$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9fe9716-f269-3aab-b290-8b097e7b8bb3.roa File: f9fe9716-f269-3aab-b290-8b097e7b8bb3.roa (raw, json) Hash identifier: b8+Ndo7EwDqsYnK4aQtL1AUcclQdhYUhir5mtveZG/o= Subject key identifier: 6B:72:06:28:31:F1:D8:8B:5F:DC:D1:53:D8:FE:F3:F0:D9:92:83:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA5E746A2FA598F8511F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9fe9716-f269-3aab-b290-8b097e7b8bb3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 29877 IP address blocks: 66.29.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a5:e7:46:a2:fa:59:8f:85:11:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=044531c9-f62b-4af5-b060-a3bf7161db8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:80:e1:a0:9d:94:13:78:1c:e1:35:53:96: 66:d6:53:f7:77:8a:6b:ea:de:f0:21:5b:dd:e8:9b: 24:d5:b6:32:e3:44:78:e6:2f:85:60:bf:72:10:74: a7:58:71:e5:7f:38:12:34:9d:9d:6a:ab:47:69:08: c8:1d:c8:11:04:90:45:00:22:d4:f4:ba:b7:e0:5d: 03:1b:0b:d2:f5:ed:a7:10:46:f8:83:d1:43:d4:07: dd:c0:6c:0d:5d:bd:77:56:04:f6:2e:3b:3b:45:1a: 94:b2:97:a0:72:36:c7:00:ae:87:d7:75:8e:72:12: 6b:52:09:2c:3b:78:af:60:05:c8:cb:2a:5a:4b:ef: f2:77:b8:de:32:fc:11:62:d9:ad:da:83:dc:d7:cf: 9f:3a:19:5c:36:2b:8f:b4:de:78:c2:77:0c:5f:93: 5a:08:d5:35:70:31:db:51:d8:f4:9d:29:cd:b9:f2: 78:90:19:31:2e:3f:bd:d2:6d:b4:65:8f:16:51:c5: b7:33:59:9b:88:fe:61:ba:82:48:a9:f8:fb:c5:c2: f4:15:bc:04:34:53:d9:9c:fc:6d:3a:1a:19:ae:3f: 0a:a9:fa:b9:ef:90:19:0a:c0:d7:da:d2:ed:41:53: f2:b9:b6:d8:b7:b6:2a:bd:49:45:7e:be:8d:69:20: af:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:06:28:31:F1:D8:8B:5F:DC:D1:53:D8:FE:F3:F0:D9:92:83:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9fe9716-f269-3aab-b290-8b097e7b8bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d0:2b:e5:68:23:d7:76:63:ae:20:7e:a9:1e:f8:da:92:74: ac:de:6a:59:cc:45:8a:38:b1:89:74:3c:2e:8d:cd:7c:2d:f8: dc:72:41:10:66:8d:8d:d0:c3:67:72:3a:a2:7c:44:a0:98:f6: 23:59:03:0b:2e:a3:ac:fb:de:91:a3:6f:f1:d2:d6:3c:99:1d: 69:8f:9d:37:ee:f7:56:aa:4d:a2:d8:27:05:2f:ef:4b:51:c2: 46:80:70:d3:74:b4:b5:14:42:fa:1c:a3:a9:10:1f:19:e3:4a: 9c:e4:8a:9f:c3:8b:af:31:ef:15:b5:c6:2d:24:a4:71:52:f0: 8f:9f:e7:78:64:52:e0:5c:8d:5d:15:a7:5e:87:3e:12:e4:cb: 06:3a:02:ba:16:e9:7b:c1:41:5a:a4:85:7f:c8:01:dd:fa:a2: b6:16:fe:60:29:c5:b2:34:ff:39:70:e6:95:68:c7:89:d2:ab: 48:2c:46:47:6a:40:ce:ff:c2:ca:81:7e:b8:00:93:24:2c:11: 67:36:2a:d1:68:7c:ae:2f:d8:d4:22:64:2a:2f:54:6d:ae:2b: 65:82:e1:d3:ce:00:67:57:25:e1:c2:e3:49:23:e0:20:ed:bc: 55:eb:e4:16:d1:49:6a:f2:2b:b1:bb:6a:a6:7e:72:04:e7:57: cf:a9:01:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqXnRqL6WY+FEfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MDQ0NTMxYzktZjYyYi00YWY1LWIwNjAtYTNiZjcxNjFkYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH6A4aCdlBN4HOE1U5Zm1lP3d4pr6t7wIVvd 6Jsk1bYy40R45i+FYL9yEHSnWHHlfzgSNJ2daqtHaQjIHcgRBJBFACLU9Lq34F0D GwvS9e2nEEb4g9FD1AfdwGwNXb13VgT2Ljs7RRqUspegcjbHAK6H13WOchJrUgks O3ivYAXIyypaS+/yd7jeMvwRYtmt2oPc18+fOhlcNiuPtN54wncMX5NaCNU1cDHb Udj0nSnNufJ4kBkxLj+90m20ZY8WUcW3M1mbiP5huoJIqfj7xcL0FbwENFPZnPxt OhoZrj8Kqfq575AZCsDX2tLtQVPyubbYt7YqvUlFfr6NaSCvLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtyBigx8diLX9zRU9j+8/DZkoOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjlmZTk3MTYtZjI2OS0z YWFiLWIyOTAtOGIwOTdlN2I4YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQh3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3QK+VoI9d2Y64gfqke+NqSdKzealnMRYo4sYl0PC6NzXwt+NxyQRBm jY3Qw2dyOqJ8RKCY9iNZAwsuo6z73pGjb/HS1jyZHWmPnTfu91aqTaLYJwUv70tR wkaAcNN0tLUUQvoco6kQHxnjSpzkip/Di68x7xW1xi0kpHFS8I+f53hkUuBcjV0V p16HPhLkywY6AroW6XvBQVqkhX/IAd36orYW/mApxbI0/zlw5pVox4nSq0gsRkdq QM7/wsqBfrgAkyQsEWc2KtFofK4v2NQiZCovVG2uK2WC4dPOAGdXJeHC40kj4CDt vFXr5BbRSWryK7G7aqZ+cgTnV8+pAVc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:14 2026 by rpki-client