$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0bf5451-2f57-3e77-8edd-17c3306ac388.roa File: b0bf5451-2f57-3e77-8edd-17c3306ac388.roa (raw, json) Hash identifier: +7sVNoppLRrmp5Q5lJefMNulTpBbSzyNldmoq/Ky8Ms= Subject key identifier: C6:71:04:B5:58:84:04:6A:EA:C7:AB:C1:99:10:79:4F:A3:6F:6F:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A69E64BA8244691083B10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0bf5451-2f57-3e77-8edd-17c3306ac388.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 67.224.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:69:e6:4b:a8:24:46:91:08:3b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=68eec1f0-42da-4c86-924c-74b9280ef7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:f2:01:8f:a4:56:d1:79:f3:b4:02:df:7d: 6a:03:8e:a7:56:91:90:ec:90:56:87:59:2e:14:9f: f4:53:27:b5:a8:47:aa:cf:3d:3c:d7:84:c9:55:5d: d9:31:2a:04:37:80:c1:45:65:8c:fd:72:d9:15:18: 9a:34:8e:da:fb:b0:64:fd:0f:a1:6e:51:ee:23:71: 96:b4:47:d7:32:fe:81:4b:d7:85:11:43:8b:76:e4: bf:ff:96:9d:a1:b4:20:57:4f:52:65:ca:93:49:6e: 50:c8:51:47:3b:f1:35:b4:e9:9e:85:5e:29:93:43: c0:3f:fe:41:d8:7c:c4:18:20:c6:42:a4:27:ac:64: 0b:a9:12:4b:a9:9e:a0:c7:3d:41:cf:62:d0:a1:87: f4:b0:76:1d:86:36:fe:ac:4a:ca:c4:0c:e4:95:bd: 7c:4d:f1:73:5b:3a:54:a1:37:70:75:be:e7:f0:de: 68:a8:95:7d:c9:a4:49:47:98:f0:de:37:10:1c:a4: 52:96:5f:64:0d:b3:a3:25:d0:36:06:68:96:84:13: f9:61:8a:5e:4c:ee:92:d3:bd:de:0c:74:4e:f9:13: f2:1d:12:82:ec:64:21:a3:55:98:1b:86:0c:c5:e7: 63:0c:37:3f:72:bb:44:c7:f7:0f:3a:a3:fb:46:e4: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:71:04:B5:58:84:04:6A:EA:C7:AB:C1:99:10:79:4F:A3:6F:6F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0bf5451-2f57-3e77-8edd-17c3306ac388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:74:26:ce:3d:b7:66:8a:cc:0f:d2:9a:32:73:c1:52:f5:6e: ef:ff:82:71:42:a5:2f:1f:73:2e:85:37:29:ca:c0:f3:06:65: 5e:28:d1:d7:2e:fb:fd:fa:21:07:38:ae:cc:af:ec:d6:64:12: ef:ef:39:26:e1:0d:ed:27:b1:02:8b:b0:59:a1:c4:96:4b:f5: 4c:47:40:c8:d4:3e:20:e8:0a:46:7f:7b:e4:5f:a8:5d:39:8b: 74:f0:09:95:b3:46:ce:60:27:fa:58:3c:2d:b8:61:a1:88:4e: 81:6c:d9:b7:bb:b4:51:23:ec:55:bf:ee:27:d8:3a:85:64:f2: 3a:41:9e:28:65:17:ba:77:c8:b7:31:c3:6a:81:d6:a1:af:e7: 4b:1f:63:5f:8b:5e:d2:25:7b:09:72:65:10:07:3b:c7:4b:d3: 26:39:ba:df:17:45:f9:0b:b5:c7:bf:c7:fc:88:0a:22:de:32: 3a:ce:f2:a6:b6:2e:e4:32:67:44:54:6a:ea:25:66:69:ca:6e: 97:e5:1f:30:19:8c:c4:50:0d:0a:93:dc:ec:52:d4:1d:d2:99: ab:39:47:8b:84:9e:1c:03:72:4c:be:bc:69:44:66:80:e9:f9: b1:30:8f:b7:ed:39:42:95:ea:e5:84:39:14:6f:11:85:84:fe: aa:03:69:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmnmS6gkRpEIOxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjhlZWMxZjAtNDJkYS00Yzg2LTkyNGMtNzRiOTI4MGVmN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ryAY+kVtF587QC331qA46nVpGQ7JBWh1ku FJ/0Uye1qEeqzz0814TJVV3ZMSoEN4DBRWWM/XLZFRiaNI7a+7Bk/Q+hblHuI3GW tEfXMv6BS9eFEUOLduS//5adobQgV09SZcqTSW5QyFFHO/E1tOmehV4pk0PAP/5B 2HzEGCDGQqQnrGQLqRJLqZ6gxz1Bz2LQoYf0sHYdhjb+rErKxAzklb18TfFzWzpU oTdwdb7n8N5oqJV9yaRJR5jw3jcQHKRSll9kDbOjJdA2BmiWhBP5YYpeTO6S073e DHRO+RPyHRKC7GQho1WYG4YMxedjDDc/crtEx/cPOqP7RuSFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZxBLVYhARq6serwZkQeU+jb2+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjBiZjU0NTEtMmY1Ny0z ZTc3LThlZGQtMTdjMzMwNmFjMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQ+AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt0Js49t2aKzA/SmjJzwVL1bu//gnFCpS8fcy6FNynKwPMGZV4o0dcu +/36IQc4rsyv7NZkEu/vOSbhDe0nsQKLsFmhxJZL9UxHQMjUPiDoCkZ/e+RfqF05 i3TwCZWzRs5gJ/pYPC24YaGIToFs2be7tFEj7FW/7ifYOoVk8jpBnihlF7p3yLcx w2qB1qGv50sfY1+LXtIlewlyZRAHO8dL0yY5ut8XRfkLtce/x/yICiLeMjrO8qa2 LuQyZ0RUauolZmnKbpflHzAZjMRQDQqT3OxS1B3Smas5R4uEnhwDcky+vGlEZoDp +bEwj7ftOUKV6uWEORRvEYWE/qoDaUY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:03 2026 by rpki-client