$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa File: 304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa (raw, json) Hash identifier: ePuY9qnSnTi+rQevaLWuh8KQNlFmXT9Ha77jqdARNxc= Subject key identifier: B2:6E:42:88:CF:1A:C7:1F:01:A6:59:0A:85:FF:EA:30:E0:B8:83:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BB11B9915A0B07A2890B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 69.66.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:11:b9:91:5a:0b:07:a2:89:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=95ac4a1b-aa00-43ab-8d86-74dc636ce4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:34:21:36:3d:cb:2b:bf:61:a3:89:73:08: 08:88:6b:0c:21:c6:18:4e:ec:1e:ed:e3:c1:0f:0b: ac:11:15:70:f1:d5:da:97:0d:79:1e:d9:7f:3d:03: 6f:e6:d5:a4:46:b2:44:1c:43:7e:83:82:fc:3a:ac: 01:16:79:f0:00:bf:14:6f:25:d5:9c:45:8c:ed:43: f9:f5:44:12:83:bc:f0:f5:1a:4f:e7:bc:70:c4:2a: 49:dc:43:27:57:d7:01:63:cd:84:8e:ab:7a:99:a0: c6:0f:13:99:8b:62:f7:b5:d8:02:db:06:b5:c5:df: e2:d6:31:e6:20:dd:c8:34:32:eb:a9:e2:11:0c:db: 05:bf:e4:51:57:b3:f9:49:cf:f6:ca:17:56:8b:4e: c7:f6:0d:52:32:58:c4:01:e9:37:3e:b4:d3:8b:df: a9:5d:56:97:f1:f8:d0:14:fd:b3:18:3a:42:12:74: 2d:38:1b:b8:a5:3b:a1:16:cd:23:86:79:23:2f:10: 42:72:be:d7:2e:b7:a0:42:c1:31:bc:60:01:1a:e3: 6a:26:80:e5:d9:15:d5:75:05:3b:c3:42:dc:0c:73: 06:18:c1:bd:e3:5f:8a:68:5e:c1:ac:61:b2:dc:c7: 9b:87:a6:5e:30:62:c8:79:eb:9a:38:b8:09:06:c1: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6E:42:88:CF:1A:C7:1F:01:A6:59:0A:85:FF:EA:30:E0:B8:83:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:74:a4:73:89:da:a3:19:0b:19:fc:8c:ab:0c:13:79:fa:07: aa:13:4e:ce:6b:10:15:59:30:fb:26:18:48:4a:f7:b2:33:45: e9:65:3d:ad:d8:9c:e6:29:cd:47:85:ef:87:0d:98:f0:b5:04: 7b:3c:8b:63:f1:b0:46:d1:76:dc:5f:44:0d:8e:ad:a2:fd:bb: b1:28:87:d6:78:24:f5:74:2f:a9:dc:7c:96:e4:8d:95:a1:77: ea:dd:a6:16:7e:a6:f0:22:6e:71:6a:be:e6:da:0d:ac:80:6f: ce:6f:d3:a5:3c:92:bb:c3:e9:b5:38:ce:9d:37:f7:ca:26:83: c8:94:34:a5:47:89:62:42:31:a5:c3:cd:70:59:22:ec:83:83: c9:9e:9f:09:e1:1f:59:d4:6b:c7:f5:64:e2:ec:d8:4d:13:b4: 15:70:f0:bb:c4:2e:47:c4:41:bc:eb:a3:f0:4e:00:f9:7e:d5: 58:cd:21:f5:32:be:6f:bd:69:8c:75:1f:82:fb:06:f7:63:8a: c3:49:e8:52:b0:fa:17:e3:3a:56:8f:49:73:50:de:29:89:80: d1:d5:80:af:0a:f8:52:22:83:2d:51:94:55:84:99:23:9c:cd: 21:5f:30:04:1e:67:72:9a:f9:7d:e2:a4:da:48:1d:33:68:35: 6a:02:03:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuxG5kVoLB6KJC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OTVhYzRhMWItYWEwMC00M2FiLThkODYtNzRkYzYzNmNlNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqk0ITY9yyu/YaOJcwgIiGsMIcYYTuwe7ePB DwusERVw8dXalw15Htl/PQNv5tWkRrJEHEN+g4L8OqwBFnnwAL8UbyXVnEWM7UP5 9UQSg7zw9RpP57xwxCpJ3EMnV9cBY82Ejqt6maDGDxOZi2L3tdgC2wa1xd/i1jHm IN3INDLrqeIRDNsFv+RRV7P5Sc/2yhdWi07H9g1SMljEAek3PrTTi9+pXVaX8fjQ FP2zGDpCEnQtOBu4pTuhFs0jhnkjLxBCcr7XLregQsExvGABGuNqJoDl2RXVdQU7 w0LcDHMGGMG941+KaF7BrGGy3Mebh6ZeMGLIeeuaOLgJBsG1JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJuQojPGscfAaZZCoX/6jDguIOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzA0Y2QyMWEtMWI1ZS0z ZGJmLWI1YTUtZTFmMTg1NzhiYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ0pHOJ2qMZCxn8jKsME3n6B6oTTs5rEBVZMPsmGEhK97IzRellPa3Y nOYpzUeF74cNmPC1BHs8i2PxsEbRdtxfRA2OraL9u7Eoh9Z4JPV0L6ncfJbkjZWh d+rdphZ+pvAibnFqvubaDayAb85v06U8krvD6bU4zp0398omg8iUNKVHiWJCMaXD zXBZIuyDg8menwnhH1nUa8f1ZOLs2E0TtBVw8LvELkfEQbzro/BOAPl+1VjNIfUy vm+9aYx1H4L7BvdjisNJ6FKw+hfjOlaPSXNQ3imJgNHVgK8K+FIigy1RlFWEmSOc zSFfMAQeZ3Ka+X3ipNpIHTNoNWoCA3U= -----END CERTIFICATE-----Generated at Mon Apr 13 11:38:38 2026 by rpki-client