$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa File: 520be285-2429-3ad0-8ae4-5cc51f14e87e.roa (raw, json) Hash identifier: tAJomlybzHstVJ3r8oEKmcss9tcIKoY+Ea7x9vEaJZ4= Subject key identifier: 5D:34:98:3E:83:D7:54:DE:E3:9F:84:13:30:1C:A1:EC:50:5D:BE:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9536757B4FB4BE4C8D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 66.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:95:36:75:7b:4f:b4:be:4c:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fd89ba03-bd9c-47b8-a044-74864ec636ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:32:0e:65:b6:f1:ce:15:6b:09:c8:92:b4: fc:ca:d8:56:7e:fb:50:0e:65:25:ea:24:e8:e8:55: 3d:a4:ba:f0:e7:48:bb:f7:f0:6d:71:41:52:a2:ac: e4:a0:f7:77:9b:c9:fe:e2:56:ed:1e:6a:b3:09:cf: 33:b0:90:9a:82:c1:93:c4:9a:a7:85:a3:2a:4a:0d: 57:be:0e:e3:ad:47:ab:9e:c4:16:72:39:24:83:bd: 28:bd:da:00:de:a3:0b:81:af:b7:a0:c6:04:87:3b: 6a:8c:59:01:4b:56:5e:57:df:38:fb:2b:9d:18:7f: 31:51:c3:22:df:f2:2c:a0:f3:77:14:ec:57:61:72: 5d:88:a4:51:57:50:26:27:6b:be:e3:a1:83:e4:81: e0:52:7c:ff:b6:a8:b4:0b:e4:79:c1:55:fd:b9:e8: 5f:e6:00:5d:b6:35:65:ab:ba:b6:b4:4b:ae:49:9c: fd:d9:df:d4:2c:07:c3:a9:ca:ca:2d:d3:02:ff:33: 60:2a:86:53:e7:00:1d:21:00:f1:05:a3:c2:8d:a5: f5:fa:cb:bf:cf:77:ff:a7:4c:fc:dc:32:fc:09:75: 47:08:4a:ca:0d:34:32:30:0b:89:dc:17:db:19:aa: 12:07:6e:f2:a8:33:62:b8:07:34:76:d3:cd:51:ae: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:98:3E:83:D7:54:DE:E3:9F:84:13:30:1C:A1:EC:50:5D:BE:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:34:dd:b8:a5:d1:b7:cb:33:4f:ac:e4:81:b0:b2:e6:bb:6e: 70:2a:2a:d2:94:51:4b:5c:f2:fb:ab:25:d7:38:75:dd:51:d9: 42:ca:5d:94:ae:a5:f1:9f:57:76:09:02:16:6b:47:86:cc:d8: 65:bf:31:a6:f2:9c:38:f3:f3:e7:7b:f1:49:e5:da:3a:15:06: 1f:fb:bf:82:fa:a7:50:9e:ea:dc:f6:91:a4:6f:37:9a:9e:af: 90:93:56:d2:ac:d4:f9:ca:ea:59:fd:8e:a9:70:9b:0e:5c:8d: 12:55:26:27:4e:c9:51:d7:0b:5b:20:73:ab:6d:ae:b8:89:56: c0:19:e5:50:5e:4f:3c:b8:a9:5a:d6:c4:75:ef:79:60:a2:19: 4a:fa:a7:6a:e4:32:a1:93:bc:8f:78:27:9a:f2:52:36:fb:e5: 41:b4:81:02:87:24:28:70:de:c1:a6:5a:e0:7e:8b:d5:4f:ac: 50:79:40:91:68:14:f8:80:e4:d0:56:01:0c:19:8e:ca:da:d5: 68:ba:9a:19:2b:98:13:c4:8c:62:57:c7:22:f9:44:a8:a9:73: df:b4:48:ca:a5:e4:0b:27:b8:e4:95:87:e0:28:77:be:d7:cc: 21:d2:b2:eb:3b:aa:ff:0d:8e:99:d6:16:70:78:86:a7:d2:9e: 7b:3d:f1:04 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCpU2dXtPtL5MjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmQ4OWJhMDMtYmQ5Yy00N2I4LWEwNDQtNzQ4NjRlYzYzNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDgyDmW28c4VawnIkrT8ythWfvtQDmUl6iTo 6FU9pLrw50i79/BtcUFSoqzkoPd3m8n+4lbtHmqzCc8zsJCagsGTxJqnhaMqSg1X vg7jrUernsQWcjkkg70ovdoA3qMLga+3oMYEhztqjFkBS1ZeV984+yudGH8xUcMi 3/IsoPN3FOxXYXJdiKRRV1AmJ2u+46GD5IHgUnz/tqi0C+R5wVX9uehf5gBdtjVl q7q2tEuuSZz92d/ULAfDqcrKLdMC/zNgKoZT5wAdIQDxBaPCjaX1+su/z3f/p0z8 3DL8CXVHCErKDTQyMAuJ3BfbGaoSB27yqDNiuAc0dtPNUa6EkwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF00mD6D11Te45+EEzAcoexQXb79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwYmUyODUtMjQyOS0z YWQwLThhZTQtNWNjNTFmMTRlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAbzTduKXRt8szT6zkgbCy5rtucCoq0pRRS1zy+6sl1zh13VHZQspdlK6l 8Z9XdgkCFmtHhszYZb8xpvKcOPPz53vxSeXaOhUGH/u/gvqnUJ7q3PaRpG83mp6v kJNW0qzU+crqWf2OqXCbDlyNElUmJ07JUdcLWyBzq22uuIlWwBnlUF5PPLipWtbE de95YKIZSvqnauQyoZO8j3gnmvJSNvvlQbSBAockKHDewaZa4H6L1U+sUHlAkWgU +IDk0FYBDBmOytrVaLqaGSuYE8SMYlfHIvlEqKlz37RIyqXkCye45JWH4Ch3vtfM IdKy6zuq/w2OmdYWcHiGp9Keez3xBA== -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:42 2026 by rpki-client