$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17cce6f7-9337-3edc-a1b4-9c3479a36078.roa File: 17cce6f7-9337-3edc-a1b4-9c3479a36078.roa (raw, json) Hash identifier: YsQ3BkWaRTReIN627b+E0RS7BKsFgWlszXnF97DECmM= Subject key identifier: F5:5C:E3:7A:14:FD:42:7F:5D:C9:61:AF:38:97:49:A9:B2:F3:8A:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BE460D0ADBCE8328B200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17cce6f7-9337-3edc-a1b4-9c3479a36078.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 67.141.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:be:46:0d:0a:db:ce:83:28:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=3b4d080c-b06b-45a0-a267-1f7f74f1dc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:a2:d5:1d:9a:66:fa:f3:a3:e0:e3:42:3b: 93:cc:d5:0d:ea:e5:c0:f0:a7:b7:68:ee:db:93:76: 5d:22:89:b5:8c:f1:c5:a2:14:62:a4:fa:0c:a3:45: 71:bd:5a:4b:d6:1c:83:83:e8:66:c2:04:8c:ca:10: e3:5f:04:1d:ac:34:8b:b8:1a:72:f9:7f:c4:d5:9a: 16:44:77:90:cc:2d:71:30:09:d5:2a:79:22:90:d1: b7:39:0d:38:ef:d7:62:99:66:4e:2c:83:6e:13:a0: 0f:ac:3a:72:4e:01:0f:8f:96:7f:6a:a0:45:f8:74: 87:d0:1c:31:cd:19:6c:60:4e:d2:45:6b:28:d8:e6: f1:44:10:2f:62:7f:74:3a:d0:80:e8:a5:2c:f5:ee: 39:c8:c9:d1:11:60:ea:12:3c:bc:67:55:76:3a:35: 79:7b:e5:5d:2e:0b:bd:2a:42:93:a8:f0:ec:22:b4: 3e:f6:9e:a5:60:99:59:09:0c:96:9f:f5:fd:f5:23: a0:f4:67:e1:fe:c1:8b:2a:40:08:9a:f6:76:48:c7: 67:71:41:1e:13:86:43:7b:e2:b0:52:46:33:b3:34: e2:b8:c9:1d:ed:bd:11:97:d3:7b:e7:42:62:bb:5f: c6:0d:55:76:0b:f4:82:26:6d:69:fc:83:91:46:27: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5C:E3:7A:14:FD:42:7F:5D:C9:61:AF:38:97:49:A9:B2:F3:8A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17cce6f7-9337-3edc-a1b4-9c3479a36078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:27:f4:90:a2:7e:65:ff:bd:41:a8:27:cb:f0:df:8b:ec:0f: 49:77:4b:a9:c3:f4:20:4c:85:57:d7:cf:5d:6e:ac:08:d0:b7: 96:ae:b0:48:6c:89:a1:a1:57:38:e1:3c:8a:1c:16:35:67:79: 16:1c:24:ff:34:6c:60:b4:9d:47:a5:fd:5d:eb:04:1e:ac:49: 47:28:c7:b7:3c:25:67:be:b8:42:d5:b2:69:6c:f3:85:1a:66: 42:3b:e5:a4:92:59:e5:57:55:c6:f6:ca:65:c1:1e:b0:62:7f: 01:4b:5c:51:8a:d1:e7:bb:99:37:8a:3d:94:81:2c:44:5c:f7: 60:a7:0a:b1:7e:66:08:b4:6f:02:3b:95:ca:81:ba:53:6e:a9: d6:8e:55:d1:ce:26:cc:62:0d:5f:9c:52:67:01:2c:79:63:89: 31:97:71:90:7b:c8:84:37:6a:e3:3c:ea:b9:fb:86:13:63:a0: 3d:9b:93:c6:a1:7a:6c:31:8f:20:3c:b0:0f:93:47:35:df:5d: 1c:7d:20:60:d8:bd:9d:9d:a1:90:fe:b2:03:fb:5c:00:65:1e: 32:69:0a:71:01:10:d3:c9:75:f8:bf:67:28:7d:5e:ff:07:e2: 72:ae:db:ab:b6:05:48:6b:99:40:01:57:87:b1:10:da:6f:c2: f3:8d:ac:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ75GDQrbzoMosgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk M2I0ZDA4MGMtYjA2Yi00NWEwLWEyNjctMWY3Zjc0ZjFkYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ+i1R2aZvrzo+DjQjuTzNUN6uXA8Ke3aO7b k3ZdIom1jPHFohRipPoMo0VxvVpL1hyDg+hmwgSMyhDjXwQdrDSLuBpy+X/E1ZoW RHeQzC1xMAnVKnkikNG3OQ0479dimWZOLINuE6APrDpyTgEPj5Z/aqBF+HSH0Bwx zRlsYE7SRWso2ObxRBAvYn90OtCA6KUs9e45yMnREWDqEjy8Z1V2OjV5e+VdLgu9 KkKTqPDsIrQ+9p6lYJlZCQyWn/X99SOg9Gfh/sGLKkAImvZ2SMdncUEeE4ZDe+Kw UkYzszTiuMkd7b0Rl9N750Jiu1/GDVV2C/SCJm1p/IORRicMEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVc43oU/UJ/XclhrziXSamy84reMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdjY2U2ZjctOTMzNy0z ZWRjLWExYjQtOWMzNDc5YTM2MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ41mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwn9JCifmX/vUGoJ8vw34vsD0l3S6nD9CBMhVfXz11urAjQt5ausEhs iaGhVzjhPIocFjVneRYcJP80bGC0nUel/V3rBB6sSUcox7c8JWe+uELVsmls84Ua ZkI75aSSWeVXVcb2ymXBHrBifwFLXFGK0ee7mTeKPZSBLERc92CnCrF+Zgi0bwI7 lcqBulNuqdaOVdHOJsxiDV+cUmcBLHljiTGXcZB7yIQ3auM86rn7hhNjoD2bk8ah emwxjyA8sA+TRzXfXRx9IGDYvZ2doZD+sgP7XABlHjJpCnEBENPJdfi/Zyh9Xv8H 4nKu26u2BUhrmUABV4exENpvwvONrGA= -----END CERTIFICATE-----Generated at Mon Apr 13 13:07:25 2026 by rpki-client