$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa File: 4f6b7ca3-8281-3da3-be27-54175315d8a3.roa (raw, json) Hash identifier: BAKp9LQx/qC3GR19nnTeLC1GfOalnUxrK+eu09a6hpQ= Subject key identifier: C9:38:F9:D1:04:55:26:6B:A2:7D:7A:18:9E:77:FB:BC:86:BA:BA:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E31CF4A77DBA061039638D704 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 67.140.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:4a:77:db:a0:61:03:96:38:d7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=0c542a21-aa0d-4f57-a8f1-fc0e86d5f84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:c2:91:72:93:4c:b0:a0:17:bc:ab:ab:ae: 70:45:10:cc:78:47:67:25:13:ed:69:1b:a2:51:82: 7e:3c:28:97:d9:f2:cd:fa:05:a5:06:35:ff:ed:0c: 0c:ae:ea:6b:87:2f:9d:47:82:ba:a3:06:79:ae:7a: 2e:be:77:96:99:7a:50:7f:ec:38:f3:1b:f6:1f:06: 04:68:b9:b8:84:70:90:6a:20:37:4b:da:f7:8f:af: 2f:78:98:9d:9c:d7:f7:f5:a7:0c:37:1b:3a:fb:b2: 39:e9:64:43:90:8d:3a:79:ee:11:b8:5d:9f:51:56: bf:42:c3:c7:b4:e2:1e:ab:cd:6e:87:1f:6a:31:46: b9:0b:89:2a:09:f1:98:e8:d0:78:28:7b:86:1b:83: 33:22:59:0c:e1:87:58:72:af:23:01:48:77:cb:cd: 39:86:fe:6f:45:d5:a6:c0:a1:0e:9f:62:aa:09:98: cf:64:98:6e:b0:bb:79:af:a1:eb:db:e0:91:1a:a4: a2:ee:6a:c0:23:66:9e:59:6b:cc:c5:c5:35:77:2f: 9e:2e:8b:0b:8a:2d:bb:a2:8c:e2:e2:30:dd:71:18: fa:f5:95:29:6f:c2:d4:d5:8d:1c:28:c1:45:ea:cb: be:9d:5f:3c:30:99:4e:4e:c5:eb:22:fc:fe:aa:d3: 81:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:38:F9:D1:04:55:26:6B:A2:7D:7A:18:9E:77:FB:BC:86:BA:BA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:90:ed:e5:dd:8f:c0:8c:d9:44:38:ec:aa:ae:77:a6:90:c8: 17:97:14:16:8f:0f:b8:58:9f:db:f6:58:c0:0e:a8:f7:e0:51: 66:82:98:43:0f:92:f8:fd:c9:f7:f2:9a:1f:e2:0e:61:0d:55: 48:1e:3b:6d:88:41:09:f0:a2:84:3b:d0:e2:44:0b:d7:b2:22: 5d:81:28:9b:b4:ca:b5:6f:32:96:72:e2:25:64:a7:de:47:ad: 37:4b:ce:54:26:2d:61:da:cb:61:77:0c:39:f2:59:9b:40:ed: 45:7a:73:b8:5e:89:47:57:75:d6:8c:dd:f7:ea:08:21:af:fa: 5c:cd:cf:10:a7:78:6d:10:35:0e:c3:89:38:54:5b:64:99:b6: f9:6a:00:b4:0b:b9:7b:34:37:fc:b1:c6:b4:3e:77:4e:99:d3: 07:87:d5:33:29:77:75:f5:50:10:8c:b3:95:11:17:01:71:1a: ab:3a:ba:e9:38:36:39:3c:d0:4e:d1:f3:c2:af:13:86:de:ef: 5d:ef:a2:4e:05:77:77:97:23:a6:79:10:ee:ba:fa:3d:b1:d8: b0:a9:74:c0:aa:6e:c2:14:69:01:52:69:95:28:9d:71:af:f5: 3c:0e:ed:a3:79:3d:e6:fb:d1:d6:b3:d6:e4:4e:9f:55:6e:a3: 87:ce:75:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz0p326BhA5Y41wQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk MGM1NDJhMjEtYWEwZC00ZjU3LWE4ZjEtZmMwZTg2ZDVmODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI7CkXKTTLCgF7yrq65wRRDMeEdnJRPtaRui UYJ+PCiX2fLN+gWlBjX/7QwMruprhy+dR4K6owZ5rnouvneWmXpQf+w48xv2HwYE aLm4hHCQaiA3S9r3j68veJidnNf39acMNxs6+7I56WRDkI06ee4RuF2fUVa/QsPH tOIeq81uhx9qMUa5C4kqCfGY6NB4KHuGG4MzIlkM4YdYcq8jAUh3y805hv5vRdWm wKEOn2KqCZjPZJhusLt5r6Hr2+CRGqSi7mrAI2aeWWvMxcU1dy+eLosLii27oozi 4jDdcRj69ZUpb8LU1Y0cKMFF6su+nV88MJlOTsXrIvz+qtOBXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk4+dEEVSZron16GJ53+7yGurp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY2YjdjYTMtODI4MS0z ZGEzLWJlMjctNTQxNzUzMTVkOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGQ7eXdj8CM2UQ47Kqud6aQyBeXFBaPD7hYn9v2WMAOqPfgUWaCmEMP kvj9yffymh/iDmENVUgeO22IQQnwooQ70OJEC9eyIl2BKJu0yrVvMpZy4iVkp95H rTdLzlQmLWHay2F3DDnyWZtA7UV6c7heiUdXddaM3ffqCCGv+lzNzxCneG0QNQ7D iThUW2SZtvlqALQLuXs0N/yxxrQ+d06Z0weH1TMpd3X1UBCMs5URFwFxGqs6uuk4 Njk80E7R88KvE4be713vok4Fd3eXI6Z5EO66+j2x2LCpdMCqbsIUaQFSaZUonXGv 9TwO7aN5Peb70daz1uROn1Vuo4fOdRg= -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:42 2026 by rpki-client