$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa File: cff704e6-6037-3379-841b-631795dec5ac.roa (raw, json) Hash identifier: 9fkiv9RBJxzrZ24koYf2iRiCqGWhKLL8FLq1lB/omzc= Subject key identifier: 8D:70:17:ED:6E:35:9A:8C:1A:C5:3C:F0:1B:59:F1:75:E9:72:C3:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F858473207C8D6DB38E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 67.140.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:85:84:73:20:7c:8d:6d:b3:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=a90b73a1-ace6-4d90-92ed-f16abd139c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1e:96:c8:ef:67:3a:ce:f7:33:3b:65:9a:b9: 8e:01:e7:75:2b:5a:0b:8b:a0:25:7d:da:46:c3:b7: 2e:a0:14:ef:0b:2d:f9:a6:78:2b:d1:1b:aa:0d:ed: 45:51:dc:63:7f:6f:15:a9:16:1b:9a:3d:f2:2c:21: a0:8a:3b:1a:90:62:ca:f0:ab:02:31:cb:94:a5:30: e3:7c:5a:0d:7c:89:f8:6f:a3:b4:df:91:a9:7a:ac: 08:7d:cc:aa:04:5c:77:3c:36:e0:7f:db:b1:a4:92: f7:bf:5b:91:a8:b7:95:88:e9:cb:42:82:b8:7d:8d: d2:1f:5b:62:5a:05:7f:3b:3e:0b:e5:28:db:32:5f: 70:81:d0:4c:5e:f5:82:b6:3e:f8:d7:b2:ef:46:ef: 79:57:23:c2:e1:b3:ce:37:2f:af:02:35:c5:58:ae: d1:94:e6:59:48:65:b7:f2:49:00:a5:d4:a8:3a:90: e8:8b:cf:32:96:f2:77:d0:0b:42:b1:bd:7c:da:dc: 73:a3:74:e9:02:d4:24:fc:47:c0:a9:fb:68:de:f1: e2:78:06:48:fd:d8:6b:70:3e:96:ef:5d:95:93:30: e3:07:62:fa:af:81:27:9f:5f:b6:e2:cf:76:89:e7: 32:90:d7:17:b8:9b:52:5f:ff:6f:32:c3:47:97:dc: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:70:17:ED:6E:35:9A:8C:1A:C5:3C:F0:1B:59:F1:75:E9:72:C3:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d3:b3:7d:bb:94:f0:af:f3:1d:2e:f7:28:5b:fc:17:31:72: 06:c9:ba:d5:11:c6:38:48:1d:e0:44:01:57:6f:55:64:c4:9b: 95:61:03:1e:e6:a1:d0:29:fb:bc:32:56:33:9a:58:ff:fa:9b: 70:f2:81:db:a7:e9:76:86:a3:43:d4:06:86:cc:1a:5c:91:bf: f6:3f:6d:38:78:65:8b:e7:29:ab:8d:4b:b5:a6:f3:7c:25:ba: f6:10:0c:e4:31:2d:63:28:61:1e:e7:c8:0a:eb:a6:27:d8:93: 6e:b2:e0:a5:89:73:6c:d7:45:21:2d:bf:63:0e:3e:df:b5:c2: 60:61:86:05:5c:fe:c7:99:52:99:aa:d8:08:77:1c:54:67:00: b9:14:8b:20:b1:d4:95:44:7a:26:c3:60:9f:cc:39:1b:87:c1: 30:c0:9f:c9:26:5a:9d:8d:47:62:e3:b8:6a:bb:9b:34:51:4a: 96:20:d4:bb:7d:e3:f8:7c:f5:42:d5:8b:ae:f6:dc:bf:88:04: 7b:cd:a5:2e:c1:fe:a1:8f:bb:fa:46:50:68:cf:76:0f:eb:79: 90:19:6d:74:fb:e0:99:8f:eb:03:12:ca:7e:ff:30:40:e0:90: 53:38:d3:40:d5:5e:5f:fb:db:31:fe:85:8e:8b:df:43:2b:09: e6:4b:5d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4WEcyB8jW2zjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YTkwYjczYTEtYWNlNi00ZDkwLTkyZWQtZjE2YWJkMTM5YzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh6WyO9nOs73MztlmrmOAed1K1oLi6AlfdpG w7cuoBTvCy35pngr0RuqDe1FUdxjf28VqRYbmj3yLCGgijsakGLK8KsCMcuUpTDj fFoNfIn4b6O035GpeqwIfcyqBFx3PDbgf9uxpJL3v1uRqLeViOnLQoK4fY3SH1ti WgV/Oz4L5SjbMl9wgdBMXvWCtj7417LvRu95VyPC4bPONy+vAjXFWK7RlOZZSGW3 8kkApdSoOpDoi88ylvJ30AtCsb182txzo3TpAtQk/EfAqfto3vHieAZI/dhrcD6W 712VkzDjB2L6r4Enn1+24s92iecykNcXuJtSX/9vMsNHl9ypQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1wF+1uNZqMGsU88BtZ8XXpcsP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2ZmNzA0ZTYtNjAzNy0z Mzc5LTg0MWItNjMxNzk1ZGVjNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfTs327lPCv8x0u9yhb/BcxcgbJutURxjhIHeBEAVdvVWTEm5VhAx7m odAp+7wyVjOaWP/6m3Dygdun6XaGo0PUBobMGlyRv/Y/bTh4ZYvnKauNS7Wm83wl uvYQDOQxLWMoYR7nyArrpifYk26y4KWJc2zXRSEtv2MOPt+1wmBhhgVc/seZUpmq 2Ah3HFRnALkUiyCx1JVEeibDYJ/MORuHwTDAn8kmWp2NR2LjuGq7mzRRSpYg1Lt9 4/h89ULVi6723L+IBHvNpS7B/qGPu/pGUGjPdg/reZAZbXT74JmP6wMSyn7/MEDg kFM400DVXl/72zH+hY6L30MrCeZLXeM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:51 2026 by rpki-client