$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f201d1e-868d-371e-83c4-199549900b92.roa File: 2f201d1e-868d-371e-83c4-199549900b92.roa (raw, json) Hash identifier: MJNM9IuxaSvJANugVRIFMu/ex1G/JoJu2PMHhURY95E= Subject key identifier: 06:3F:DD:E0:1B:75:8E:AB:C5:51:2F:89:56:6E:3A:A1:3A:F6:3D:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6A2C3CCC46B2D6C86080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f201d1e-868d-371e-83c4-199549900b92.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 69.40.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6a:2c:3c:cc:46:b2:d6:c8:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=2f16f64d-b605-48c6-8660-f5c478c36553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:83:ca:f6:ee:5f:04:a6:9f:37:8d:ab:a1:cd: 06:9c:5e:82:f6:c9:7a:98:a1:08:ac:2d:63:e6:f7: 1b:4d:25:ed:53:e6:c5:59:b8:c5:8e:3d:74:0b:45: 66:b7:f2:6b:68:79:33:7f:32:74:a6:f5:1f:5f:af: 51:30:30:9e:f2:6c:a7:f2:a8:60:65:85:0e:61:66: 87:5b:07:83:96:fb:34:94:c4:dc:c6:bd:ce:c6:eb: 47:ef:9c:ba:7b:9e:e7:25:55:62:02:47:d7:4d:2a: a8:c2:71:b5:ed:82:bd:96:79:a6:49:30:ca:0d:fc: 31:40:06:83:d4:a7:cb:26:68:b2:c0:bf:7c:ba:da: 89:09:ad:9d:04:f7:c9:41:7e:4b:64:73:55:42:fb: 77:10:a1:bb:80:43:cb:ce:95:79:e7:1d:44:d2:1e: 23:75:4a:b5:fa:bd:d9:26:bf:20:35:2b:8c:c8:bd: 8c:61:54:16:01:50:53:f9:36:ce:37:eb:ca:32:68: 23:db:22:70:19:28:8b:f5:3c:42:6f:73:7d:47:79: 4d:34:5e:41:08:af:e5:68:ab:4a:4e:3b:e4:0f:37: a4:4f:db:fa:2a:92:36:52:00:6e:30:77:c2:e5:09: 9d:a6:f9:7e:e4:70:0b:f2:02:27:9f:bf:fe:91:3c: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:DD:E0:1B:75:8E:AB:C5:51:2F:89:56:6E:3A:A1:3A:F6:3D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f201d1e-868d-371e-83c4-199549900b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:af:c0:a3:47:68:ae:bc:88:a6:4f:ad:86:0a:ff:dc:ca:6d: 80:61:da:bd:1e:09:90:dd:00:56:da:50:d6:5b:5e:43:dd:c8: 85:41:69:5c:c0:15:62:1b:27:85:e5:01:8b:b0:e8:6b:2c:c5: ad:d2:ca:dd:17:5f:da:01:70:3f:ec:65:59:c6:cc:bc:4d:87: c7:73:ea:46:fe:4c:cc:f1:2a:03:2c:81:15:25:bf:b2:1c:36: c6:44:a9:ca:f5:90:a7:46:3a:53:c6:d3:38:82:75:d8:7b:67: 39:60:df:fa:83:4c:e5:d5:10:aa:f1:d0:70:e5:81:1b:b3:7a: 57:df:b3:29:0b:34:89:ac:74:29:d0:84:5e:31:f8:ff:4a:c1: b1:3f:5a:54:9d:d9:f0:9f:07:e3:39:0e:74:19:b1:73:09:ad: 11:cf:fe:72:4f:d3:82:77:c2:90:84:e0:2e:94:5d:e1:30:18: f1:36:af:98:9b:e3:92:5f:b6:f9:89:3c:c4:b1:85:c4:ba:56: 84:d5:b6:27:e2:9b:ad:37:9a:61:02:2c:ad:86:73:b4:ae:bb: e4:bf:3f:7d:d3:e4:76:ad:67:9d:43:04:1d:44:f0:94:3f:0e: ac:47:82:56:de:b1:0a:bd:27:ea:22:75:75:eb:b7:fc:aa:86: d7:6d:18:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmosPMxGstbIYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MmYxNmY2NGQtYjYwNS00OGM2LTg2NjAtZjVjNDc4YzM2NTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4PK9u5fBKafN42roc0GnF6C9sl6mKEIrC1j 5vcbTSXtU+bFWbjFjj10C0Vmt/JraHkzfzJ0pvUfX69RMDCe8myn8qhgZYUOYWaH WweDlvs0lMTcxr3OxutH75y6e57nJVViAkfXTSqownG17YK9lnmmSTDKDfwxQAaD 1KfLJmiywL98utqJCa2dBPfJQX5LZHNVQvt3EKG7gEPLzpV55x1E0h4jdUq1+r3Z Jr8gNSuMyL2MYVQWAVBT+TbON+vKMmgj2yJwGSiL9TxCb3N9R3lNNF5BCK/laKtK TjvkDzekT9v6KpI2UgBuMHfC5Qmdpvl+5HAL8gInn7/+kTwniQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY/3eAbdY6rxVEviVZuOqE69j07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmYyMDFkMWUtODY4ZC0z NzFlLTgzYzQtMTk5NTQ5OTAwYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRSiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuvwKNHaK68iKZPrYYK/9zKbYBh2r0eCZDdAFbaUNZbXkPdyIVBaVzA FWIbJ4XlAYuw6Gssxa3Syt0XX9oBcD/sZVnGzLxNh8dz6kb+TMzxKgMsgRUlv7Ic NsZEqcr1kKdGOlPG0ziCddh7Zzlg3/qDTOXVEKrx0HDlgRuzelffsykLNImsdCnQ hF4x+P9KwbE/WlSd2fCfB+M5DnQZsXMJrRHP/nJP04J3wpCE4C6UXeEwGPE2r5ib 45JftvmJPMSxhcS6VoTVtifim603mmECLK2Gc7Suu+S/P33T5HatZ51DBB1E8JQ/ DqxHglbesQq9J+oidXXrt/yqhtdtGM8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:17 2026 by rpki-client