$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08fc776d-b91b-38e0-b302-0aee64588061.roa File: 08fc776d-b91b-38e0-b302-0aee64588061.roa (raw, json) Hash identifier: Bp6ltlfrrPZI7vRMMVxq18s0U7b9nPFEwVHV1LCyOZ8= Subject key identifier: FB:31:40:11:E2:4D:F3:E8:FE:6B:75:78:FC:01:E4:88:98:CF:EF:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BDF53E1CF25BF10CFCE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08fc776d-b91b-38e0-b302-0aee64588061.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 67.140.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:bd:f5:3e:1c:f2:5b:f1:0c:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=1122576c-9d3d-4734-8593-c791718cbca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a6:b1:ad:92:f9:78:a4:10:f1:27:01:b4:e5: 22:03:9b:64:2a:57:a3:37:cc:17:9e:8b:66:cd:e1: 99:05:b4:d7:46:c7:5c:8d:27:b2:6e:7d:dc:c6:75: 81:4e:84:40:5f:40:94:48:f5:b1:e7:46:e3:32:0c: 39:22:bb:61:35:5c:5e:ff:d3:44:ab:b1:a8:52:d7: d7:df:82:69:d1:b0:69:a1:33:33:2d:88:84:36:6f: 7b:63:36:8b:63:93:31:67:11:1f:9b:6b:b9:58:4a: c9:62:0b:0b:6c:29:fa:28:9c:a0:95:53:b9:eb:a7: b0:b7:12:d3:1d:10:d1:6b:1b:ec:f7:47:f8:66:c1: 6d:c7:99:9e:92:9e:83:b6:a8:5e:ce:0d:33:be:e0: 91:6f:ee:38:6d:fe:db:17:4b:80:51:d7:dd:2f:6c: d7:69:01:93:c6:49:71:69:82:5c:69:b8:0a:5e:84: 33:e1:0c:ee:e7:ea:bc:6c:69:eb:b6:1c:34:06:6b: bf:b3:55:66:f2:d3:64:a5:97:ef:f0:32:43:30:5b: 67:ca:13:ff:ac:32:b5:30:bf:a3:21:f1:63:fa:48: 7e:5b:28:2b:4a:7b:cf:40:72:26:13:36:85:35:bd: 5f:55:5d:d5:15:94:20:61:e8:c0:35:82:9b:9e:ae: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:31:40:11:E2:4D:F3:E8:FE:6B:75:78:FC:01:E4:88:98:CF:EF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08fc776d-b91b-38e0-b302-0aee64588061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a4:8c:81:21:e2:37:80:fd:25:57:00:a7:94:ae:d9:33:e0: 42:0c:1d:a2:5e:db:bc:54:e1:91:cc:bd:86:47:eb:33:3d:05: e5:60:eb:59:81:85:bf:17:db:8d:c3:f2:43:16:11:ae:a9:3b: 20:f7:67:8b:d5:a1:6c:97:76:f2:06:ee:3f:26:df:44:68:18: 3e:51:00:bd:6f:59:11:d3:ee:0d:a0:a1:b7:45:44:0f:f1:78: 91:a0:ed:b0:cc:d6:84:be:e3:60:f8:64:a4:97:8d:77:bc:0d: 8c:36:5e:59:2f:4e:d7:ba:ab:d0:e7:36:d1:31:b5:af:94:6e: 5e:ba:6d:ac:55:23:9e:4b:24:60:dd:56:f0:9f:51:0b:81:e5: 39:40:64:be:6d:f9:5d:0b:82:bf:38:eb:d5:61:61:74:b5:66: e2:be:28:42:21:94:51:22:41:5b:bb:ec:87:c7:5a:65:99:a1: f4:3a:c9:89:9b:28:52:46:3f:5d:14:23:ab:67:70:9c:95:fc: 9b:9a:4f:dc:71:9f:b1:6c:04:aa:f7:ee:a2:a3:62:60:a8:d9: 88:15:9a:1c:b0:5d:13:16:14:2f:82:3f:71:64:2a:75:7b:24: e0:f8:65:25:55:2c:b2:b2:37:43:a7:47:38:b5:bd:0b:c2:23: 1d:b3:88:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ731PhzyW/EM/OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MTEyMjU3NmMtOWQzZC00NzM0LTg1OTMtYzc5MTcxOGNiY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKaxrZL5eKQQ8ScBtOUiA5tkKlejN8wXnotm zeGZBbTXRsdcjSeybn3cxnWBToRAX0CUSPWx50bjMgw5IrthNVxe/9NEq7GoUtfX 34Jp0bBpoTMzLYiENm97YzaLY5MxZxEfm2u5WErJYgsLbCn6KJyglVO566ewtxLT HRDRaxvs90f4ZsFtx5mekp6Dtqhezg0zvuCRb+44bf7bF0uAUdfdL2zXaQGTxklx aYJcabgKXoQz4Qzu5+q8bGnrthw0Bmu/s1Vm8tNkpZfv8DJDMFtnyhP/rDK1ML+j IfFj+kh+WygrSnvPQHImEzaFNb1fVV3VFZQgYejANYKbnq71UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsxQBHiTfPo/mt1ePwB5IiYz+8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhmYzc3NmQtYjkxYi0z OGUwLWIzMDItMGFlZTY0NTg4MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACekjIEh4jeA/SVXAKeUrtkz4EIMHaJe27xU4ZHMvYZH6zM9BeVg61mB hb8X243D8kMWEa6pOyD3Z4vVoWyXdvIG7j8m30RoGD5RAL1vWRHT7g2gobdFRA/x eJGg7bDM1oS+42D4ZKSXjXe8DYw2XlkvTte6q9DnNtExta+Ubl66baxVI55LJGDd VvCfUQuB5TlAZL5t+V0Lgr8469VhYXS1ZuK+KEIhlFEiQVu77IfHWmWZofQ6yYmb KFJGP10UI6tncJyV/JuaT9xxn7FsBKr37qKjYmCo2YgVmhywXRMWFC+CP3FkKnV7 JOD4ZSVVLLKyN0OnRzi1vQvCIx2ziH8= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:53 2026 by rpki-client