$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa File: 57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa (raw, json) Hash identifier: lzUk2uj2ERdHJk1QfiZOKT/Aj7jEYXYW0OvDCEOrLOQ= Subject key identifier: 5D:74:97:5F:FF:B4:EE:38:DA:07:D9:9E:48:6F:5B:B9:73:DB:F7:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A68C8A31D030ABBACA400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 66.29.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:68:c8:a3:1d:03:0a:bb:ac:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=25d68afa-c48c-41b7-9d24-f56ddf9d79b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a7:8b:05:64:c3:b5:85:a9:7e:d1:2d:56:a3: 21:6f:d4:1d:0f:b7:88:59:d0:f5:8b:85:b2:e8:04: 29:78:c6:14:15:29:5f:c2:68:0d:57:1e:b8:62:8d: eb:06:a0:89:57:2d:0c:84:df:e1:3f:57:0f:69:57: 7c:ad:d0:80:a9:e8:d9:db:4c:dd:ff:9e:f0:7f:a3: c3:6b:e6:58:4f:6f:1b:09:bb:73:3b:c6:6d:2e:3c: 5a:86:60:84:89:7a:d2:97:96:e9:9c:7d:72:e5:24: 79:b7:d5:69:47:17:67:28:28:d8:5d:77:1b:0e:69: 52:7e:55:7d:58:43:0b:a6:ee:a0:41:e0:e9:d6:0b: 4a:3d:a6:be:54:c3:54:36:a9:a1:54:6e:f2:67:f5: e5:31:98:9e:37:6f:f5:51:ca:b3:b2:00:06:76:73: d1:13:35:8e:ae:a7:c0:28:bd:da:97:72:02:3d:fb: ed:c2:49:e7:5d:d2:7f:c9:1d:8e:4a:64:21:53:5e: 73:92:62:fc:61:1a:5d:01:a8:d4:3d:5b:0a:54:8b: 87:97:24:c9:e4:18:6f:82:a2:22:de:3c:29:17:55: 2d:01:37:d8:39:63:32:bb:f2:64:c2:98:1d:b6:03: bf:06:3f:bf:3e:41:31:f2:61:17:fc:6d:d2:da:de: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:74:97:5F:FF:B4:EE:38:DA:07:D9:9E:48:6F:5B:B9:73:DB:F7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:27:a5:70:3b:74:3b:35:2f:e2:51:cf:eb:5d:8e:62:55:c8: cb:57:6d:d8:f8:b8:d0:f1:b0:22:e1:49:10:4e:6c:5a:46:b6: de:2b:2f:1b:a7:7f:bd:9a:b4:8a:bf:fc:4f:4e:8a:b3:4d:01: 09:08:75:b3:16:82:2e:79:e8:31:f7:c5:5b:61:0e:d8:61:76: 14:c8:b9:3b:02:e4:73:20:84:9b:b8:a7:6c:a0:41:be:c6:79: 9f:e9:10:f0:f8:71:4a:e4:3d:73:47:76:62:55:39:95:3c:8d: d7:1b:ba:13:e2:46:8e:65:b6:49:4f:47:b8:73:d2:2c:77:d9: 45:19:73:a8:dc:95:9a:6b:11:34:64:d8:37:38:18:0c:69:ab: 7e:b5:aa:51:d4:4e:f3:57:da:8d:1e:0a:88:b5:b3:c6:ea:c4: 08:6c:12:96:c4:10:d1:e2:51:f9:96:a8:45:62:8b:79:b9:71: 83:fb:59:24:d4:10:bc:57:04:53:f5:eb:b7:9d:c1:89:d8:71: 98:8f:fe:8d:0e:54:e7:0c:aa:37:3b:6c:cb:f2:e5:08:02:ef: 29:63:dc:b5:dd:45:da:ff:3f:5c:c4:df:c2:6e:81:d3:a9:a0: a7:b0:c6:7e:bf:4f:9c:c7:8c:0d:07:78:a1:e5:aa:5c:cf:df: 8a:b0:46:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmjIox0DCruspAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjVkNjhhZmEtYzQ4Yy00MWI3LTlkMjQtZjU2ZGRmOWQ3OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqeLBWTDtYWpftEtVqMhb9QdD7eIWdD1i4Wy 6AQpeMYUFSlfwmgNVx64Yo3rBqCJVy0MhN/hP1cPaVd8rdCAqejZ20zd/57wf6PD a+ZYT28bCbtzO8ZtLjxahmCEiXrSl5bpnH1y5SR5t9VpRxdnKCjYXXcbDmlSflV9 WEMLpu6gQeDp1gtKPaa+VMNUNqmhVG7yZ/XlMZieN2/1UcqzsgAGdnPREzWOrqfA KL3al3ICPfvtwknnXdJ/yR2OSmQhU15zkmL8YRpdAajUPVsKVIuHlyTJ5BhvgqIi 3jwpF1UtATfYOWMyu/JkwpgdtgO/Bj+/PkEx8mEX/G3S2t7k1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF10l1//tO442gfZnkhvW7lz2/c4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTdjMWM2ZTctOGEwMC0z ZDljLWE0ZTctMWU0MGVmNzZjMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQh3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEnpXA7dDs1L+JRz+tdjmJVyMtXbdj4uNDxsCLhSRBObFpGtt4rLxun f72atIq//E9OirNNAQkIdbMWgi556DH3xVthDthhdhTIuTsC5HMghJu4p2ygQb7G eZ/pEPD4cUrkPXNHdmJVOZU8jdcbuhPiRo5ltklPR7hz0ix32UUZc6jclZprETRk 2Dc4GAxpq361qlHUTvNX2o0eCoi1s8bqxAhsEpbEENHiUfmWqEVii3m5cYP7WSTU ELxXBFP167edwYnYcZiP/o0OVOcMqjc7bMvy5QgC7ylj3LXdRdr/P1zE38JugdOp oKewxn6/T5zHjA0HeKHlqlzP34qwRg4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:10 2026 by rpki-client