$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c674bb1b-578e-3e76-8f24-7cc5d6cf8e1e.roa File: c674bb1b-578e-3e76-8f24-7cc5d6cf8e1e.roa (raw, json) Hash identifier: Xx+3w1tOpl8nWajg+O2ozir/Z9RR5xRwBqxYNneEadc= Subject key identifier: 19:D4:B7:D0:E5:C8:D4:9C:DD:4C:84:42:D2:30:8D:3B:B4:99:A3:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7820B22406709AC82E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c674bb1b-578e-3e76-8f24-7cc5d6cf8e1e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27338 IP address blocks: 66.0.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:78:20:b2:24:06:70:9a:c8:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f8d6703e-c0ff-4b09-b2ce-e10cab434fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:5b:d7:67:1f:f3:c2:7e:b4:04:24:ec:77: ac:45:f5:92:00:82:c1:42:52:c5:1b:3d:7b:ab:65: d9:97:78:e7:15:ea:5c:a3:3b:68:24:1d:08:91:08: a8:26:e6:a1:a1:b3:f0:70:0e:08:d0:37:d4:92:84: fb:ca:56:b0:b6:a3:23:c0:50:40:87:4f:60:9d:ac: e2:c5:bb:25:73:ec:8f:39:df:67:ea:ea:d2:41:28: 54:b3:93:7a:a9:26:b0:d4:36:c3:28:30:6f:9c:11: 09:aa:3f:b9:51:8a:65:24:e7:14:ae:7d:7f:87:1b: 0b:82:91:8b:e0:c4:15:b5:8e:98:dc:af:2c:e2:41: fb:cb:89:d8:c2:f8:e3:bd:b6:b0:15:93:b5:05:6d: 6e:ac:4f:15:f3:fc:0f:af:11:84:3b:93:12:60:4a: bb:1c:b9:f9:54:ba:2a:1c:a6:cd:0f:cd:74:40:25: 9f:b0:73:0f:82:8d:78:1d:65:e0:23:09:3f:42:64: eb:03:58:9a:05:61:67:32:71:94:bb:e1:bc:e6:ac: 39:66:60:ce:90:37:dd:0e:62:aa:21:cf:61:9a:79: 72:03:3c:2d:dc:11:88:e8:55:5e:2c:4b:37:f9:69: d2:0a:49:7b:d1:ef:09:6b:3e:6a:22:15:8b:0b:c3: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D4:B7:D0:E5:C8:D4:9C:DD:4C:84:42:D2:30:8D:3B:B4:99:A3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c674bb1b-578e-3e76-8f24-7cc5d6cf8e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a6:bc:89:b7:f3:25:1e:ea:82:f1:96:eb:7a:c5:4d:f3:48: 16:33:2e:e4:14:85:00:f9:bc:af:1e:32:9c:a7:80:e5:b3:4b: 98:63:fc:d1:ec:99:c9:80:47:ef:7f:d5:5e:30:bc:8d:5c:39: ed:e7:db:ac:68:74:be:50:b4:e0:88:be:08:c3:57:75:4b:ce: e4:f3:9e:c2:a0:74:48:b1:d7:e3:b6:fd:45:b3:2d:c1:e2:9a: 89:39:75:fc:a7:d1:10:55:88:8b:f4:e8:d7:af:28:b0:22:28: 43:3d:ec:13:a6:ff:8b:31:c0:61:0a:aa:65:28:f5:36:83:d6: 87:89:bc:dc:36:ec:73:0b:73:58:6a:cf:19:81:0c:18:23:45: 94:d4:37:9b:38:f4:14:6d:28:9c:76:4f:0a:80:2c:f9:53:4d: 2c:b1:2e:1e:1f:07:0d:7f:ba:9c:29:11:05:f8:08:2b:44:19: 3e:86:c7:0a:0e:1c:fe:2e:d3:b6:53:ef:f7:ff:47:ae:ab:66: ea:cd:30:96:6e:fb:e4:01:44:bd:22:f1:44:3f:05:16:77:4a: bf:3d:35:6b:af:64:71:76:20:fa:41:17:16:db:b1:be:1d:58: 73:a4:33:5b:f7:fb:f1:f3:a4:06:f5:06:75:77:bb:11:a6:21: ea:5e:f2:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnggsiQGcJrILgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjhkNjcwM2UtYzBmZi00YjA5LWIyY2UtZTEwY2FiNDM0ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+hb12cf88J+tAQk7HesRfWSAILBQlLFGz17 q2XZl3jnFepcoztoJB0IkQioJuahobPwcA4I0DfUkoT7ylawtqMjwFBAh09gnazi xbslc+yPOd9n6urSQShUs5N6qSaw1DbDKDBvnBEJqj+5UYplJOcUrn1/hxsLgpGL 4MQVtY6Y3K8s4kH7y4nYwvjjvbawFZO1BW1urE8V8/wPrxGEO5MSYEq7HLn5VLoq HKbND810QCWfsHMPgo14HWXgIwk/QmTrA1iaBWFnMnGUu+G85qw5ZmDOkDfdDmKq Ic9hmnlyAzwt3BGI6FVeLEs3+WnSCkl70e8Jaz5qIhWLC8PIIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnUt9DlyNSc3UyEQtIwjTu0maN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzY3NGJiMWItNTc4ZS0z ZTc2LThmMjQtN2NjNWQ2Y2Y4ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWmvIm38yUe6oLxlut6xU3zSBYzLuQUhQD5vK8eMpyngOWzS5hj/NHs mcmAR+9/1V4wvI1cOe3n26xodL5QtOCIvgjDV3VLzuTznsKgdEix1+O2/UWzLcHi mok5dfyn0RBViIv06NevKLAiKEM97BOm/4sxwGEKqmUo9TaD1oeJvNw27HMLc1hq zxmBDBgjRZTUN5s49BRtKJx2TwqALPlTTSyxLh4fBw1/upwpEQX4CCtEGT6GxwoO HP4u07ZT7/f/R66rZurNMJZu++QBRL0i8UQ/BRZ3Sr89NWuvZHF2IPpBFxbbsb4d WHOkM1v3+/HzpAb1BnV3uxGmIepe8qE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:38:37 2026 by rpki-client