$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa File: 4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa (raw, json) Hash identifier: VBSWF83JEVsqEO3ObrtfwuXuXa0y47/2UwmpARavlPw= Subject key identifier: C4:A1:87:8E:6A:53:AC:23:16:D6:BF:68:80:A4:4A:30:7A:2C:8F:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB1458168296AE3BE29E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 69.66.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:14:58:16:82:96:ae:3b:e2:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=1da1913f-533f-4414-9e49-85e679f6c088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:ad:67:34:aa:15:2d:eb:b3:76:94:15:ca: 0a:fe:a5:17:f5:1a:cb:d0:e3:f7:ee:e7:cc:b6:90: e0:3d:9e:5b:c5:56:12:c2:3a:2a:92:b0:95:f8:f2: ba:5f:e8:b2:59:ad:c2:70:14:ef:f1:8e:60:a4:c1: 69:90:ff:27:f1:b5:5f:52:83:5b:8c:78:62:c8:55: 7a:1f:0c:28:f7:e6:09:2f:b8:63:b0:30:f1:13:4e: 7f:23:85:94:29:91:89:a2:f4:f9:21:a4:11:3e:4a: 9d:bb:c1:5e:f6:f8:30:84:85:44:1e:a3:5d:46:a6: 95:69:6a:d6:7b:a4:d1:45:a1:e4:0f:2c:f6:03:be: 14:90:5f:7e:69:30:58:c9:37:5a:c8:8c:be:cd:8a: 04:bd:f1:17:eb:b2:eb:53:30:b0:09:6f:d7:26:71: cf:8c:75:f0:03:72:18:6a:08:e8:49:8c:51:c8:0a: 30:dc:b2:40:b9:fb:06:46:b3:51:1b:d7:67:cc:16: 17:fc:4e:55:07:52:83:ee:ee:63:1b:d0:72:da:ad: 87:45:cb:63:22:41:24:ce:0c:6f:a3:c9:9b:72:ac: 5d:00:62:c7:22:f9:f3:08:c2:c8:e4:d2:70:e3:43: aa:b3:90:d3:6d:19:17:5b:7e:dc:4d:64:6f:4d:c4: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A1:87:8E:6A:53:AC:23:16:D6:BF:68:80:A4:4A:30:7A:2C:8F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a0:a3:4e:8f:0c:0a:41:39:df:03:29:ad:50:7d:00:55:a2: 40:d5:19:9a:0d:b7:13:eb:7c:74:15:3e:31:0c:4f:d3:48:fc: 81:2f:ba:48:e7:2f:18:c9:90:6c:5c:09:b2:f7:87:9e:e1:0c: b7:f0:ad:21:11:ff:c6:3f:42:d5:61:aa:de:d5:4f:de:c5:72: 9c:8f:6c:d3:65:86:f7:68:41:4d:de:b7:6e:4d:58:24:5d:bb: 67:26:94:73:c1:f3:ec:c9:39:79:c4:de:8e:4a:22:b9:da:ff: a4:9f:4b:eb:c2:2f:74:89:c1:cc:81:bd:7f:3c:4a:2f:d2:17: ee:d3:b7:b1:52:a0:d6:bd:8c:0f:74:9a:2e:cf:c2:2a:ff:7d: cc:b3:9c:38:e6:d9:c3:bb:b2:57:5c:f2:56:7d:fc:9c:f9:50: ed:4c:fc:ff:e5:63:66:24:3f:cd:8c:c5:46:a8:6a:31:65:c1: 33:c2:21:02:06:51:2c:f5:17:cc:ca:0a:bc:a9:45:1d:5c:ce: 4e:7f:7a:f0:92:c2:74:d9:0c:b3:ba:30:a5:64:86:68:3b:ee: 75:b9:67:60:eb:06:9b:39:86:1d:2d:90:5a:88:c1:90:4b:80: 1b:b8:32:69:1d:dd:cf:aa:ab:54:d7:f2:90:88:9e:30:85:01: 05:99:f4:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xRYFoKWrjvingAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MWRhMTkxM2YtNTMzZi00NDE0LTllNDktODVlNjc5ZjZjMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj42tZzSqFS3rs3aUFcoK/qUX9RrL0OP37ufM tpDgPZ5bxVYSwjoqkrCV+PK6X+iyWa3CcBTv8Y5gpMFpkP8n8bVfUoNbjHhiyFV6 Hwwo9+YJL7hjsDDxE05/I4WUKZGJovT5IaQRPkqdu8Fe9vgwhIVEHqNdRqaVaWrW e6TRRaHkDyz2A74UkF9+aTBYyTdayIy+zYoEvfEX67LrUzCwCW/XJnHPjHXwA3IY agjoSYxRyAow3LJAufsGRrNRG9dnzBYX/E5VB1KD7u5jG9By2q2HRctjIkEkzgxv o8mbcqxdAGLHIvnzCMLI5NJw40Oqs5DTbRkXW37cTWRvTcRy3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMShh45qU6wjFta/aICkSjB6LI/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDA2N2ZjN2YtYjcwMy0z YzYyLTgyOGQtY2U2YTJlZTJjZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmgo06PDApBOd8DKa1QfQBVokDVGZoNtxPrfHQVPjEMT9NI/IEvukjn LxjJkGxcCbL3h57hDLfwrSER/8Y/QtVhqt7VT97FcpyPbNNlhvdoQU3et25NWCRd u2cmlHPB8+zJOXnE3o5KIrna/6SfS+vCL3SJwcyBvX88Si/SF+7Tt7FSoNa9jA90 mi7Pwir/fcyznDjm2cO7sldc8lZ9/Jz5UO1M/P/lY2YkP82MxUaoajFlwTPCIQIG USz1F8zKCrypRR1czk5/evCSwnTZDLO6MKVkhmg77nW5Z2DrBps5hh0tkFqIwZBL gBu4Mmkd3c+qq1TX8pCInjCFAQWZ9P8= -----END CERTIFICATE-----Generated at Wed May 13 07:54:49 2026 by rpki-client