$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa File: d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa (raw, json) Hash identifier: 7VhRSBDyR48EUbYH6xE1KZeB9Z/d+B0Sj2XqBCTwu3c= Subject key identifier: 6E:58:B1:16:23:DF:CE:D9:AA:AE:05:B2:BF:CE:71:32:D5:1D:98:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D343A222AB8C657A66C003DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 7029 IP address blocks: 66.19.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:22:2a:b8:c6:57:a6:6c:00:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=3a6499de-70fd-4d19-86ab-d1e52197d048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:8a:3d:65:cb:2c:2d:2d:04:e9:54:92:74: 1a:f3:df:71:dc:c4:bd:f2:5d:99:ea:bc:d8:f6:8d: 21:aa:7d:12:5d:ad:45:4a:5d:35:55:db:9f:c9:64: 12:d9:9c:0c:af:dc:08:0f:40:5c:9b:3b:6b:15:8c: 9d:e1:16:08:14:d9:fb:12:66:5b:89:27:5e:66:2c: 91:f6:88:80:1b:86:9c:f5:91:88:6c:84:28:57:05: 0a:c3:3b:d2:fd:fb:3a:c8:f9:dd:df:82:8d:dc:0a: b5:51:60:87:c6:6c:31:4c:64:9f:5a:09:cd:24:ef: 20:f6:94:0d:03:c4:b5:95:ba:39:8d:41:fa:37:bf: e1:44:ff:c6:85:73:be:af:85:7b:66:2d:4f:a8:94: 67:0c:90:a5:dd:e6:a8:ec:b8:5b:e1:bd:50:74:37: 70:ed:f5:bc:22:2e:79:70:f1:cf:ee:95:ec:df:ae: 77:8c:3c:c8:13:4b:6d:e9:b8:28:11:6d:a4:37:9d: 4e:bb:d2:ed:72:ec:93:9b:25:a2:fc:bb:5a:72:3d: 23:b6:d7:d8:91:50:05:d6:30:1f:73:7c:50:f3:cd: 07:6f:95:b4:5e:19:10:12:41:f6:e1:61:f4:ac:7f: 12:8f:a6:58:04:d9:16:1f:70:82:2f:ed:f6:74:42: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:58:B1:16:23:DF:CE:D9:AA:AE:05:B2:BF:CE:71:32:D5:1D:98:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:af:14:0a:39:69:50:9a:8e:bc:1d:3d:ea:1f:9d:46:34:2e: 72:b7:4e:ea:e8:dc:b0:24:5a:3e:86:18:37:8b:52:56:76:47: 26:fd:c1:58:ce:cb:90:7c:31:99:c3:0d:13:26:9a:38:f9:f3: d1:d6:e6:41:bc:c5:61:3a:11:e7:4a:e8:b5:c1:03:c7:93:ff: 24:12:c1:4f:d4:cf:1d:29:85:13:2d:59:8a:be:e9:81:a8:79: a1:cd:e1:d5:5e:b7:cc:bd:c4:5b:5b:84:2d:04:e5:a9:a5:6b: 0d:fb:62:08:07:6c:c8:d2:d4:f5:7e:be:2b:92:5b:d4:e6:5a: 9c:86:ac:51:e1:49:6e:21:5e:64:91:b6:9b:e5:4b:33:60:4d: ad:9a:25:25:40:e4:97:7d:89:32:97:e4:20:36:bf:8e:9d:ee: 5e:22:91:e5:5d:33:7f:4c:90:fe:96:a3:9e:f8:da:53:ad:e0: 10:26:56:20:c5:06:95:fc:70:f2:9f:53:1f:80:0c:85:06:50: 57:fb:4e:a8:46:a3:c3:b9:c7:41:5e:e3:c6:e9:ed:7d:de:39: a3:16:8a:7f:b5:ee:8f:68:86:97:42:46:63:77:6d:dd:53:d5: 7a:4b:40:8f:60:59:29:d7:fc:32:82:74:38:be:1c:b8:16:7f: 85:9e:4c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OiIquMZXpmwAPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk M2E2NDk5ZGUtNzBmZC00ZDE5LTg2YWItZDFlNTIxOTdkMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17qKPWXLLC0tBOlUknQa899x3MS98l2Z6rzY 9o0hqn0SXa1FSl01VdufyWQS2ZwMr9wID0BcmztrFYyd4RYIFNn7EmZbiSdeZiyR 9oiAG4ac9ZGIbIQoVwUKwzvS/fs6yPnd34KN3Aq1UWCHxmwxTGSfWgnNJO8g9pQN A8S1lbo5jUH6N7/hRP/GhXO+r4V7Zi1PqJRnDJCl3eao7Lhb4b1QdDdw7fW8Ii55 cPHP7pXs3653jDzIE0tt6bgoEW2kN51Ou9LtcuyTmyWi/Ltacj0jttfYkVAF1jAf c3xQ880Hb5W0XhkQEkH24WH0rH8Sj6ZYBNkWH3CCL+32dEKMqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5YsRYj387Zqq4Fsr/OcTLVHZjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg5ZTkwNDYtOTJjZS0z YzRkLTk1YTktNGUwNTc0YTk2OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOvFAo5aVCajrwdPeofnUY0LnK3Turo3LAkWj6GGDeLUlZ2Ryb9wVjO y5B8MZnDDRMmmjj589HW5kG8xWE6EedK6LXBA8eT/yQSwU/Uzx0phRMtWYq+6YGo eaHN4dVet8y9xFtbhC0E5amlaw37YggHbMjS1PV+viuSW9TmWpyGrFHhSW4hXmSR tpvlSzNgTa2aJSVA5Jd9iTKX5CA2v46d7l4ikeVdM39MkP6Wo5742lOt4BAmViDF BpX8cPKfUx+ADIUGUFf7TqhGo8O5x0Fe48bp7X3eOaMWin+17o9ohpdCRmN3bd1T 1XpLQI9gWSnX/DKCdDi+HLgWf4WeTKk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:55 2026 by rpki-client