$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa File: 6dced57e-3770-3946-aa28-f17af5922741.roa (raw, json) Hash identifier: ngQJzeNTX0BFGvKU/F1UeG5EF02B3/mhrMTOtJX0wt0= Subject key identifier: 3C:55:86:1A:C9:B9:E3:B6:33:36:9A:B5:2E:5C:CB:19:F5:EC:D3:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A79293BF80007A4528AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 29877 IP address blocks: 66.29.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:79:29:3b:f8:00:07:a4:52:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c09a6b95-18f0-4eae-af35-e75820d3be24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:75:ab:c9:fa:a4:12:da:a2:94:6c:42:0b:da: f9:23:2a:70:40:68:64:d9:01:7a:e0:c0:28:66:34: cc:94:06:a5:97:63:69:e0:d2:1e:68:76:27:ef:c8: b7:7c:4c:d3:a4:82:56:b7:9b:6f:fd:3d:f6:4b:71: 58:26:a6:4f:6b:a4:52:d0:35:70:38:2a:62:96:d5: 43:3a:4c:d8:35:78:96:5f:46:08:57:fb:ed:3a:5e: 53:16:03:2a:08:74:c1:b5:ff:a6:3a:83:51:e3:47: 5c:ea:d5:66:76:f9:33:e9:61:dc:0c:17:de:88:a5: 8f:d7:c9:c4:3b:70:51:9b:61:76:73:51:29:8e:b7: c0:91:92:a3:34:5a:bd:61:29:63:a1:f4:8b:e9:ec: d3:80:6b:ba:46:50:e2:42:43:2d:66:13:b5:33:ee: 4e:5a:f5:fb:a6:cc:29:9a:06:eb:df:5d:f3:9a:72: 9a:47:5e:1a:f1:83:c6:68:1d:1d:ad:bf:6b:5a:0e: d7:a3:24:e1:3d:1e:60:98:48:76:ef:40:d8:af:ab: 77:fa:31:71:8e:4f:e0:00:95:10:96:56:45:34:c4: c8:97:73:c3:4d:f7:5f:7d:66:8e:78:4c:9b:f2:5a: 12:85:dc:a8:2e:62:c9:d8:9d:a3:d9:9a:58:b3:80: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:55:86:1A:C9:B9:E3:B6:33:36:9A:B5:2E:5C:CB:19:F5:EC:D3:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:87:0f:6e:e9:95:66:40:49:cc:1d:c8:6d:f7:e6:51:d9:f2: da:41:81:b6:c8:44:02:65:04:56:bb:1e:b7:d2:ac:06:12:4f: 25:6a:eb:f2:ff:89:82:36:4c:65:9e:96:d9:7d:3d:ce:f1:31: 10:c0:96:8e:9e:f2:28:85:d8:9e:3d:81:53:42:6e:63:83:76: 38:bf:f7:39:f6:2c:8b:d5:63:45:89:a5:2d:f3:db:6f:05:c9: e2:28:ff:c7:c2:2d:2c:aa:ff:bb:bf:a6:3f:4c:6c:8f:3b:52: bd:17:a7:1f:5f:90:98:4a:e4:d9:db:11:30:a3:28:ca:bd:99: 54:ad:63:7a:54:69:b5:47:23:b2:05:ca:ce:cb:68:00:75:28: 18:59:8e:bb:12:93:49:1d:ee:57:20:fe:44:87:32:ab:1f:fc: f1:08:73:22:fd:fc:e8:3e:07:3b:26:1a:d8:0e:c3:c6:17:49: fe:09:56:6b:7e:25:ca:db:24:03:83:8d:7e:45:93:de:aa:c5: 53:2f:31:21:47:1f:4e:30:4c:14:87:33:02:0c:76:c3:93:f1: ee:7b:bf:e0:42:15:48:e4:df:a5:bd:ac:00:95:7e:28:47:70: 65:e7:21:20:46:57:b8:ae:e8:90:98:15:7f:23:06:96:83:06: d1:2e:33:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnkpO/gAB6RSisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzA5YTZiOTUtMThmMC00ZWFlLWFmMzUtZTc1ODIwZDNiZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHWryfqkEtqilGxCC9r5IypwQGhk2QF64MAo ZjTMlAall2Np4NIeaHYn78i3fEzTpIJWt5tv/T32S3FYJqZPa6RS0DVwOCpiltVD OkzYNXiWX0YIV/vtOl5TFgMqCHTBtf+mOoNR40dc6tVmdvkz6WHcDBfeiKWP18nE O3BRm2F2c1EpjrfAkZKjNFq9YSljofSL6ezTgGu6RlDiQkMtZhO1M+5OWvX7pswp mgbr313zmnKaR14a8YPGaB0drb9rWg7XoyThPR5gmEh270DYr6t3+jFxjk/gAJUQ llZFNMTIl3PDTfdffWaOeEyb8loShdyoLmLJ2J2j2ZpYs4BHcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxVhhrJueO2MzaatS5cyxn17NMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmRjZWQ1N2UtMzc3MC0z OTQ2LWFhMjgtZjE3YWY1OTIyNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQh3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCHD27plWZAScwdyG335lHZ8tpBgbbIRAJlBFa7HrfSrAYSTyVq6/L/ iYI2TGWeltl9Pc7xMRDAlo6e8iiF2J49gVNCbmODdji/9zn2LIvVY0WJpS3z228F yeIo/8fCLSyq/7u/pj9MbI87Ur0Xpx9fkJhK5NnbETCjKMq9mVStY3pUabVHI7IF ys7LaAB1KBhZjrsSk0kd7lcg/kSHMqsf/PEIcyL9/Og+BzsmGtgOw8YXSf4JVmt+ JcrbJAODjX5Fk96qxVMvMSFHH04wTBSHMwIMdsOT8e57v+BCFUjk36W9rACVfihH cGXnISBGV7iu6JCYFX8jBpaDBtEuM34= -----END CERTIFICATE-----Generated at Thu Mar 26 21:12:49 2026 by rpki-client