$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa File: 4f6b7ca3-8281-3da3-be27-54175315d8a3.roa (raw, json) Hash identifier: UT77UdlkbnX07cNtUdbldpe/PuiwC+jD2ohqxCb/0ZU= Subject key identifier: 6F:B0:6B:42:1A:1A:96:D2:95:B5:33:DB:72:C4:AF:5B:2D:EE:26:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D52438A8E47ADC344AF685AE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 67.140.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8a:8e:47:ad:c3:44:af:68:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=18091fdd-7454-4ef0-abb4-6a83d971687b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:e1:d3:84:45:a2:db:ac:f5:40:e0:00:3d: a1:5a:2a:df:66:c8:2f:a3:fd:28:f9:48:a2:05:58: 3a:21:78:19:92:2f:b4:21:33:e0:b9:68:ce:c7:fb: 04:54:76:9e:04:58:c4:60:c7:ba:ba:80:4e:52:6b: e4:58:98:ce:ed:60:37:8a:7d:d4:3e:d5:2a:0a:1f: 6b:71:d1:69:91:38:42:fc:43:fd:98:16:c4:d5:b7: c0:74:d6:e4:8a:4b:93:14:02:54:c8:c3:2e:89:12: 58:f9:4e:43:97:ac:cb:cd:cc:74:91:18:17:58:61: 80:db:d9:14:30:96:73:2b:6c:65:5e:8e:5b:bf:3f: f1:8e:ca:bc:e2:0c:1a:4b:23:a5:a3:9c:08:19:86: 2e:a9:c5:0f:4c:38:fe:63:40:3d:34:86:e8:47:c9: 3e:16:f9:e4:f3:4d:df:ad:77:bf:5b:3f:1f:e7:8f: 07:d1:a1:5d:c9:ff:87:1e:81:1b:f0:70:9b:61:bb: 0f:95:60:34:f4:bb:73:cf:6c:6f:57:dd:c0:b2:a3: eb:da:c4:08:78:34:b4:ec:24:d4:c8:74:c8:62:e9: ef:05:04:6a:ef:f4:f1:75:1e:df:32:a0:cf:7a:da: de:84:d5:25:b1:08:dc:1b:5b:88:d9:2a:60:0f:56: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B0:6B:42:1A:1A:96:D2:95:B5:33:DB:72:C4:AF:5B:2D:EE:26:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:cf:39:d1:ce:c6:c4:fc:ff:7d:47:ec:15:f4:ba:04:a5:4b: ed:14:95:43:02:fa:fb:63:c1:99:1d:5b:3c:b5:a8:bc:8f:91: be:34:2e:85:09:ea:3c:22:94:0f:2a:82:1b:49:75:a9:5d:3c: 59:86:de:18:2f:1e:3f:8f:14:7a:3e:25:c0:ba:fa:d3:45:53: 45:30:15:92:3e:fe:31:91:bd:54:32:b4:1c:cb:5c:b3:4e:31: 40:00:dc:9e:6d:2e:48:fd:ff:c3:56:2b:b6:c6:1b:c6:65:15: 67:d3:67:d3:12:0a:48:4a:2f:d9:ac:9b:c6:66:1a:eb:38:19: 0a:9e:07:77:19:2a:b5:c1:50:7a:3f:86:9e:bb:24:d7:c7:3b: 9d:74:9b:55:6e:47:28:5e:3d:2c:bd:8a:5b:35:50:c8:4d:72: de:6a:db:e0:ff:43:77:a0:72:35:40:ff:aa:41:7a:41:ab:d6: 0d:a5:8f:91:5c:d3:00:75:a2:81:2f:56:89:4c:cc:1c:8e:3b: b8:72:b2:95:88:db:16:da:67:4e:67:ed:58:b2:f9:b1:55:3d: cb:6c:36:7b:60:11:95:9a:8c:b6:dd:83:4a:9d:6c:4e:8f:63: 75:48:0e:4f:9a:7c:11:d5:84:9f:fa:bc:15:da:65:3b:46:3d: b3:0b:f0:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4qOR63DRK9oWuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MTgwOTFmZGQtNzQ1NC00ZWYwLWFiYjQtNmE4M2Q5NzE2ODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2jh04RFotus9UDgAD2hWirfZsgvo/0o+Uii BVg6IXgZki+0ITPguWjOx/sEVHaeBFjEYMe6uoBOUmvkWJjO7WA3in3UPtUqCh9r cdFpkThC/EP9mBbE1bfAdNbkikuTFAJUyMMuiRJY+U5Dl6zLzcx0kRgXWGGA29kU MJZzK2xlXo5bvz/xjsq84gwaSyOlo5wIGYYuqcUPTDj+Y0A9NIboR8k+Fvnk803f rXe/Wz8f548H0aFdyf+HHoEb8HCbYbsPlWA09Ltzz2xvV93AsqPr2sQIeDS07CTU yHTIYunvBQRq7/TxdR7fMqDPetrehNUlsQjcG1uI2SpgD1ZoXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+wa0IaGpbSlbUz23LEr1st7iYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY2YjdjYTMtODI4MS0z ZGEzLWJlMjctNTQxNzUzMTVkOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPPOdHOxsT8/31H7BX0ugSlS+0UlUMC+vtjwZkdWzy1qLyPkb40LoUJ 6jwilA8qghtJdaldPFmG3hgvHj+PFHo+JcC6+tNFU0UwFZI+/jGRvVQytBzLXLNO MUAA3J5tLkj9/8NWK7bGG8ZlFWfTZ9MSCkhKL9msm8ZmGus4GQqeB3cZKrXBUHo/ hp67JNfHO510m1VuRyhePSy9ils1UMhNct5q2+D/Q3egcjVA/6pBekGr1g2lj5Fc 0wB1ooEvVolMzByOO7hyspWI2xbaZ05n7Viy+bFVPctsNntgEZWajLbdg0qdbE6P Y3VIDk+afBHVhJ/6vBXaZTtGPbML8L8= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:25 2026 by rpki-client