$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa File: 0ea66b86-5648-3598-868f-d655bca90280.roa (raw, json) Hash identifier: jPx+4+yysL8isRpHFCZHghdVrqqnJM7XHhy4FUNGYUo= Subject key identifier: 80:FB:7E:7B:0C:28:C4:99:41:36:22:49:09:EC:E4:AE:38:27:5A:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BC1E1720126D97573EC440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 64.24.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:1e:17:20:12:6d:97:57:3e:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=dbdf9ef1-b139-426c-aa9f-634283ad1fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:83:d7:01:e6:35:f7:ea:78:c9:70:7f:d6:e1: 0a:0a:04:e9:b4:a0:1e:82:c4:67:48:ba:d6:ea:2e: 44:5a:c2:0c:21:4e:8b:5a:a0:5d:3c:7b:a9:60:59: be:c2:34:57:93:97:7e:6d:c2:7e:30:30:43:df:e2: 3d:b8:fd:ed:80:50:04:56:7b:20:32:55:fa:5f:c1: 1e:68:64:22:2f:bb:2e:75:ad:f1:eb:33:b4:88:4e: c8:d7:11:cc:8d:c0:e1:fb:5b:bf:db:85:e8:a8:53: e8:ec:d6:35:79:e5:33:ae:b1:c5:3c:ac:d6:5a:92: cd:f2:f4:f6:5f:57:b9:46:59:d1:86:b3:cb:68:3b: fd:9f:73:63:34:57:0a:93:fd:49:3a:2d:65:d5:8a: 39:84:44:16:6d:33:ee:1f:fd:84:66:d0:61:62:b4: a0:00:e9:8a:f2:91:7c:ce:b8:0d:4a:14:69:84:99: cb:95:8e:96:4c:31:c3:95:53:22:70:64:7c:ca:c6: 52:12:ef:c1:5f:0c:9a:e7:86:b7:93:fd:b2:4b:9d: d4:e5:9c:9a:9e:d1:ea:59:56:de:fe:7e:19:da:fd: 99:8f:17:72:e8:a9:3d:b0:55:97:84:bc:c0:be:96: 24:24:14:4c:c1:16:84:84:9c:93:b1:3c:77:69:49: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FB:7E:7B:0C:28:C4:99:41:36:22:49:09:EC:E4:AE:38:27:5A:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:8d:66:d3:82:42:25:b7:d6:39:33:75:14:fd:ee:ad:f9:3c: 73:52:63:53:18:4d:fc:66:a8:ba:c5:46:d6:26:e1:fe:0a:80: bd:8e:9c:cc:77:61:f1:fd:33:da:af:62:36:88:45:5f:a1:b8: 65:59:69:f6:1a:d0:50:db:9a:6d:33:91:fd:cf:ce:10:09:52: 3a:6d:85:32:cf:1d:3b:fe:42:41:8d:01:95:68:53:86:e7:f7: 4d:5e:cd:69:e0:00:29:d0:f1:15:8e:aa:57:e3:bb:af:10:63: d1:30:f5:98:91:b4:3b:91:69:ad:82:30:57:64:85:61:8c:f2: 2d:ef:52:13:27:57:0d:ea:d3:04:79:24:82:72:64:a2:6f:ae: de:38:52:a7:29:f2:66:d8:32:5b:d5:ce:52:d3:62:95:33:e7: 07:c5:ea:7e:23:1d:2d:9f:ae:e1:db:2c:57:23:9b:2a:67:07: 8a:2a:db:d0:56:88:a2:89:3e:28:c2:c4:a6:67:e3:fd:77:66: 87:95:d2:91:84:52:ed:6a:00:dd:f7:01:60:07:8c:7a:ab:76: e7:5f:86:49:36:4f:63:cd:c0:16:9d:32:5a:51:11:6a:f4:7c: 70:65:94:ab:2f:2d:d8:eb:ec:78:02:43:07:ac:95:1f:80:30: 96:ba:71:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvB4XIBJtl1c+xEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZGJkZjllZjEtYjEzOS00MjZjLWFhOWYtNjM0MjgzYWQxZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYPXAeY19+p4yXB/1uEKCgTptKAegsRnSLrW 6i5EWsIMIU6LWqBdPHupYFm+wjRXk5d+bcJ+MDBD3+I9uP3tgFAEVnsgMlX6X8Ee aGQiL7suda3x6zO0iE7I1xHMjcDh+1u/24XoqFPo7NY1eeUzrrHFPKzWWpLN8vT2 X1e5RlnRhrPLaDv9n3NjNFcKk/1JOi1l1Yo5hEQWbTPuH/2EZtBhYrSgAOmK8pF8 zrgNShRphJnLlY6WTDHDlVMicGR8ysZSEu/BXwya54a3k/2yS53U5ZyantHqWVbe /n4Z2v2Zjxdy6Kk9sFWXhLzAvpYkJBRMwRaEhJyTsTx3aUmlAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFID7fnsMKMSZQTYiSQns5K44J1qWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGVhNjZiODYtNTY0OC0z NTk4LTg2OGYtZDY1NWJjYTkwMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2NZtOCQiW31jkzdRT97q35PHNSY1MYTfxmqLrFRtYm4f4KgL2OnMx3 YfH9M9qvYjaIRV+huGVZafYa0FDbmm0zkf3PzhAJUjpthTLPHTv+QkGNAZVoU4bn 901ezWngACnQ8RWOqlfju68QY9Ew9ZiRtDuRaa2CMFdkhWGM8i3vUhMnVw3q0wR5 JIJyZKJvrt44Uqcp8mbYMlvVzlLTYpUz5wfF6n4jHS2fruHbLFcjmypnB4oq29BW iKKJPijCxKZn4/13ZoeV0pGEUu1qAN33AWAHjHqrdudfhkk2T2PNwBadMlpREWr0 fHBllKsvLdjr7HgCQweslR+AMJa6cQQ= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:37 2026 by rpki-client