$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa File: 39c23487-b420-379f-91d9-56c821c0182c.roa (raw, json) Hash identifier: kjTkPIULfL2M33241wXGs+e7MDZfUJM7Z80tJrFsn0k= Subject key identifier: C2:BE:3E:46:19:97:DC:B5:E1:D8:80:3E:38:8E:93:80:7C:88:10:0C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A96DC2FD31B63BA82A7C8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 69.66.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:96:dc:2f:d3:1b:63:ba:82:a7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e14fcdd0-b6a9-4da8-84e8-8a1acfff7fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:f9:d6:b4:0d:88:13:93:94:36:0d:06:8b: 7c:f8:09:e7:57:8d:0a:a9:8b:44:61:05:42:1a:de: bf:e8:07:9e:97:45:ac:18:1b:45:91:3f:25:82:a2: 29:02:45:68:5a:2f:81:11:85:93:e8:54:d8:64:f3: e9:67:59:2c:e3:36:13:30:9b:c3:e5:11:b1:46:f8: 33:66:61:14:e4:98:50:9d:ae:07:35:2f:5c:82:ea: 02:3b:36:36:55:18:e5:c7:d1:12:c7:3d:3d:f3:6c: 67:3e:86:c3:1e:2e:d6:78:2b:d7:36:5d:4b:e3:c3: 8e:56:5b:39:4f:64:39:6a:44:70:58:3d:67:f9:7f: dc:62:a6:ec:de:ca:3f:61:96:c4:8d:9f:31:cf:8f: 4f:02:1d:ee:ca:5d:07:2f:80:84:16:a5:b8:33:ef: b0:52:2d:a6:b1:1c:48:2f:37:f1:2d:f4:4f:36:1e: 83:a5:a0:e9:17:1a:02:2a:4e:63:71:79:01:16:46: 06:a9:d5:a1:60:ad:ff:59:a5:39:df:ec:fc:79:39: 9a:1e:86:e8:04:8b:04:21:da:79:b1:81:42:e9:58: eb:75:28:ad:ef:99:14:2e:f9:0f:55:2d:c8:07:5a: 85:1c:3e:cc:a4:74:b8:e2:26:93:1a:98:3e:27:e4: 60:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BE:3E:46:19:97:DC:B5:E1:D8:80:3E:38:8E:93:80:7C:88:10:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:73:50:0e:1c:ed:9a:1f:6a:fd:aa:b9:9c:d4:56:9d:e1:65: 64:5e:ee:30:1f:4e:1f:5a:87:47:1e:b1:6d:0d:8e:6c:76:1f: 3a:a3:da:d8:ca:e6:ba:2c:98:4e:7f:d3:24:1e:1c:7c:a1:39: db:27:cc:4b:5a:aa:15:48:a7:e8:41:74:5d:b3:b4:4b:d5:44: 4b:e2:de:bb:8b:ef:4d:09:4e:4d:52:b5:87:7b:2f:a3:c7:fa: bf:ef:67:27:97:2e:27:2c:ab:5c:21:4f:a2:ff:5d:77:7e:71: ad:5e:c1:5b:7d:9d:55:93:52:13:55:c8:c1:dd:aa:a6:cd:47: ad:31:3c:c5:42:1c:2c:19:dd:3a:e5:3b:b6:1f:0a:db:31:d3: 4b:ef:d0:f1:c6:32:eb:bd:8c:2e:fa:40:ab:f6:73:86:49:23: f7:cc:ac:80:74:31:1c:d7:1f:f8:10:0a:0a:06:2c:26:6d:2f: db:07:e0:4f:93:d4:05:2e:c4:32:2d:f0:66:b2:81:11:96:dd: da:16:4b:64:8e:e2:79:6e:b4:6f:27:4d:a3:6f:e8:bf:c1:a0: aa:b2:ff:e4:93:ca:ce:82:c8:da:97:36:d8:50:d2:7d:96:5e: 07:eb:0c:72:f1:79:87:b1:6e:5e:c8:86:6a:13:f3:c4:e2:60: 86:1d:ef:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpbcL9MbY7qCp8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTE0ZmNkZDAtYjZhOS00ZGE4LTg0ZTgtOGExYWNmZmY3ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jP51rQNiBOTlDYNBot8+AnnV40KqYtEYQVC Gt6/6Aeel0WsGBtFkT8lgqIpAkVoWi+BEYWT6FTYZPPpZ1ks4zYTMJvD5RGxRvgz ZmEU5JhQna4HNS9cguoCOzY2VRjlx9ESxz0982xnPobDHi7WeCvXNl1L48OOVls5 T2Q5akRwWD1n+X/cYqbs3so/YZbEjZ8xz49PAh3uyl0HL4CEFqW4M++wUi2msRxI LzfxLfRPNh6DpaDpFxoCKk5jcXkBFkYGqdWhYK3/WaU53+z8eTmaHoboBIsEIdp5 sYFC6VjrdSit75kULvkPVS3IB1qFHD7MpHS44iaTGpg+J+RgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK+PkYZl9y14diAPjiOk4B8iBAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzljMjM0ODctYjQyMC0z NzlmLTkxZDktNTZjODIxYzAxODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRUKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5zUA4c7Zofav2quZzUVp3hZWRe7jAfTh9ah0cesW0Njmx2Hzqj2tjK 5rosmE5/0yQeHHyhOdsnzEtaqhVIp+hBdF2ztEvVREvi3ruL700JTk1StYd7L6PH +r/vZyeXLicsq1whT6L/XXd+ca1ewVt9nVWTUhNVyMHdqqbNR60xPMVCHCwZ3Trl O7YfCtsx00vv0PHGMuu9jC76QKv2c4ZJI/fMrIB0MRzXH/gQCgoGLCZtL9sH4E+T 1AUuxDIt8GaygRGW3doWS2SO4nlutG8nTaNv6L/BoKqy/+STys6CyNqXNthQ0n2W XgfrDHLxeYexbl7IhmoT88TiYIYd70s= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:45 2026 by rpki-client