$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60667079-5f1a-3a08-b9aa-681c7bfada1f.roa File: 60667079-5f1a-3a08-b9aa-681c7bfada1f.roa (raw, json) Hash identifier: 8dSGuYj4Qobne87aeNWEyn4alyigUNTg6p1g65PlNLA= Subject key identifier: D7:21:A0:3C:3B:F1:FC:C8:43:7B:A3:50:8D:FB:10:36:08:7E:00:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A94BA4D0F7CDF559B8BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60667079-5f1a-3a08-b9aa-681c7bfada1f.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 64.196.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:94:ba:4d:0f:7c:df:55:9b:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=3667d235-0915-4034-959f-ce748c7f8c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:d6:a4:38:f1:43:98:15:37:da:9e:9b:38: d1:91:c6:13:bb:35:74:e8:c9:ae:e0:bd:6e:56:ed: 58:30:2f:2c:8d:47:29:9a:48:65:de:d2:42:18:fd: 50:47:12:5c:90:08:8d:98:c0:61:45:90:be:4d:d4: 0a:de:85:b7:9d:e0:e0:19:ec:55:d2:c4:08:e8:52: 33:5b:7e:6f:88:12:5a:1f:c1:82:7c:e5:f8:21:cf: 39:03:a3:c8:fa:5f:26:5d:4e:1f:c5:ea:d1:70:69: 79:41:7c:6b:3b:01:5c:67:e2:e1:c1:15:f3:38:51: fa:c6:f3:77:2b:7f:22:14:c1:d7:49:e5:67:16:5f: 41:31:19:b6:59:1d:18:b5:4d:74:16:d8:de:b8:54: e8:c0:ad:80:9f:66:1f:33:8d:06:b5:1e:85:fd:77: c1:32:e5:57:4b:54:3d:82:b5:33:7d:0c:23:8b:4b: e5:14:d2:f7:3f:df:a0:84:ab:f7:f8:0d:1a:8a:cb: 0f:70:af:64:d2:1d:91:ed:45:e3:19:78:ba:56:8f: 97:8b:54:52:d1:ee:68:c0:da:83:54:82:c5:41:dc: 4a:be:1d:4c:45:57:d1:01:d4:ee:4b:66:c6:48:58: fb:dc:d5:7a:5f:74:4f:47:92:9d:34:d0:d7:5d:68: 61:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:A0:3C:3B:F1:FC:C8:43:7B:A3:50:8D:FB:10:36:08:7E:00:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60667079-5f1a-3a08-b9aa-681c7bfada1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:83:fe:84:a0:b0:97:4e:73:7b:28:36:b0:b8:75:c1:de:1f: d5:dc:9b:bd:02:64:38:82:f2:a1:e7:5d:0e:c0:c5:7a:e2:57: 1b:a5:4c:23:ac:50:46:79:2d:c4:81:9e:73:59:6f:e0:a7:41: 66:3b:9b:d0:ab:ed:45:a5:4b:15:e6:dc:fa:f4:b6:b0:8b:b3: a8:4a:40:04:63:e3:36:3c:49:76:ec:a1:28:13:44:dc:80:b0: 4c:77:ac:1c:5d:c9:92:12:0b:f2:f6:47:91:1e:fa:e3:ad:c8: 22:44:4c:2d:39:d6:cf:f6:cd:4d:94:ee:3f:88:67:55:3f:93: ac:7c:24:2b:3b:d8:b5:ac:91:f8:74:50:ad:ad:19:4d:44:c5: d5:ef:c7:2f:24:ad:36:ee:4d:05:dd:1d:4e:45:2a:a9:c9:90: a5:7b:ba:ce:9c:c4:a5:87:cd:9f:16:2c:1f:a8:bc:4e:88:0b: cb:69:b8:bb:4b:20:a3:63:bf:e7:13:db:d8:7d:9b:b2:e0:d2: 3f:0c:f5:78:ec:3e:7e:66:cb:d5:e8:27:95:dd:96:42:29:65: 1a:ea:84:55:c2:e3:79:fa:cd:79:8c:40:e1:a2:3a:5c:ae:79: 16:3a:c4:4c:f9:78:03:6a:2e:92:78:d9:1d:76:a9:a9:89:ed: bb:e6:4b:1e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCpS6TQ9831Wbi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzY2N2QyMzUtMDkxNS00MDM0LTk1OWYtY2U3NDhjN2Y4Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/jWpDjxQ5gVN9qemzjRkcYTuzV06Mmu4L1u Vu1YMC8sjUcpmkhl3tJCGP1QRxJckAiNmMBhRZC+TdQK3oW3neDgGexV0sQI6FIz W35viBJaH8GCfOX4Ic85A6PI+l8mXU4fxerRcGl5QXxrOwFcZ+LhwRXzOFH6xvN3 K38iFMHXSeVnFl9BMRm2WR0YtU10FtjeuFTowK2An2YfM40GtR6F/XfBMuVXS1Q9 grUzfQwji0vlFNL3P9+ghKv3+A0aissPcK9k0h2R7UXjGXi6Vo+Xi1RS0e5owNqD VILFQdxKvh1MRVfRAdTuS2bGSFj73NV6X3RPR5KdNNDXXWhhYwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNchoDw78fzIQ3ujUI37EDYIfgBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA2NjcwNzktNWYxYS0z YTA4LWI5YWEtNjgxYzdiZmFkYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCQMQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfIP+hKCwl05zeyg2sLh1wd4f1dybvQJkOILyoeddDsDFeuJXG6VMI6xQ RnktxIGec1lv4KdBZjub0KvtRaVLFebc+vS2sIuzqEpABGPjNjxJduyhKBNE3ICw THesHF3JkhIL8vZHkR76463IIkRMLTnWz/bNTZTuP4hnVT+TrHwkKzvYtayR+HRQ ra0ZTUTF1e/HLyStNu5NBd0dTkUqqcmQpXu6zpzEpYfNnxYsH6i8TogLy2m4u0sg o2O/5xPb2H2bsuDSPwz1eOw+fmbL1egnld2WQillGuqEVcLjefrNeYxA4aI6XK55 FjrETPl4A2ouknjZHXapqYntu+ZLHg== -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:38 2026 by rpki-client