$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa File: 7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa (raw, json) Hash identifier: uvNEcEGtLRyaH5/1zkuZkws2e4lhEIp6PvmKj2xGq34= Subject key identifier: 12:C7:D0:ED:1D:4E:59:86:B7:21:5A:86:B0:65:2B:3F:D8:18:5A:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D52438A836FD5400B59478420 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 67.140.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8a:83:6f:d5:40:0b:59:47:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=376496cc-06dc-43a1-9a0d-408966102170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:41:9d:d9:d2:10:81:aa:db:ef:9b:4a:27:04: 70:4e:50:65:9e:80:d5:9a:52:27:3b:c1:14:5f:79: e6:df:7d:22:33:26:59:db:48:65:0a:91:63:d6:4d: 44:02:76:d2:34:c1:21:f5:92:0b:6a:b4:e6:dd:fa: ff:4c:1e:f3:37:16:02:76:09:65:ac:d6:b2:52:2e: 3a:59:e2:ba:78:11:a5:7f:2a:88:4c:06:13:97:cf: 82:6a:f7:7d:34:76:1d:66:02:d8:31:c9:af:26:69: ca:aa:0d:6a:20:81:7b:ca:d4:76:dd:82:6d:98:4f: 5d:98:51:7a:ef:33:75:49:bf:d9:7b:c0:8c:85:02: cb:32:a3:d4:44:67:d9:b9:04:67:5c:53:9e:2b:96: cf:07:89:3c:b9:38:be:b9:ee:ae:a2:cd:f5:9f:49: 6a:88:88:98:19:8b:d9:f8:df:20:1d:c8:02:1b:5f: 12:bd:da:91:31:34:28:2b:06:e3:22:d6:c2:42:41: 10:57:da:be:76:96:ad:20:50:7f:6a:14:be:71:37: 18:50:25:01:df:e5:ed:91:a3:09:59:ab:d9:c5:22: d1:a7:66:48:f7:6d:68:01:ac:92:25:5b:81:ee:ee: 84:82:35:0c:85:f8:8c:75:8c:9e:0a:da:8f:5e:ca: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C7:D0:ED:1D:4E:59:86:B7:21:5A:86:B0:65:2B:3F:D8:18:5A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:47:11:91:7c:19:1b:eb:12:d2:39:66:99:88:2f:31:a0:75: 35:34:33:20:7d:7e:0b:99:20:d6:15:6e:bf:eb:be:0a:b9:62: 16:8d:cf:62:d6:de:ef:03:f1:ed:a3:7b:b8:d9:41:8a:53:aa: 55:63:b2:b9:6e:2a:83:0a:3b:44:d8:a5:73:4c:c6:76:1b:2f: f1:01:db:f3:7f:9b:f3:f4:7f:48:d0:76:d4:be:05:68:8b:33: 62:37:2f:52:21:72:90:fc:0e:78:f4:3f:51:95:f9:52:5e:f0: e4:ae:2b:48:be:32:66:da:0f:d0:a2:87:ce:00:af:bc:99:b1: 6e:70:1a:20:e2:a7:fa:cd:fe:75:93:83:8e:d2:65:cc:d6:97: b6:9d:bb:67:5b:53:e8:9f:9c:3e:19:f2:cd:1b:4c:25:09:53: ed:d7:7f:ad:6d:84:ea:33:c6:06:68:a7:d4:ce:4f:5c:cf:f8: 25:d4:38:26:d7:69:be:ab:d1:ad:1f:73:e5:71:dd:c4:79:cf: ec:22:b5:97:77:25:31:54:b6:09:e8:1c:ce:63:7d:84:31:6e: e1:5b:6b:f4:5f:83:fb:4a:c5:b8:7b:f4:c5:75:70:86:26:cc: a0:65:f6:c4:48:d8:ed:6f:9f:3f:b1:29:ee:f9:06:e5:37:ab: 02:41:01:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4qDb9VAC1lHhCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk Mzc2NDk2Y2MtMDZkYy00M2ExLTlhMGQtNDA4OTY2MTAyMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EGd2dIQgarb75tKJwRwTlBlnoDVmlInO8EU X3nm330iMyZZ20hlCpFj1k1EAnbSNMEh9ZILarTm3fr/TB7zNxYCdgllrNayUi46 WeK6eBGlfyqITAYTl8+Cavd9NHYdZgLYMcmvJmnKqg1qIIF7ytR23YJtmE9dmFF6 7zN1Sb/Ze8CMhQLLMqPURGfZuQRnXFOeK5bPB4k8uTi+ue6uos31n0lqiIiYGYvZ +N8gHcgCG18SvdqRMTQoKwbjItbCQkEQV9q+dpatIFB/ahS+cTcYUCUB3+XtkaMJ WavZxSLRp2ZI921oAaySJVuB7u6EgjUMhfiMdYyeCtqPXspHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLH0O0dTlmGtyFahrBlKz/YGFrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2I5ZTk0YWUtMTg3OC0z M2E5LTlkMWQtZWYwOTg2N2IwMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhHEZF8GRvrEtI5ZpmILzGgdTU0MyB9fguZINYVbr/rvgq5YhaNz2LW 3u8D8e2je7jZQYpTqlVjsrluKoMKO0TYpXNMxnYbL/EB2/N/m/P0f0jQdtS+BWiL M2I3L1IhcpD8Dnj0P1GV+VJe8OSuK0i+MmbaD9Cih84Ar7yZsW5wGiDip/rN/nWT g47SZczWl7adu2dbU+ifnD4Z8s0bTCUJU+3Xf61thOozxgZop9TOT1zP+CXUOCbX ab6r0a0fc+Vx3cR5z+witZd3JTFUtgnoHM5jfYQxbuFba/Rfg/tKxbh79MV1cIYm zKBl9sRI2O1vnz+xKe75BuU3qwJBATg= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:21 2026 by rpki-client