$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa File: 86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa (raw, json) Hash identifier: O6CIwj1XXpQlxGhUHS/n9my1Z0iVgyZZls8t7cFi6kw= Subject key identifier: 29:74:E5:BA:5C:5C:3F:B1:B1:94:73:66:D0:BA:8E:7C:DB:C6:DB:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB0E632672396401461B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 69.40.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0e:63:26:72:39:64:01:46:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=8b4fbdc5-e088-4193-8e4d-f9e021edd470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:5b:64:ed:d2:4b:5d:8b:3c:9e:20:5b:bb: cc:d2:c0:86:ae:3d:5d:af:19:de:15:0d:07:a0:bf: 9d:85:68:59:ce:3c:2d:49:5e:e2:53:f3:13:f2:e2: 9b:ee:30:0d:bd:34:43:7d:10:b4:6c:56:4a:90:19: ee:ff:0d:37:16:39:8e:39:13:ac:49:6b:21:c3:9e: 33:84:a5:b7:1c:19:f0:0a:e4:27:a0:37:76:d8:dc: 73:5c:38:eb:dc:12:0b:5e:18:e7:33:80:68:c7:7b: c3:73:f2:8a:7a:f7:23:84:57:c8:1b:6e:4d:24:9e: 05:df:65:c5:32:ab:f2:3f:8b:96:7c:fe:84:55:0b: f6:4a:8c:28:43:ff:87:92:ae:a1:04:3e:6a:6b:24: 27:a6:23:f1:7e:99:af:01:95:ee:ed:9b:34:90:ca: 1c:43:45:6a:1f:9e:80:0f:b9:6a:31:83:95:75:0f: 61:a9:d1:e6:23:6a:91:a3:c4:c1:52:17:c4:75:48: 8d:0f:2f:76:9c:eb:49:39:97:79:2e:bb:f9:e2:5c: 3c:d3:0f:45:ab:53:8a:e0:68:60:fe:62:19:37:2f: e9:df:08:ec:f8:3e:01:2c:d2:9f:bd:93:14:9c:46: 75:54:e1:1b:94:66:cc:64:da:54:11:2f:ee:3f:2f: 77:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:74:E5:BA:5C:5C:3F:B1:B1:94:73:66:D0:BA:8E:7C:DB:C6:DB:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:81:5f:84:50:0f:4b:43:99:95:ca:ef:55:02:28:81:b4:d7: 2f:e4:57:08:33:fb:fe:39:f6:62:cd:5f:e0:33:dd:f8:8b:ff: 80:24:5d:99:dd:b8:dd:07:22:6d:74:08:07:89:ad:f5:79:09: 9e:22:fb:2e:72:3d:f0:18:c0:6a:1e:1b:75:1a:02:db:8c:0c: e0:d7:95:10:94:73:43:f1:ca:fe:54:b9:2a:cc:b7:95:b9:41: d9:f6:df:ce:47:f5:74:b2:0b:47:f6:1c:9e:40:03:b4:90:4d: 11:0c:79:c1:5e:b2:9f:29:bc:3b:cd:16:82:ea:49:85:5a:6e: 15:53:19:8b:5f:99:a1:46:bb:2d:e3:b2:e6:62:93:a9:9c:8c: d7:17:92:62:f6:02:f6:ad:92:21:46:1d:08:fa:68:be:c4:e8: 41:66:71:99:4d:a0:2c:e6:f5:23:6d:02:58:ea:99:c9:15:68: c8:d4:2b:8c:22:46:09:a4:cb:c7:bf:9c:da:cf:65:a0:c8:bd: 06:f0:7b:c3:b7:09:2f:bc:1d:4e:32:c6:6e:c9:11:04:23:a1: 5a:4b:51:21:c4:84:4e:f6:e5:22:96:89:52:ae:87:4f:66:74: 52:31:85:19:22:a9:bf:1f:bc:b4:04:21:4a:d2:37:15:86:7b: 67:0f:d9:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+w5jJnI5ZAFGG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk OGI0ZmJkYzUtZTA4OC00MTkzLThlNGQtZjllMDIxZWRkNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscVbZO3SS12LPJ4gW7vM0sCGrj1drxneFQ0H oL+dhWhZzjwtSV7iU/MT8uKb7jANvTRDfRC0bFZKkBnu/w03FjmOOROsSWshw54z hKW3HBnwCuQnoDd22NxzXDjr3BILXhjnM4Box3vDc/KKevcjhFfIG25NJJ4F32XF MqvyP4uWfP6EVQv2SowoQ/+Hkq6hBD5qayQnpiPxfpmvAZXu7Zs0kMocQ0VqH56A D7lqMYOVdQ9hqdHmI2qRo8TBUhfEdUiNDy92nOtJOZd5Lrv54lw80w9Fq1OK4Ghg /mIZNy/p3wjs+D4BLNKfvZMUnEZ1VOEblGbMZNpUES/uPy93HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl05bpcXD+xsZRzZtC6jnzbxttQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODZkYWEwYjktYTFhZi0z ZTliLTkyNzctMTgxMWZmNmIxY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiBX4RQD0tDmZXK71UCKIG01y/kVwgz+/459mLNX+Az3fiL/4AkXZnd uN0HIm10CAeJrfV5CZ4i+y5yPfAYwGoeG3UaAtuMDODXlRCUc0Pxyv5UuSrMt5W5 Qdn2385H9XSyC0f2HJ5AA7SQTREMecFesp8pvDvNFoLqSYVabhVTGYtfmaFGuy3j suZik6mcjNcXkmL2AvatkiFGHQj6aL7E6EFmcZlNoCzm9SNtAljqmckVaMjUK4wi Rgmky8e/nNrPZaDIvQbwe8O3CS+8HU4yxm7JEQQjoVpLUSHEhE725SKWiVKuh09m dFIxhRkiqb8fvLQEIUrSNxWGe2cP2UA= -----END CERTIFICATE-----Generated at Wed May 13 08:05:25 2026 by rpki-client