$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f983c697-6f67-36ce-910e-552ff60e066b.roa File: f983c697-6f67-36ce-910e-552ff60e066b.roa (raw, json) Hash identifier: YEOsZvM3KZNBLF55Zof5JmTVusVTA0Jq7jOgxoiqceY= Subject key identifier: 02:AD:A8:07:6C:13:6F:E5:B5:2C:D7:75:D8:69:9B:9B:6C:AF:B4:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A68D8E6285FD7C5C5AD40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f983c697-6f67-36ce-910e-552ff60e066b.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 66.35.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:68:d8:e6:28:5f:d7:c5:c5:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=3f4a6ad7-b41d-4218-8792-08bc53d9f72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:62:48:98:34:2f:b3:45:25:ef:13:0f:ef: 13:1b:83:cf:71:ca:2b:7d:7e:04:b6:ce:f7:e5:7c: 1b:41:00:0c:60:5b:7b:e9:13:1a:90:24:2c:76:87: 43:ea:ee:45:c1:47:a6:c8:f0:18:6e:bf:22:02:2b: b1:80:91:cd:2c:7c:70:a4:fe:e3:50:38:07:24:e9: 5c:6a:44:f7:10:2a:53:a7:54:37:45:a3:3e:fa:87: e7:db:65:13:a0:05:d0:94:f9:79:e3:9b:1e:7d:ce: 40:80:aa:94:77:41:e3:d8:21:3d:ce:9c:34:4a:26: 93:9b:07:0a:6c:be:8f:7f:71:20:90:6d:81:3b:30: c1:7c:f3:2f:55:64:4f:34:24:ee:5d:6b:86:ad:dc: 6f:1e:e1:ff:2a:5a:7f:07:e4:f6:46:32:47:16:f4: 28:97:ce:a8:2c:ec:bd:00:41:b0:6b:15:2a:09:6b: 14:65:61:bf:85:fc:07:33:51:38:03:a6:ec:f7:2f: 46:dd:35:be:3b:71:32:c9:ab:c7:25:b5:1e:dd:f3: ce:6b:f8:67:f3:a4:cd:b8:b8:95:db:32:54:a0:7a: 48:cf:a3:56:4b:e6:8c:f3:7c:c1:df:65:e6:6e:97: e6:2c:0a:b9:1d:28:15:7f:eb:f7:79:67:ee:3d:89: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AD:A8:07:6C:13:6F:E5:B5:2C:D7:75:D8:69:9B:9B:6C:AF:B4:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f983c697-6f67-36ce-910e-552ff60e066b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.35.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9d:20:9b:ef:13:3d:d2:a1:de:42:ed:8c:8a:eb:f2:03:be: 4e:8f:96:fa:17:29:44:d8:c4:31:0b:e4:52:3b:51:31:05:2c: 58:73:56:b0:97:a6:d2:51:e2:73:f5:4c:ca:26:47:7b:84:b5: 1c:74:6b:17:4b:8c:89:34:56:ac:9b:db:07:e0:78:2c:b4:88: c3:44:cc:15:46:4b:54:47:95:5f:b2:8b:f9:76:62:5d:91:fc: 30:dd:5e:fd:58:0a:d3:6b:4b:12:6a:50:d8:20:24:5e:fe:19: e5:50:8d:e1:89:7c:74:70:71:24:5b:d8:c5:b5:51:a7:b5:d3: 78:dd:77:65:cf:3b:52:8c:c3:46:ba:c6:4f:b4:48:28:02:80: 0e:7a:3e:57:69:71:00:ed:30:f1:24:87:79:48:15:e2:98:69: c5:b9:7a:84:ae:a4:35:30:95:e1:f4:35:06:8e:c3:0b:8f:d2: f3:ca:3f:3b:ad:02:69:8e:73:e2:5a:44:b8:4d:30:2d:fd:92: 9b:67:26:f9:66:b9:11:1f:95:07:12:0c:25:68:1d:52:81:43: a2:ab:23:1f:63:d3:8c:08:cf:05:ff:ec:af:59:25:e3:e6:f8: 55:8a:2e:6e:3f:ac:ba:7d:a5:6c:64:8b:6a:70:7c:4d:84:54: 80:98:16:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmjY5ihf18XFrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk M2Y0YTZhZDctYjQxZC00MjE4LTg3OTItMDhiYzUzZDlmNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWNiSJg0L7NFJe8TD+8TG4PPccorfX4Ets73 5XwbQQAMYFt76RMakCQsdodD6u5FwUemyPAYbr8iAiuxgJHNLHxwpP7jUDgHJOlc akT3ECpTp1Q3RaM++ofn22UToAXQlPl545sefc5AgKqUd0Hj2CE9zpw0SiaTmwcK bL6Pf3EgkG2BOzDBfPMvVWRPNCTuXWuGrdxvHuH/Klp/B+T2RjJHFvQol86oLOy9 AEGwaxUqCWsUZWG/hfwHM1E4A6bs9y9G3TW+O3EyyavHJbUe3fPOa/hn86TNuLiV 2zJUoHpIz6NWS+aM83zB32XmbpfmLAq5HSgVf+v3eWfuPYl86QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKtqAdsE2/ltSzXddhpm5tsr7TWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjk4M2M2OTctNmY2Ny0z NmNlLTkxMGUtNTUyZmY2MGUwNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQiOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6dIJvvEz3Sod5C7YyK6/IDvk6PlvoXKUTYxDEL5FI7UTEFLFhzVrCX ptJR4nP1TMomR3uEtRx0axdLjIk0Vqyb2wfgeCy0iMNEzBVGS1RHlV+yi/l2Yl2R /DDdXv1YCtNrSxJqUNggJF7+GeVQjeGJfHRwcSRb2MW1Uae103jdd2XPO1KMw0a6 xk+0SCgCgA56PldpcQDtMPEkh3lIFeKYacW5eoSupDUwleH0NQaOwwuP0vPKPzut AmmOc+JaRLhNMC39kptnJvlmuREflQcSDCVoHVKBQ6KrIx9j04wIzwX/7K9ZJePm +FWKLm4/rLp9pWxki2pwfE2EVICYFqU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:45 2026 by rpki-client