$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86f4d70e-02e5-328d-9109-3f9e3f75c579.roa File: 86f4d70e-02e5-328d-9109-3f9e3f75c579.roa (raw, json) Hash identifier: DFrS4tkzZfb4kz3lpp+9E3UyRSY7jf9XxaQj6Lek2Lw= Subject key identifier: A7:C9:03:C5:C6:E5:A8:43:23:D9:88:A8:BE:58:84:98:A9:C5:E0:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DE1506E422F93F3801FD7C200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86f4d70e-02e5-328d-9109-3f9e3f75c579.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 216.96.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:6e:42:2f:93:f3:80:1f:d7:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=a7b7087a-b549-415d-b2b1-d229237bc1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:78:e3:ea:88:d4:00:0a:ca:49:ad:66:e5: 3c:e9:15:08:03:1c:d0:8f:9b:4c:8f:1a:83:cf:56: 23:00:cd:f2:33:f1:22:83:1f:49:97:28:10:45:a6: b6:8b:d1:ba:88:7b:e7:b2:cd:15:c2:9a:bc:a4:ac: e7:a2:52:db:61:71:be:63:40:f7:46:f4:01:f4:ae: 01:fc:fb:1c:62:0b:3e:96:ad:79:bc:24:e0:ba:06: 2f:60:06:0d:f2:38:f3:b9:89:47:0c:e5:09:7d:16: 6c:66:1d:2a:d6:41:07:bc:94:85:45:05:de:8b:ca: 96:bf:d4:bd:d0:2a:78:14:6f:24:b5:83:13:5d:aa: 99:32:3a:f9:16:d5:ac:37:7e:6d:fb:65:90:9c:c0: c2:96:2d:29:5a:c9:87:9e:47:77:89:07:7a:29:ba: 2f:11:f3:4f:8d:41:1b:bb:af:6b:c7:65:5c:95:5c: a1:31:7f:ab:dd:77:e6:f0:d6:03:12:9c:b8:6e:81: 53:98:d8:49:10:af:f5:f0:3b:7b:42:11:32:6e:58: 80:76:37:6d:67:1b:47:05:0b:3d:97:da:8c:6e:ac: 1f:33:60:f6:c0:7b:cc:e4:bd:02:bd:7d:50:01:8d: 81:f1:f6:f4:41:50:24:c2:ff:7d:18:63:8c:2f:be: 9f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C9:03:C5:C6:E5:A8:43:23:D9:88:A8:BE:58:84:98:A9:C5:E0:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86f4d70e-02e5-328d-9109-3f9e3f75c579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7f:76:ab:92:9a:57:93:77:ae:0e:1e:7c:64:07:91:42:a0: c9:c6:9f:49:20:d3:99:c0:48:31:ff:cb:ca:23:69:04:51:af: fa:1b:bd:98:60:0b:cf:41:32:e5:0a:7b:25:e9:ec:10:a1:67: e8:f8:65:5a:17:7d:40:8e:77:7c:48:c5:b4:a8:21:e7:0c:4c: c1:a0:cd:a3:70:75:31:0b:57:98:a8:0c:b8:54:7e:b2:08:7f: a8:6a:f8:4d:25:de:12:fe:98:41:76:63:03:ea:e7:33:29:69: d0:93:7d:98:cf:33:6a:12:ac:83:52:10:0a:c6:51:fc:7a:58: 3d:2e:fc:60:42:82:8e:b6:58:ff:84:26:ce:43:96:d2:7d:2b: cd:88:58:1a:92:0f:d3:cd:7b:8f:ff:0e:73:90:bc:ce:7c:7a: ee:69:e2:ed:d4:7f:06:cc:86:7f:ee:1b:b7:c3:43:c3:b4:2d: 31:be:ae:98:92:f8:02:8c:30:78:93:e0:de:d5:70:8c:5d:29: 63:79:69:41:cc:6f:0f:56:6a:58:7a:a6:1e:00:75:a9:29:2f: d7:90:08:30:7a:f2:6b:98:82:2d:48:0f:8f:71:c2:43:39:36: 1d:b9:2e:5c:1e:09:23:f1:96:8d:0a:e8:75:1a:9d:44:78:0e: 2d:a9:81:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUG5CL5PzgB/XwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk YTdiNzA4N2EtYjU0OS00MTVkLWIyYjEtZDIyOTIzN2JjMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmt44+qI1AAKykmtZuU86RUIAxzQj5tMjxqD z1YjAM3yM/Eigx9JlygQRaa2i9G6iHvnss0Vwpq8pKznolLbYXG+Y0D3RvQB9K4B /PscYgs+lq15vCTgugYvYAYN8jjzuYlHDOUJfRZsZh0q1kEHvJSFRQXei8qWv9S9 0Cp4FG8ktYMTXaqZMjr5FtWsN35t+2WQnMDCli0pWsmHnkd3iQd6KbovEfNPjUEb u69rx2VclVyhMX+r3Xfm8NYDEpy4boFTmNhJEK/18Dt7QhEybliAdjdtZxtHBQs9 l9qMbqwfM2D2wHvM5L0CvX1QAY2B8fb0QVAkwv99GGOML76fRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfJA8XG5ahDI9mIqL5YhJipxeCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODZmNGQ3MGUtMDJlNS0z MjhkLTkxMDktM2Y5ZTNmNzVjNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV/dquSmleTd64OHnxkB5FCoMnGn0kg05nASDH/y8ojaQRRr/obvZhg C89BMuUKeyXp7BChZ+j4ZVoXfUCOd3xIxbSoIecMTMGgzaNwdTELV5ioDLhUfrII f6hq+E0l3hL+mEF2YwPq5zMpadCTfZjPM2oSrINSEArGUfx6WD0u/GBCgo62WP+E Js5DltJ9K82IWBqSD9PNe4//DnOQvM58eu5p4u3UfwbMhn/uG7fDQ8O0LTG+rpiS +AKMMHiT4N7VcIxdKWN5aUHMbw9Walh6ph4AdakpL9eQCDB68muYgi1ID49xwkM5 Nh25LlweCSPxlo0K6HUanUR4Di2pgbA= -----END CERTIFICATE-----Generated at Thu May 28 17:49:14 2026 by rpki-client