$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa File: d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa (raw, json) Hash identifier: LE/0yKKr5RfD2jS4tgmpZWnSVGICxUugI6FRN7idjXE= Subject key identifier: 23:2F:23:D7:7E:D7:4C:10:89:89:04:9E:D0:3C:AB:61:54:D5:BA:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A95C72C459DF99C9A1B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 66.83.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:95:c7:2c:45:9d:f9:9c:9a:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=dddc2d73-07e2-44ff-b8a9-f47b14175c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e2:06:f0:b2:0f:a1:a2:4b:84:24:66:13:53: 3c:e4:c3:d7:85:ba:49:38:ff:e1:e4:ee:91:77:06: e7:45:27:5a:33:64:f6:a4:cf:0d:68:b3:b7:da:c5: 73:9d:00:05:1f:14:9e:9e:d6:e9:f4:a3:34:49:bd: b6:bb:dd:9d:a3:c1:a7:fb:33:23:e4:ea:65:26:07: fc:24:bc:18:77:7d:76:0b:ab:b2:dc:dd:87:23:f6: 1b:18:75:c3:e1:43:d5:8c:e7:e4:f3:bd:76:49:7c: 3d:7a:33:d9:84:e6:ab:08:07:76:b2:f1:c1:ff:58: c7:5a:28:e4:d8:37:71:48:d1:de:15:56:15:2c:b6: ab:d8:23:9e:eb:01:14:de:14:1f:43:a3:95:2e:a0: 1a:af:a5:17:95:4c:e9:ef:46:1f:0e:77:1a:bc:8b: e1:e2:f5:67:d7:e3:35:e0:01:fe:ea:5c:c3:10:b9: c0:77:c3:2c:46:e5:e9:17:83:2f:24:88:a0:e7:8b: 00:a7:9e:3c:5b:52:74:15:45:92:7c:f6:73:28:ce: 63:a4:f0:68:1a:e1:2b:80:1c:44:b1:84:54:0b:d1: 03:02:d1:7d:89:14:b1:e3:ea:c4:f6:95:e9:03:1d: a8:b9:67:75:08:9b:8f:3a:15:99:90:b8:55:b5:d4: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2F:23:D7:7E:D7:4C:10:89:89:04:9E:D0:3C:AB:61:54:D5:BA:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4b7878c-1ed5-3ae5-b43c-01573638dc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.83.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b1:04:88:72:49:21:e2:f6:f8:ab:97:59:d0:c6:b3:82:c5: 57:22:60:a1:92:65:1a:98:27:2a:fb:1e:7d:3c:a9:20:80:42: f1:7f:1c:8e:9d:66:d7:5d:a2:7c:5e:d5:f4:33:0e:e4:ef:ed: 82:f2:16:05:45:aa:53:3d:61:64:f0:10:b3:3c:f1:97:03:ca: 4f:f6:9f:80:ec:c8:14:ee:16:68:24:34:fb:6b:a8:d5:ec:35: 85:a1:21:1b:59:09:19:95:2e:99:89:8f:0d:97:c3:16:9e:91: 26:1f:2e:cb:96:8a:31:96:8d:aa:bb:ce:52:f0:a8:e1:71:d4: 0e:63:72:14:67:90:d2:9a:bd:01:93:1b:e6:e8:b6:93:e1:02: 08:03:53:f9:4b:bf:13:a8:5a:77:bd:f0:3a:25:ce:1d:7e:ee: ce:80:9f:0b:75:cd:fd:8a:9c:f4:68:42:d6:f6:90:48:c9:ae: 55:4c:ec:81:62:9f:ec:8f:45:05:50:73:99:61:58:60:f1:71: 97:de:6c:c5:cd:32:85:12:29:97:44:38:0c:72:60:d4:a0:27: a5:f1:30:2e:77:21:8f:40:ab:6e:cc:a8:ad:7f:50:bf:af:22: 92:a6:af:38:b5:cf:f3:e0:bd:44:c6:ba:42:2b:a2:3c:b5:3d: b9:4d:2a:ef -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCpXHLEWd+ZyaG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZGRkYzJkNzMtMDdlMi00NGZmLWI4YTktZjQ3YjE0MTc1YzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguIG8LIPoaJLhCRmE1M85MPXhbpJOP/h5O6R dwbnRSdaM2T2pM8NaLO32sVznQAFHxSentbp9KM0Sb22u92do8Gn+zMj5OplJgf8 JLwYd312C6uy3N2HI/YbGHXD4UPVjOfk8712SXw9ejPZhOarCAd2svHB/1jHWijk 2DdxSNHeFVYVLLar2COe6wEU3hQfQ6OVLqAar6UXlUzp70YfDncavIvh4vVn1+M1 4AH+6lzDELnAd8MsRuXpF4MvJIig54sAp548W1J0FUWSfPZzKM5jpPBoGuErgBxE sYRUC9EDAtF9iRSx4+rE9pXpAx2ouWd1CJuPOhWZkLhVtdSVvQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCMvI9d+10wQiYkEntA8q2FU1bqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRiNzg3OGMtMWVkNS0z YWU1LWI0M2MtMDE1NzM2MzhkYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQlMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHbEEiHJJIeL2+KuXWdDGs4LFVyJgoZJlGpgnKvsefTypIIBC8X8cjp1m 112ifF7V9DMO5O/tgvIWBUWqUz1hZPAQszzxlwPKT/afgOzIFO4WaCQ0+2uo1ew1 haEhG1kJGZUumYmPDZfDFp6RJh8uy5aKMZaNqrvOUvCo4XHUDmNyFGeQ0pq9AZMb 5ui2k+ECCANT+Uu/E6had73wOiXOHX7uzoCfC3XN/Yqc9GhC1vaQSMmuVUzsgWKf 7I9FBVBzmWFYYPFxl95sxc0yhRIpl0Q4DHJg1KAnpfEwLnchj0CrbsyorX9Qv68i kqavOLXP8+C9RMa6QiuiPLU9uU0q7w== -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:42 2026 by rpki-client