$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa File: ecfb9210-26d0-385b-979e-e9e75e5f5103.roa (raw, json) Hash identifier: 0LJIFpPZCc1t8JkevFzzMiJPCH/xesVB/aRroNL8i9s= Subject key identifier: 05:AF:CD:1B:F5:9C:CA:DC:0D:C1:FA:BC:06:CE:74:AA:77:44:F9:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3DFFE46ECE4B1C64B6826800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 67.214.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e4:6e:ce:4b:1c:64:b6:82:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=473528c4-c3e6-4462-ae5f-f1bf4262eff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:63:1d:3f:0a:da:31:07:b1:1a:7e:1f:5d: c5:b8:b2:69:ea:c3:e1:51:32:f6:ed:42:6f:f0:bb: cf:e1:17:50:d8:eb:e6:da:7b:de:62:b5:1e:48:e6: 96:b4:6c:43:ca:8a:92:5c:8a:a1:29:33:3b:18:c2: 4b:af:de:21:78:79:95:17:2b:cd:07:3e:5e:f5:82: 03:57:f3:39:d6:55:b2:27:af:53:87:43:3a:ff:77: 50:7c:13:fa:01:2d:d4:1e:60:1e:07:12:49:ee:0e: 05:a9:da:44:fa:e3:96:36:0e:c8:8b:7c:15:14:b1: 63:b4:1c:ab:f1:e3:35:69:c3:35:6c:ba:1b:6a:f5: 6a:16:1e:91:50:48:5e:20:78:47:67:30:d3:47:b1: c8:df:60:8b:07:f6:9a:33:9c:30:4c:ba:15:c9:1e: 7a:7d:d2:8f:71:3b:fe:d3:3a:49:66:dd:28:c9:16: f3:5f:cd:5b:94:c0:8e:ec:42:3e:94:45:44:5a:ee: 38:04:96:e1:09:07:27:a1:4a:78:bd:2b:8f:5d:5f: 37:27:18:e0:ad:8c:8d:f4:47:9e:ab:63:e7:c5:f0: 65:34:b9:28:05:67:38:28:b8:0f:38:cc:bc:d5:88: 04:9c:02:1f:54:f4:7e:5b:02:af:bc:2e:80:53:cc: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AF:CD:1B:F5:9C:CA:DC:0D:C1:FA:BC:06:CE:74:AA:77:44:F9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.214.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:6b:8a:0e:22:c6:dd:cc:4e:04:c7:5b:6d:e1:46:a4:6b:43: 19:7e:fa:f2:7f:5a:05:0e:2a:94:ba:ee:f0:2d:df:83:d8:59: 05:d8:fd:39:f9:88:bf:9a:33:13:da:3b:f0:db:f2:b5:ba:f7: 0d:c5:1a:3b:00:17:2b:40:de:89:71:5a:0f:a5:50:5f:42:0b: 2d:87:48:90:d5:a9:97:b6:f7:ba:5d:17:84:93:73:20:e3:55: 9e:20:6e:e9:04:3f:ac:f8:fa:81:1f:14:fb:44:ff:01:6f:4d: 64:dc:a0:01:70:b9:1f:8d:ec:0f:5d:e7:63:b9:5f:e9:58:a7: e7:42:77:8a:90:94:82:00:15:e6:21:48:2e:d6:94:e4:7f:f9: f8:1e:cd:05:24:75:8b:15:4d:7f:11:04:e1:e6:c7:da:43:ff: 74:94:98:6c:e5:53:f0:63:2f:5d:45:f1:20:41:33:42:1c:93: 48:e9:62:47:3d:57:b2:03:bd:5f:50:65:33:31:88:cf:1f:7a: 31:32:2e:45:f5:18:f6:46:bf:6f:70:6e:9a:70:3c:fe:09:9d: 2f:33:19:5f:d4:d1:70:d1:e7:6c:10:16:e2:f9:f9:fd:00:20: 7f:17:97:cc:5f:62:30:fb:fc:2a:29:69:62:ec:46:0a:b0:ec: af:ce:0f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+RuzkscZLaCaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDczNTI4YzQtYzNlNi00NDYyLWFlNWYtZjFiZjQyNjJlZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh1jHT8K2jEHsRp+H13FuLJp6sPhUTL27UJv 8LvP4RdQ2Ovm2nveYrUeSOaWtGxDyoqSXIqhKTM7GMJLr94heHmVFyvNBz5e9YID V/M51lWyJ69Th0M6/3dQfBP6AS3UHmAeBxJJ7g4FqdpE+uOWNg7Ii3wVFLFjtByr 8eM1acM1bLobavVqFh6RUEheIHhHZzDTR7HI32CLB/aaM5wwTLoVyR56fdKPcTv+ 0zpJZt0oyRbzX81blMCO7EI+lEVEWu44BJbhCQcnoUp4vSuPXV83JxjgrYyN9Eee q2PnxfBlNLkoBWc4KLgPOMy81YgEnAIfVPR+WwKvvC6AU8zlLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWvzRv1nMrcDcH6vAbOdKp3RPmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNmYjkyMTAtMjZkMC0z ODViLTk3OWUtZTllNzVlNWY1MTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItrig4ixt3MTgTHW23hRqRrQxl++vJ/WgUOKpS67vAt34PYWQXY/Tn5 iL+aMxPaO/Db8rW69w3FGjsAFytA3olxWg+lUF9CCy2HSJDVqZe297pdF4STcyDj VZ4gbukEP6z4+oEfFPtE/wFvTWTcoAFwuR+N7A9d52O5X+lYp+dCd4qQlIIAFeYh SC7WlOR/+fgezQUkdYsVTX8RBOHmx9pD/3SUmGzlU/BjL11F8SBBM0Ick0jpYkc9 V7IDvV9QZTMxiM8fejEyLkX1GPZGv29wbppwPP4JnS8zGV/U0XDR52wQFuL5+f0A IH8Xl8xfYjD7/CopaWLsRgqw7K/OD8Y= -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:39 2026 by rpki-client