$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa File: c406f707-442e-31b7-a3ad-0e158a7f1148.roa (raw, json) Hash identifier: /yFoiHP3F/nTmLXHgkDV22X3RpnvxB/ButrCUVdBZSc= Subject key identifier: 5A:A5:78:F3:FD:7B:63:4C:DB:53:E7:10:A9:29:2C:04:04:BF:1F:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A78318226A045C9AB7E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 66.0.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:78:31:82:26:a0:45:c9:ab:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=cbf9ee24-cf01-4ddd-ba75-0072f01ff67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f5:bf:a0:01:92:4d:4b:73:de:cb:34:e1:40: 66:90:fd:20:bf:da:37:b8:b0:21:4f:f5:c3:21:3c: ea:4b:24:bf:81:1c:82:74:19:ad:8f:0f:f8:9f:53: 1b:82:76:92:a4:11:1d:32:05:86:92:15:5b:ca:fd: cf:39:95:f6:a6:93:fc:3a:df:79:6b:70:26:06:4e: 1c:77:bb:23:1d:94:5f:20:9d:1b:c1:f7:d0:31:b5: 09:51:0d:f0:7d:32:24:bc:e6:6c:8c:9f:7d:8d:c9: 60:fb:b1:4a:d6:f4:40:36:1f:aa:d5:c4:d0:98:29: 18:11:f3:9d:80:d2:6e:30:4d:6a:e0:90:d2:af:f0: 65:64:c6:02:df:c7:86:5e:f7:cb:c1:23:40:21:7c: ea:fc:40:61:4b:25:55:89:91:12:68:84:7a:54:b9: 19:d6:71:ba:8a:0b:8d:36:e7:e8:d5:c1:a1:a8:85: 9f:07:b8:bf:15:8b:7c:91:d8:36:4f:0e:29:97:b5: 92:3a:72:a7:ce:b2:3b:8e:51:c4:9a:07:4f:a9:60: 95:34:9a:ad:ca:20:8d:61:70:40:e2:c9:70:df:ec: 23:4e:94:d0:dc:94:c1:8e:c0:c3:fa:7d:4b:fe:c4: 4a:48:9a:43:5d:4a:6f:4a:38:fc:11:a4:b9:11:b7: 5a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A5:78:F3:FD:7B:63:4C:DB:53:E7:10:A9:29:2C:04:04:BF:1F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:1c:e9:74:ba:3e:f6:50:00:dd:06:4b:1a:db:b1:a5:68:0d: b6:f4:8a:99:72:ac:f1:84:cc:ea:88:40:eb:9e:af:8e:c4:bb: 54:65:50:c6:43:92:39:b9:e9:1a:0a:38:1b:c2:88:f6:d9:2a: 23:20:62:aa:e8:e4:81:12:d6:37:96:1e:97:86:35:9f:bb:ed: 09:0a:0c:34:01:3f:6c:a3:ea:cc:28:e9:42:14:7b:36:ec:d9: 47:dc:f5:61:93:62:49:84:b1:77:3e:78:34:c5:17:67:e1:ac: 3d:37:2f:bc:14:f6:32:61:6d:80:1f:2b:e4:5e:f1:1f:a6:8a: 01:9c:a6:8d:f3:4a:3d:8d:56:05:a3:1c:4c:da:0e:3e:a5:c3: da:5e:94:8a:0b:ec:fe:d3:16:a5:a6:96:cb:ff:09:4d:08:50: e0:11:6e:28:db:88:dd:07:f3:9d:e5:6e:d1:ad:30:6d:36:1f: 9e:e1:54:13:29:43:f9:94:43:91:a5:09:94:ec:27:e8:36:8c: 69:15:86:e8:d2:37:48:e9:cc:75:52:ae:83:70:11:42:c8:50: 52:7f:c6:70:b9:89:5e:09:b2:bb:61:e0:b4:22:f9:01:15:95: 0b:ff:6b:12:c3:60:4e:d0:d9:d9:92:6e:42:a0:1b:e8:8f:d0: f4:bf:aa:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCngxgiagRcmrfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2JmOWVlMjQtY2YwMS00ZGRkLWJhNzUtMDA3MmYwMWZmNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPW/oAGSTUtz3ss04UBmkP0gv9o3uLAhT/XD ITzqSyS/gRyCdBmtjw/4n1MbgnaSpBEdMgWGkhVbyv3POZX2ppP8Ot95a3AmBk4c d7sjHZRfIJ0bwffQMbUJUQ3wfTIkvOZsjJ99jclg+7FK1vRANh+q1cTQmCkYEfOd gNJuME1q4JDSr/BlZMYC38eGXvfLwSNAIXzq/EBhSyVViZESaIR6VLkZ1nG6iguN Nufo1cGhqIWfB7i/FYt8kdg2Tw4pl7WSOnKnzrI7jlHEmgdPqWCVNJqtyiCNYXBA 4slw3+wjTpTQ3JTBjsDD+n1L/sRKSJpDXUpvSjj8EaS5EbdaswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqlePP9e2NM21PnEKkpLAQEvx9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQwNmY3MDctNDQyZS0z MWI3LWEzYWQtMGUxNThhN2YxMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgBGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIc6XS6PvZQAN0GSxrbsaVoDbb0iplyrPGEzOqIQOuer47Eu1RlUMZD kjm56RoKOBvCiPbZKiMgYqro5IES1jeWHpeGNZ+77QkKDDQBP2yj6swo6UIUezbs 2Ufc9WGTYkmEsXc+eDTFF2fhrD03L7wU9jJhbYAfK+Re8R+migGcpo3zSj2NVgWj HEzaDj6lw9pelIoL7P7TFqWmlsv/CU0IUOARbijbiN0H853lbtGtMG02H57hVBMp Q/mUQ5GlCZTsJ+g2jGkVhujSN0jpzHVSroNwEULIUFJ/xnC5iV4Jsrth4LQi+QEV lQv/axLDYE7Q2dmSbkKgG+iP0PS/qn8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:04 2026 by rpki-client