$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e631293-950a-342f-b234-5f733db09d64.roa File: 0e631293-950a-342f-b234-5f733db09d64.roa (raw, json) Hash identifier: PS/+nSSmwcEW8K4im3kUJdjVuz/ir7rSctkkN972v60= Subject key identifier: 07:A6:9A:B5:0B:8C:3F:1F:AC:8D:42:B8:9F:AE:B1:31:C0:98:CD:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BA41F2A529E0BCF4F2E600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e631293-950a-342f-b234-5f733db09d64.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 67.140.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:41:f2:a5:29:e0:bc:f4:f2:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4f80aad6-43a8-4c96-b916-5e63ad78627f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f7:d3:73:11:05:92:c5:45:99:78:eb:06:97: d5:20:c4:a9:40:10:bd:58:d7:fa:ac:ce:65:79:4c: c3:80:b9:6c:e1:ea:e8:be:04:d4:cb:7f:36:36:c2: 9b:6b:70:a6:e6:cc:43:3c:93:03:7c:1b:6e:d4:b3: aa:00:30:50:cd:88:8c:11:ff:b5:80:2e:b3:97:e2: 38:e6:9f:37:3c:bf:2e:2e:6f:9e:49:d5:6c:cf:52: a0:92:42:e8:04:80:1c:b4:12:1c:14:76:61:79:78: 99:4e:f4:fe:18:18:b7:ac:1c:c6:ae:72:4c:1d:59: 7b:3d:67:61:ba:b7:5d:de:3c:1a:eb:61:4f:2f:06: 5e:8f:69:3d:aa:4f:8b:d2:a7:36:0c:75:15:4f:9a: 09:29:da:c2:af:a0:73:f9:b7:65:49:bf:a2:d1:87: ab:ff:74:e7:9d:da:6b:26:d7:98:c4:6b:2a:2a:13: a7:28:db:e7:a0:6b:1e:20:31:44:a5:3a:91:62:00: 3a:9f:36:e8:22:70:b8:8b:ea:ec:0e:1b:fb:ae:df: 0e:c9:7e:a4:b0:4f:8f:25:e7:5f:66:bf:cd:17:dd: d5:6a:fc:52:3e:24:3d:f9:74:b9:8b:5d:ee:50:e3: 37:bf:84:44:67:0a:91:50:b7:4d:6f:b3:ea:0e:bb: 01:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A6:9A:B5:0B:8C:3F:1F:AC:8D:42:B8:9F:AE:B1:31:C0:98:CD:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e631293-950a-342f-b234-5f733db09d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e2:21:a1:5f:ae:51:76:d2:30:93:e5:8a:df:9e:92:c1:1b: 9e:e1:06:fa:1e:bd:89:bb:a2:0b:92:2c:f6:61:58:2b:72:07: 11:d6:a8:3d:62:7d:6a:9c:6c:b2:97:a5:3f:aa:25:22:20:0d: bb:35:5f:b8:69:c2:bd:78:1f:36:80:57:2e:c7:2c:77:85:95: f8:53:b6:63:d7:5e:0e:31:f4:9b:89:4e:59:c2:da:e5:1b:de: 1f:8b:af:8c:8d:df:2b:71:12:13:b7:7d:ae:f7:45:39:69:2a: 56:7f:46:d9:f4:cf:5f:ba:bc:0c:7f:6c:90:1b:19:c3:87:a5: c0:8b:b2:d8:72:8a:1f:f5:6e:94:ef:da:9f:69:3e:6b:b6:ae: fb:d7:05:bb:9c:e8:85:45:ec:59:32:67:a0:9e:61:a4:c4:7c: 2c:ad:ce:db:6a:64:19:70:73:b3:a2:a5:d7:e8:bc:3e:8b:e9: ff:24:6a:83:a3:eb:06:cd:2c:ea:70:5e:e6:38:a2:5f:80:78: 44:84:8b:c6:0c:46:51:e8:50:2d:fe:da:f1:0b:de:81:8a:84: af:73:bb:5e:dd:b5:62:32:89:ae:68:72:26:f9:34:63:dc:5a: ba:3b:fd:8c:85:c4:25:2a:09:1a:68:1a:2f:2e:9a:eb:2f:b3: 91:08:02:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukHypSngvPTy5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NGY4MGFhZDYtNDNhOC00Yzk2LWI5MTYtNWU2M2FkNzg2MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/fTcxEFksVFmXjrBpfVIMSpQBC9WNf6rM5l eUzDgLls4erovgTUy382NsKba3Cm5sxDPJMDfBtu1LOqADBQzYiMEf+1gC6zl+I4 5p83PL8uLm+eSdVsz1KgkkLoBIActBIcFHZheXiZTvT+GBi3rBzGrnJMHVl7PWdh urdd3jwa62FPLwZej2k9qk+L0qc2DHUVT5oJKdrCr6Bz+bdlSb+i0Yer/3Tnndpr JteYxGsqKhOnKNvnoGseIDFEpTqRYgA6nzboInC4i+rsDhv7rt8OyX6ksE+PJedf Zr/NF93VavxSPiQ9+XS5i13uUOM3v4REZwqRULdNb7PqDrsB/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAemmrULjD8frI1CuJ+usTHAmM2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGU2MzEyOTMtOTUwYS0z NDJmLWIyMzQtNWY3MzNkYjA5ZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHziIaFfrlF20jCT5YrfnpLBG57hBvoevYm7oguSLPZhWCtyBxHWqD1i fWqcbLKXpT+qJSIgDbs1X7hpwr14HzaAVy7HLHeFlfhTtmPXXg4x9JuJTlnC2uUb 3h+Lr4yN3ytxEhO3fa73RTlpKlZ/Rtn0z1+6vAx/bJAbGcOHpcCLsthyih/1bpTv 2p9pPmu2rvvXBbuc6IVF7FkyZ6CeYaTEfCytzttqZBlwc7OipdfovD6L6f8kaoOj 6wbNLOpwXuY4ol+AeESEi8YMRlHoUC3+2vEL3oGKhK9zu17dtWIyia5ocib5NGPc Wro7/YyFxCUqCRpoGi8umusvs5EIAgI= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:25 2026 by rpki-client