$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6384096e-0778-3ee7-b98d-26b9f047af6e.roa File: 6384096e-0778-3ee7-b98d-26b9f047af6e.roa (raw, json) Hash identifier: D4iRIyGbcAIbukgImjFv5DFfEUXaQm0PaUAKekKy1eY= Subject key identifier: 43:4C:03:7D:3A:59:7B:7D:7F:BB:43:71:5C:7C:30:A7:11:04:1C:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D1B1A5F345A60174E81152080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6384096e-0778-3ee7-b98d-26b9f047af6e.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 67.140.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:5f:34:5a:60:17:4e:81:15:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=c6ab6177-08c9-4633-a796-b839e9453471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:16:d5:b7:0e:19:89:15:1c:14:47:77:20:7c: ec:ab:cc:a0:31:aa:e1:94:b1:40:b0:e0:03:8f:f3: 38:01:75:84:95:49:32:88:e6:53:09:7a:79:71:34: c1:27:17:3a:fb:5f:c3:4c:c0:89:97:20:27:b6:03: a6:31:ab:cd:07:57:37:81:a8:f1:9e:52:94:ed:7a: a2:41:9a:46:28:47:a6:ed:04:ac:c7:be:bf:08:19: 09:9a:35:81:75:02:e3:16:5f:93:a8:2c:db:78:8c: ac:50:7a:09:2a:0d:52:11:24:34:8e:a0:e7:14:e5: 13:e5:0d:21:cb:36:9f:83:70:a7:8d:0e:aa:d2:d3: b6:6a:a8:16:e0:97:ad:f8:d6:83:2b:a9:31:9e:be: c6:1f:5e:be:39:ee:90:46:92:e1:12:62:0d:45:67: 7e:f7:38:39:1e:f2:bb:57:20:7c:1c:10:d5:1f:9b: 88:03:bf:18:86:90:5b:6e:d5:82:e3:da:cb:76:fa: 5d:ca:8b:f3:bd:ca:5b:91:07:24:09:7b:3f:77:14: 5d:ac:ab:92:1c:89:b9:7b:dd:6a:8a:df:38:b9:4f: 38:f0:60:c4:9d:75:c6:ed:60:77:8a:33:76:ca:f7: a3:3a:30:a3:d2:e1:86:ca:17:3e:e6:4a:2c:5b:e7: ed:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4C:03:7D:3A:59:7B:7D:7F:BB:43:71:5C:7C:30:A7:11:04:1C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6384096e-0778-3ee7-b98d-26b9f047af6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:92:6d:00:5e:68:75:3f:3a:10:fa:98:73:cc:12:03:05:a7: 27:fc:95:27:eb:23:39:36:7c:3d:58:91:aa:b9:5c:17:4a:d5: d7:cc:90:12:3f:0c:0b:37:0f:27:52:59:03:1e:8d:65:88:fa: 66:a3:ae:90:91:af:68:3e:e3:ad:c0:c0:b7:94:46:70:2f:c3: dc:34:b7:4f:38:da:0c:c0:ba:0e:2b:08:ad:07:d1:82:55:ef: 96:4a:ab:e0:d1:fc:38:86:94:16:26:25:7a:dc:71:64:2e:c0: e5:45:05:66:b7:f5:84:82:78:61:26:ba:ae:9c:95:84:5a:7b: da:7e:44:e5:2f:dd:5e:fe:32:7a:87:69:64:da:95:4a:2c:ca: ea:56:4f:6c:77:62:e4:a9:b0:bd:9c:a2:2f:85:bb:d8:8a:98: ae:9a:fc:3b:b4:d1:cf:29:31:ce:b7:d9:f0:fd:bf:63:b8:55: d5:e4:9b:15:d6:24:19:80:f7:a2:1e:a5:37:77:6f:b9:45:88: 6a:62:89:68:4c:f5:96:5d:5b:bd:cb:b2:4e:a9:c0:a4:f4:fc: 89:76:07:f9:61:42:04:d7:09:36:21:ba:98:d1:de:8d:fe:12: e0:ea:70:56:c0:f9:4c:13:1e:26:1d:f1:04:0a:51:f2:42:22: 49:cf:a3:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGl80WmAXToEVIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YzZhYjYxNzctMDhjOS00NjMzLWE3OTYtYjgzOWU5NDUzNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhbVtw4ZiRUcFEd3IHzsq8ygMarhlLFAsOAD j/M4AXWElUkyiOZTCXp5cTTBJxc6+1/DTMCJlyAntgOmMavNB1c3gajxnlKU7Xqi QZpGKEem7QSsx76/CBkJmjWBdQLjFl+TqCzbeIysUHoJKg1SESQ0jqDnFOUT5Q0h yzafg3CnjQ6q0tO2aqgW4Jet+NaDK6kxnr7GH16+Oe6QRpLhEmINRWd+9zg5HvK7 VyB8HBDVH5uIA78YhpBbbtWC49rLdvpdyovzvcpbkQckCXs/dxRdrKuSHIm5e91q it84uU848GDEnXXG7WB3ijN2yvejOjCj0uGGyhc+5kosW+ft6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENMA306WXt9f7tDcVx8MKcRBBwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjM4NDA5NmUtMDc3OC0z ZWU3LWI5OGQtMjZiOWYwNDdhZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ4wdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2SbQBeaHU/OhD6mHPMEgMFpyf8lSfrIzk2fD1Ykaq5XBdK1dfMkBI/ DAs3DydSWQMejWWI+majrpCRr2g+463AwLeURnAvw9w0t0842gzAug4rCK0H0YJV 75ZKq+DR/DiGlBYmJXrccWQuwOVFBWa39YSCeGEmuq6clYRae9p+ROUv3V7+MnqH aWTalUosyupWT2x3YuSpsL2coi+Fu9iKmK6a/Du00c8pMc632fD9v2O4VdXkmxXW JBmA96IepTd3b7lFiGpiiWhM9ZZdW73Lsk6pwKT0/Il2B/lhQgTXCTYhupjR3o3+ EuDqcFbA+UwTHiYd8QQKUfJCIknPo0E= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:39 2026 by rpki-client