:9e:db:05:79:ca:f9:2b:6c:ae: a6:9f:ec:9a:00:5d:0b:0e:93:a4:90:dd:54:5b:0c:f4:85:ef: 62:2e:cf:ba:d2:8a:8b:56:44:de:82:be:fc:35:9f:72:bc:de: c1:cc:c7:e7:96:40:7b:c0:7c:9b:b4:01:08:6e:69:c1:e1:04: b7:2a:eb:66:95:80:5f:bc:50:9a:0a:06:3f:34:37:cc:47:5f: e6:f8:73:24:d7:34:52:82:cc:f2:59:cf:ab:3f:f5:95:a0:c4: eb:77:51:11:6a:00:fb:3c:72:71:fd:50:08:5d:99:29:b1:6b: 09:09:31:51:b8:8f:18:f9:0a:de:60:be:9e:85:75:66:bf:65: 9f:cf:96:35:c2:df:7e:e6:a3:9b:37:c4:4a:b3:17:15:1d:49: 10:5e:aa:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0oBU7Vn+/OHXsOfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMzE2MDQzNloXDTI2MDYxMTE2MDQzNlowLzEtMCsGA1UEAxMk MTU2ODk2NzYtM2JiYy00YzdkLTg1ZTctZjBjY2U4NzFiOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJc8XJ/NDnI55GSBqcvs4TfvvnR5nCThbNBJ aZD4bDy3ov+h1LEUowmBrYZEwEv93otDfNbu5wE7dFI5hi4HpAiw7ym33I0MBoBU PHUhI3lZ8mGKg4JenkU9ZIQ0NnebsoAjIRDbUoArWl9CtO6l+vVqr51V1eDGokOQ F4q8Hl1ZeieIwrbfABF0rdATIQJAfrjhFPSvpNvTOCHSaNwduHnfL1A6Es8DeTWo 68vyDdd6IS6ETwpOAOzKx2tXQuNL6rV8CfzSk2oVrXIqdFbTGJSpx5eH+YGFJEH4 LJeoT9IZjZObtXbJV3B34b7rie5DTbCFC7Na6nj+7MTSGfgzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERcjLnEe+VLgZnawc2z/hKNIrm0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMwOTkxOGQtOTUzYy0z OGZiLWFlZmYtNzM2MzkzOWI2ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ40AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJPChmVgpjjAF+2t+ua24pVq4X+kfHdNuwusQNhUpom7fgRjvhgUfGV J9wyZr4M3AUqm3A/GWlLXxf58Bk2tGbCli0JMtr7X8/NKshThmnjLZh0zDeTZ+FG YVAmY/vwr9MiCZ7bBXnK+Stsrqaf7JoAXQsOk6SQ3VRbDPSF72Iuz7rSiotWRN6C vvw1n3K83sHMx+eWQHvAfJu0AQhuacHhBLcq62aVgF+8UJoKBj80N8xHX+b4cyTX NFKCzPJZz6s/9ZWgxOt3URFqAPs8cnH9UAhdmSmxawkJMVG4jxj5Ct5gvp6FdWa/ ZZ/PljXC337mo5s3xEqzFxUdSRBeqnk= -----END CERTIFICATE-----Generated at Thu Mar 26 08:38:36 2026 by rpki-client