$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7eceef15-8b56-31df-bce1-bd77dd6ce043.roa File: 7eceef15-8b56-31df-bce1-bd77dd6ce043.roa (raw, json) Hash identifier: HlYQvvNqhhDEP9jgVRELdV0HfQxMfk7ovgFJyKD7OxI= Subject key identifier: 25:26:F5:5D:DA:7D:71:02:9D:22:3E:0B:BF:0F:D8:4E:C4:48:66:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB6C528F28D5C63C91000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7eceef15-8b56-31df-bce1-bd77dd6ce043.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 67.141.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b6:c5:28:f2:8d:5c:63:c9:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b0b417ab-fb36-408c-9684-3e55abd23a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ec:d2:db:11:95:cc:ba:17:0f:32:9b:19:9a: 21:b8:a7:dd:1b:94:38:4a:27:f7:03:db:15:26:8b: 8c:82:aa:e7:0b:16:76:47:3b:09:ef:02:28:71:76: 01:7a:3a:52:87:97:63:af:df:53:ed:e1:ef:a1:5a: 2f:28:a2:6b:ff:16:97:c7:44:9f:7f:88:03:50:da: 40:cb:e0:77:02:a3:12:e9:3c:1f:2a:f5:79:8b:48: fe:45:8a:ae:0b:6b:5a:e6:22:43:58:db:73:bd:f4: 28:b9:09:46:b4:de:86:4c:4d:49:38:5c:63:77:01: 06:e2:75:d1:57:9a:dc:66:4c:af:d2:c1:8a:d9:f9: 89:21:a1:64:98:4d:e0:51:6d:aa:27:a0:6c:b4:39: 39:c8:df:25:41:06:8a:8c:56:5a:60:77:b3:64:0f: 98:2a:ac:1d:3a:29:d4:14:16:dd:49:d8:5d:e1:e7: 63:f6:89:a1:f8:ca:a1:84:7f:21:47:78:7b:e5:30: 88:62:ee:5d:02:86:2c:2d:a5:03:eb:36:48:ee:db: 67:a3:38:44:d8:f2:e2:28:ed:f5:03:c1:1e:45:b1: 7f:a9:b4:99:db:69:47:47:5e:1f:fa:e0:2d:f2:b6: 1f:0d:e2:fd:fe:f5:5c:13:85:82:3c:c0:0d:86:8c: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:26:F5:5D:DA:7D:71:02:9D:22:3E:0B:BF:0F:D8:4E:C4:48:66:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7eceef15-8b56-31df-bce1-bd77dd6ce043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7d:54:2f:0c:49:f7:69:97:0a:8d:b8:d8:95:1c:84:a3:8c: 22:b8:ba:af:1d:07:8c:2f:e9:4f:84:6b:26:7d:01:c6:1d:b4: f2:bf:6c:09:08:49:91:2c:83:01:59:b4:3e:91:35:a9:fc:c4: a3:11:dc:71:7d:b6:fa:cb:56:2a:9b:ce:d0:3a:10:38:d3:63: 06:04:2e:65:f9:6a:4a:b4:b8:ae:b9:5d:39:aa:6f:84:4c:61: 06:d6:07:5c:7d:c5:a4:79:01:6d:cc:2d:8a:04:92:45:af:e3: 05:7b:05:cd:34:52:d8:a4:09:3f:c5:32:a6:c7:eb:1e:45:2f: 22:1e:5c:4d:f6:c5:92:77:7e:f3:4d:5c:63:a9:f2:8b:f2:a5: 8f:06:aa:ed:99:a5:6a:73:fb:69:03:73:5d:76:62:94:b4:fa: 8c:ad:70:7c:8b:ae:f5:8d:62:9a:9b:4b:34:78:20:57:45:4b: 16:00:08:11:b5:d0:48:74:b5:50:22:dc:62:d8:e3:ca:e0:3b: 1e:0c:85:f6:57:34:80:25:99:98:14:4f:14:88:39:21:01:30: 4a:34:fb:58:f8:94:50:29:9a:91:a8:88:b2:b3:2b:e0:35:ba: 4d:19:d5:f6:04:a6:50:53:b5:df:51:41:44:17:40:6a:38:56: fa:ab:62:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLbFKPKNXGPJEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjBiNDE3YWItZmIzNi00MDhjLTk2ODQtM2U1NWFiZDIzYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkezS2xGVzLoXDzKbGZohuKfdG5Q4Sif3A9sV JouMgqrnCxZ2RzsJ7wIocXYBejpSh5djr99T7eHvoVovKKJr/xaXx0Sff4gDUNpA y+B3AqMS6TwfKvV5i0j+RYquC2ta5iJDWNtzvfQouQlGtN6GTE1JOFxjdwEG4nXR V5rcZkyv0sGK2fmJIaFkmE3gUW2qJ6BstDk5yN8lQQaKjFZaYHezZA+YKqwdOinU FBbdSdhd4edj9omh+MqhhH8hR3h75TCIYu5dAoYsLaUD6zZI7ttnozhE2PLiKO31 A8EeRbF/qbSZ22lHR14f+uAt8rYfDeL9/vVcE4WCPMANhozY8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUm9V3afXECnSI+C78P2E7ESGbsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2VjZWVmMTUtOGI1Ni0z MWRmLWJjZTEtYmQ3N2RkNmNlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ43wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ9VC8MSfdplwqNuNiVHISjjCK4uq8dB4wv6U+EayZ9AcYdtPK/bAkI SZEsgwFZtD6RNan8xKMR3HF9tvrLViqbztA6EDjTYwYELmX5akq0uK65XTmqb4RM YQbWB1x9xaR5AW3MLYoEkkWv4wV7Bc00UtikCT/FMqbH6x5FLyIeXE32xZJ3fvNN XGOp8ovypY8Gqu2ZpWpz+2kDc112YpS0+oytcHyLrvWNYpqbSzR4IFdFSxYACBG1 0Eh0tVAi3GLY48rgOx4MhfZXNIAlmZgUTxSIOSEBMEo0+1j4lFApmpGoiLKzK+A1 uk0Z1fYEplBTtd9RQUQXQGo4VvqrYlg= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:33 2026 by rpki-client