$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b4c7add-f5a3-3372-b22e-1fe8ac2803a1.roa File: 8b4c7add-f5a3-3372-b22e-1fe8ac2803a1.roa (raw, json) Hash identifier: O5JfjUpfLTIG4v2htSfthpY5JmEJ7XPSYEGwHJO1elQ= Subject key identifier: 50:14:32:C0:16:62:77:8C:C0:1E:DA:1C:2D:D9:04:BE:A3:5C:B4:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF6B27770B7C6997E54E48 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b4c7add-f5a3-3372-b22e-1fe8ac2803a1.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 69.40.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:6b:27:77:0b:7c:69:97:e5:4e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=9c27c38f-13bf-444c-9a0b-54ae16a95d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e7:d2:ae:7f:b9:e1:e7:db:84:b0:c7:c8:1a: db:3e:8f:10:5b:14:a2:bb:d3:f5:b0:5e:22:ed:d9: 4a:26:6c:b3:b9:32:c1:a5:65:3e:b3:32:80:98:3b: 3b:19:73:73:65:42:52:8d:80:0c:ad:94:b8:6d:ee: dc:51:91:a2:5c:4a:5e:8e:1c:7f:16:4c:40:61:69: 5b:90:a5:5a:7b:32:df:72:f0:44:95:44:6c:9a:6f: 42:c0:e3:65:ce:54:c2:fe:a9:ec:78:d5:46:72:9d: 03:f2:e1:13:be:69:8e:04:f2:55:21:2e:c8:8a:15: 19:4b:84:c5:d9:68:9f:20:61:cc:27:d9:5e:e4:27: d0:b0:bb:d6:9c:41:33:7c:6e:81:ba:cf:96:62:fe: 6e:37:e2:d2:70:c0:30:97:c5:e0:28:37:f7:31:eb: 8a:95:1e:d3:46:ef:39:85:79:a9:f8:8c:4e:7d:6a: 61:c1:ce:fc:60:9a:32:a8:7d:dd:62:bc:1c:7a:ae: 67:3c:3b:53:c7:11:37:ca:3a:d6:51:3b:7a:26:55: c6:f7:4f:d9:cf:19:bf:f4:2f:07:54:c9:7a:87:92: f7:d4:ec:31:34:2e:0f:b1:63:ba:58:8c:e9:e8:f5: dd:bd:d1:a3:32:3c:08:d7:03:32:59:66:f0:ce:ba: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:32:C0:16:62:77:8C:C0:1E:DA:1C:2D:D9:04:BE:A3:5C:B4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b4c7add-f5a3-3372-b22e-1fe8ac2803a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:56:91:1b:1b:52:08:ac:44:da:dc:7d:71:ab:7d:82:71:ad: d8:0d:28:0e:5e:52:7e:8f:79:90:1f:2c:b7:f6:30:b7:ad:5a: aa:fa:af:cb:65:39:f6:c8:18:12:eb:c0:eb:b7:63:d7:2e:66: 6d:31:77:d3:57:4e:7c:df:17:9f:e3:4a:63:00:94:e1:7a:41: e3:31:9d:ed:55:a3:92:05:d6:bd:59:8a:87:bc:ca:d0:f1:2b: c3:0f:c1:06:92:22:d8:65:cc:26:cb:ac:6e:04:21:45:95:56: 92:e0:e3:ab:cc:d8:e7:02:a6:f4:35:b4:4d:77:82:a0:76:04: 9b:5f:57:e2:f9:a9:6c:5d:4c:bc:67:3c:a8:9c:46:6a:4d:31: a4:af:05:3e:88:a5:13:57:2d:c8:0d:7d:19:79:fb:9b:2a:7a: 2f:75:d8:9e:97:17:b4:7b:28:ff:08:30:ac:20:8f:89:7a:38: 37:81:65:46:d3:01:20:77:42:7e:da:4f:2f:23:31:8c:f3:bf: 1f:ab:04:b1:53:26:12:91:5a:2a:24:d8:03:6f:f7:f5:8a:c5: 22:b5:21:12:17:0c:52:4a:86:f4:d9:01:2b:e0:36:ef:65:6d: bc:0d:59:49:31:9c:56:6e:3c:4e:bf:36:6b:90:87:c8:8e:c8: a9:d3:46:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32sndwt8aZflTkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk OWMyN2MzOGYtMTNiZi00NDRjLTlhMGItNTRhZTE2YTk1ZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+fSrn+54efbhLDHyBrbPo8QWxSiu9P1sF4i 7dlKJmyzuTLBpWU+szKAmDs7GXNzZUJSjYAMrZS4be7cUZGiXEpejhx/FkxAYWlb kKVaezLfcvBElURsmm9CwONlzlTC/qnseNVGcp0D8uETvmmOBPJVIS7IihUZS4TF 2WifIGHMJ9le5CfQsLvWnEEzfG6Bus+WYv5uN+LScMAwl8XgKDf3MeuKlR7TRu85 hXmp+IxOfWphwc78YJoyqH3dYrwceq5nPDtTxxE3yjrWUTt6JlXG90/Zzxm/9C8H VMl6h5L31OwxNC4PsWO6WIzp6PXdvdGjMjwI1wMyWWbwzrptUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAUMsAWYneMwB7aHC3ZBL6jXLRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGI0YzdhZGQtZjVhMy0z MzcyLWIyMmUtMWZlOGFjMjgwM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRShwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1WkRsbUgisRNrcfXGrfYJxrdgNKA5eUn6PeZAfLLf2MLetWqr6r8tl OfbIGBLrwOu3Y9cuZm0xd9NXTnzfF5/jSmMAlOF6QeMxne1Vo5IF1r1Zioe8ytDx K8MPwQaSIthlzCbLrG4EIUWVVpLg46vM2OcCpvQ1tE13gqB2BJtfV+L5qWxdTLxn PKicRmpNMaSvBT6IpRNXLcgNfRl5+5sqei912J6XF7R7KP8IMKwgj4l6ODeBZUbT ASB3Qn7aTy8jMYzzvx+rBLFTJhKRWiok2ANv9/WKxSK1IRIXDFJKhvTZASvgNu9l bbwNWUkxnFZuPE6/NmuQh8iOyKnTRuY= -----END CERTIFICATE-----Generated at Mon Jul 13 07:24:59 2026 by rpki-client