$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771691b3-85e2-3225-acad-f9e30b8a0d7d.roa File: 771691b3-85e2-3225-acad-f9e30b8a0d7d.roa (raw, json) Hash identifier: y+bcQSuaQorrI/n349MKkGdzR1HlnFG37Z6g8BPDUvU= Subject key identifier: 26:C1:3B:C4:D0:12:C6:0F:27:2A:B5:FF:6B:C2:1F:1F:A4:7D:6B:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7D4717F45150BE1BF000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771691b3-85e2-3225-acad-f9e30b8a0d7d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 69.66.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7d:47:17:f4:51:50:be:1b:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=836df3e3-6a15-4361-b68a-119fe8dc60bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:e2:06:da:ec:81:38:fd:85:5a:db:03:a4: a6:db:1f:b2:ce:7d:e5:cc:a1:ad:30:b2:c9:12:df: 20:c1:c0:3e:d7:ce:dd:87:c9:06:a9:12:76:ee:68: 28:af:12:fa:a3:41:06:a6:be:f2:0b:90:bd:31:f0: bf:4c:9d:ec:77:53:81:a5:a8:3d:f6:92:9c:3c:18: 72:5b:13:d3:23:0b:0d:45:f5:85:51:27:37:e5:1d: e2:ff:58:68:f6:68:49:e9:a3:0e:f6:4c:be:36:af: 77:b3:4e:87:64:bb:6f:ee:5c:c9:20:c8:68:cb:89: 52:b9:42:53:67:6f:4a:9f:e9:67:d3:8c:8c:3a:34: fa:40:b2:39:25:b4:64:11:7d:59:15:9a:e6:b8:48: 42:fe:6e:4f:0c:c1:f4:f5:d6:e5:31:bc:a8:f9:25: 21:c4:b4:08:fd:16:2a:12:1c:54:44:0c:42:1f:82: db:62:f3:2f:2f:17:19:6c:7e:c9:9c:76:6b:9d:b9: 3f:fe:c7:56:c9:9b:5e:aa:8c:42:6f:6c:83:97:8a: 61:44:f2:f9:0e:22:dd:9c:66:8a:8c:c5:ca:3d:c9: 37:29:f6:b4:47:77:58:a0:2e:ba:78:c8:4b:d5:63: 69:2b:08:16:74:c5:50:35:7a:aa:f3:e5:f0:c2:f1: 70:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C1:3B:C4:D0:12:C6:0F:27:2A:B5:FF:6B:C2:1F:1F:A4:7D:6B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771691b3-85e2-3225-acad-f9e30b8a0d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:8c:e1:00:25:99:69:ad:04:01:4c:6e:af:41:a5:59:45:a6: d4:35:b0:fa:b2:bb:66:9a:71:19:68:7c:d2:34:09:d4:46:87: 2c:44:44:72:89:6d:bc:88:c6:30:e5:14:33:9b:f2:4a:1b:ad: 23:e1:f8:3f:e3:99:c3:6b:7d:00:63:6d:45:fd:2b:c2:de:fa: b2:c7:1a:49:88:95:98:19:f0:77:4e:d2:4b:24:05:4d:ef:25: 6a:5f:74:b7:e8:ca:ff:bc:6a:6c:70:f8:89:6d:39:5b:d0:2c: 63:29:d1:2e:90:02:30:48:3d:ae:8d:db:3b:57:d1:af:2c:09: 8a:4c:51:4e:ce:b9:fc:15:fb:71:83:80:46:e5:25:42:ac:5b: 84:ed:e3:d0:64:d6:a7:71:b3:b2:5f:e0:98:52:66:3d:f9:21: c5:2c:2a:b6:ce:98:ac:f8:ce:a2:56:12:7e:f7:fc:67:57:ef: 53:ae:c8:47:76:dc:97:87:89:a5:a8:52:9b:5e:2a:f4:f7:71: 20:16:a4:33:5a:a2:d3:b3:91:57:29:62:4c:b8:5b:ca:9f:c1: cd:3f:49:56:a4:77:af:f2:45:65:57:73:cb:58:52:cb:75:72: 97:cb:4a:51:a7:3a:32:82:de:71:00:d4:3d:a7:42:ce:8b:82: 47:8c:79:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCn1HF/RRUL4b8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODM2ZGYzZTMtNmExNS00MzYxLWI2OGEtMTE5ZmU4ZGM2MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHPiBtrsgTj9hVrbA6Sm2x+yzn3lzKGtMLLJ Et8gwcA+187dh8kGqRJ27mgorxL6o0EGpr7yC5C9MfC/TJ3sd1OBpag99pKcPBhy WxPTIwsNRfWFUSc35R3i/1ho9mhJ6aMO9ky+Nq93s06HZLtv7lzJIMhoy4lSuUJT Z29Kn+ln04yMOjT6QLI5JbRkEX1ZFZrmuEhC/m5PDMH09dblMbyo+SUhxLQI/RYq EhxURAxCH4LbYvMvLxcZbH7JnHZrnbk//sdWyZteqoxCb2yDl4phRPL5DiLdnGaK jMXKPck3Kfa0R3dYoC66eMhL1WNpKwgWdMVQNXqq8+XwwvFwwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbBO8TQEsYPJyq1/2vCHx+kfWsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzcxNjkxYjMtODVlMi0z MjI1LWFjYWQtZjllMzBiOGEwZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUISMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWM4QAlmWmtBAFMbq9BpVlFptQ1sPqyu2aacRlofNI0CdRGhyxERHKJ bbyIxjDlFDOb8kobrSPh+D/jmcNrfQBjbUX9K8Le+rLHGkmIlZgZ8HdO0kskBU3v JWpfdLfoyv+8amxw+IltOVvQLGMp0S6QAjBIPa6N2ztX0a8sCYpMUU7OufwV+3GD gEblJUKsW4Tt49Bk1qdxs7Jf4JhSZj35IcUsKrbOmKz4zqJWEn73/GdX71OuyEd2 3JeHiaWoUpteKvT3cSAWpDNaotOzkVcpYky4W8qfwc0/SVakd6/yRWVXc8tYUst1 cpfLSlGnOjKC3nEA1D2nQs6LgkeMedk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:33 2026 by rpki-client