$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc2f33f5-0b5d-395e-b272-03f5dcaa1489.roa File: dc2f33f5-0b5d-395e-b272-03f5dcaa1489.roa (raw, json) Hash identifier: vOvMl4bVxuuGsRT4ZKM1Oq0oxkYaGxFsT0Xn+Dtjf4g= Subject key identifier: C5:50:C3:BC:C3:2F:6A:DD:27:0C:FB:F3:E3:92:07:4C:CA:99:BC:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F865E63552C1558A32400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc2f33f5-0b5d-395e-b272-03f5dcaa1489.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 67.140.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:86:5e:63:55:2c:15:58:a3:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=c29032f8-9799-4f8b-96a7-168ed1f1fae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:4f:4c:b7:a9:e0:84:05:32:9f:4c:b5:45: 14:23:3f:4a:21:ee:2f:80:18:c7:b6:ad:a5:40:55: 7d:9d:f5:fc:44:84:3f:78:ba:04:af:2b:20:44:4f: 32:0e:78:ae:ed:8a:e7:e6:4c:28:f4:9c:42:23:81: c0:86:04:a4:81:44:5e:45:1a:a4:fa:07:7d:9d:9d: b6:e5:5a:be:93:60:ec:13:be:20:2f:e3:65:bc:ff: 82:e3:71:c9:88:4d:9a:e1:c0:4c:35:1a:57:32:59: c4:35:24:be:5e:8f:99:48:e3:45:e8:8d:5b:b6:33: a2:17:69:72:38:71:81:a0:04:7a:05:70:ec:77:91: 7b:ca:e1:b1:63:4b:48:44:bc:63:1d:28:0a:ce:ba: e4:89:38:c2:1f:cd:da:31:f1:fd:12:6f:47:fb:2f: be:f7:66:43:70:b8:84:8e:d8:eb:79:76:7e:d9:3e: 1f:8c:d9:6c:fc:68:d9:9d:2e:9a:19:a2:63:d9:3c: 0b:b1:f5:a2:33:6e:3f:3a:97:75:38:11:a9:57:a9: 8b:14:2c:52:23:c0:4f:75:97:81:88:11:f7:76:04: 7b:33:f0:88:f9:3b:09:b6:25:dc:ec:46:5b:6b:76: 00:e2:21:ca:44:a2:fa:c8:06:87:27:e6:fe:71:8a: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:50:C3:BC:C3:2F:6A:DD:27:0C:FB:F3:E3:92:07:4C:CA:99:BC:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc2f33f5-0b5d-395e-b272-03f5dcaa1489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:34:b1:6b:50:bd:b6:95:78:a5:66:c4:c0:36:15:b1:36:59: 9a:89:ae:c4:4e:27:8d:e1:8b:10:3e:86:3c:7c:b6:c0:2b:fc: ea:b2:0f:cc:63:f1:ab:84:f6:ab:08:b1:8c:66:bb:d6:58:07: cb:8c:23:56:dc:a9:f2:ab:e4:68:b9:db:d2:7e:10:05:cb:61: c8:4f:32:72:98:82:6e:8b:d5:b4:cb:d1:cb:b5:84:56:6d:d7: db:9f:72:6d:9d:a0:f4:40:68:7e:86:1d:61:95:99:1f:fb:0a: 8f:70:76:75:85:3a:42:1b:1a:e0:cf:0e:a3:48:71:7e:16:f4: 1d:bb:07:be:e0:c7:04:3c:24:36:3d:c3:d6:aa:83:06:7c:3f: fb:45:ae:55:a7:1a:a4:7e:09:e2:8c:b9:b8:d0:7a:ff:ba:bf: f0:b0:08:57:c5:b9:12:57:c8:61:d9:52:e4:28:85:0a:f4:e1: 8d:fa:3f:92:6a:66:19:04:b1:89:dd:89:5c:92:3f:b7:66:b8: d7:80:b2:5b:30:5e:14:2b:1e:41:55:96:c1:83:72:12:c7:8c: 09:9d:59:ab:d7:66:a1:12:d9:e4:a2:8e:ad:48:37:e5:f8:2e: f4:cd:5d:40:b8:83:38:e8:f8:0f:b2:fe:6e:a7:a8:97:fb:aa: 85:ff:75:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4ZeY1UsFVijJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YzI5MDMyZjgtOTc5OS00ZjhiLTk2YTctMTY4ZWQxZjFmYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7VPTLep4IQFMp9MtUUUIz9KIe4vgBjHtq2l QFV9nfX8RIQ/eLoErysgRE8yDniu7Yrn5kwo9JxCI4HAhgSkgUReRRqk+gd9nZ22 5Vq+k2DsE74gL+NlvP+C43HJiE2a4cBMNRpXMlnENSS+Xo+ZSONF6I1btjOiF2ly OHGBoAR6BXDsd5F7yuGxY0tIRLxjHSgKzrrkiTjCH83aMfH9Em9H+y++92ZDcLiE jtjreXZ+2T4fjNls/GjZnS6aGaJj2TwLsfWiM24/Opd1OBGpV6mLFCxSI8BPdZeB iBH3dgR7M/CI+TsJtiXc7EZba3YA4iHKRKL6yAaHJ+b+cYr5uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVQw7zDL2rdJwz78+OSB0zKmbx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGMyZjMzZjUtMGI1ZC0z OTVlLWIyNzItMDNmNWRjYWExNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ4xuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs0sWtQvbaVeKVmxMA2FbE2WZqJrsROJ43hixA+hjx8tsAr/OqyD8xj 8auE9qsIsYxmu9ZYB8uMI1bcqfKr5Gi529J+EAXLYchPMnKYgm6L1bTL0cu1hFZt 19ufcm2doPRAaH6GHWGVmR/7Co9wdnWFOkIbGuDPDqNIcX4W9B27B77gxwQ8JDY9 w9aqgwZ8P/tFrlWnGqR+CeKMubjQev+6v/CwCFfFuRJXyGHZUuQohQr04Y36P5Jq ZhkEsYndiVySP7dmuNeAslswXhQrHkFVlsGDchLHjAmdWavXZqES2eSijq1IN+X4 LvTNXUC4gzjo+A+y/m6nqJf7qoX/dUI= -----END CERTIFICATE-----Generated at Thu Mar 26 09:09:38 2026 by rpki-client