$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9239dfe8-fa21-3c6f-8e1a-9982aced14c8.roa File: 9239dfe8-fa21-3c6f-8e1a-9982aced14c8.roa (raw, json) Hash identifier: GbKf8UAVYGON1fJeBLmM6/m60JNHcaOedMXOIG/CNYQ= Subject key identifier: 71:0E:70:6C:B2:42:31:F8:9E:9D:74:F2:3B:56:77:EA:D9:3A:03:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BAE8F96384C0CBA56C71C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9239dfe8-fa21-3c6f-8e1a-9982aced14c8.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 69.66.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:e8:f9:63:84:c0:cb:a5:6c:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=5b01a673-2367-4ead-8195-33e4fe6b01b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f5:a4:28:a7:7c:0a:cd:09:2c:ab:2b:63:fe: a4:e1:7b:ee:af:72:18:83:cf:12:73:3a:57:19:65: 34:ce:7e:2d:d9:48:f6:2d:27:a5:ca:44:ca:44:d4: 88:2a:6c:46:01:db:05:20:ec:7b:92:e2:31:b4:37: 31:e8:32:b5:5b:77:b0:0a:ee:ae:77:70:9d:b0:55: b0:1e:bb:85:0a:09:29:40:59:49:47:b4:a8:bc:88: bd:4e:23:0e:fd:c3:f9:a3:b7:cf:7d:8e:92:52:eb: 92:5a:fd:42:85:60:a4:9a:74:10:ec:83:16:99:41: e1:27:72:40:bb:ee:02:5d:df:77:1b:58:80:c1:c2: 5d:1e:cf:92:f1:b4:45:a0:8f:8b:09:22:89:78:c1: 93:b8:c5:af:cf:e4:a1:a2:3d:e8:d1:a8:05:86:76: c8:99:fa:5e:85:a0:ad:56:17:90:4d:e2:6f:fe:4f: 89:d4:96:0e:46:b4:d7:bb:a4:bd:55:72:74:db:7b: 65:52:af:f1:da:4e:fc:ff:93:07:0c:39:c6:0d:c3: 57:45:9b:e7:fa:e3:b1:ce:b5:14:42:57:02:89:7c: ae:ba:a9:79:16:44:f4:ce:d1:92:3f:16:8d:fd:c9: 00:37:61:c4:1e:72:00:d9:cc:99:4b:b0:1d:e8:02: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0E:70:6C:B2:42:31:F8:9E:9D:74:F2:3B:56:77:EA:D9:3A:03:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9239dfe8-fa21-3c6f-8e1a-9982aced14c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:23:70:74:cb:b3:1a:02:02:cb:f9:22:6b:56:65:e4:ed:3b: 17:6e:ea:d8:1e:1c:15:93:51:21:1e:63:ba:f9:86:f7:cf:e4: 4f:96:73:f5:df:55:86:5c:a2:db:24:4c:99:84:65:83:a9:2a: da:da:6a:17:cd:64:e4:3f:2f:bd:f6:43:33:90:0f:e4:37:56: 72:e8:41:64:a1:95:50:89:1d:93:1e:e2:1c:5a:e9:e3:bf:94: 74:9f:2e:c7:7e:a2:9c:db:62:68:27:3e:f8:ed:ce:12:b0:e6: 9c:c1:db:7d:31:db:15:26:48:9a:10:b4:ea:2f:e5:43:91:b5: b4:25:16:ba:55:ae:1a:5e:f8:8c:89:d9:c4:13:69:16:46:b2: c3:5b:ac:86:6d:31:a0:d6:df:c4:f1:3a:fe:b0:e9:c0:48:66: a4:74:68:9e:4b:6a:a6:04:f9:16:db:88:f1:7a:da:a3:a5:bf: 4a:21:ec:32:4a:7e:96:14:fd:bb:aa:6e:50:af:4c:2f:e4:a2: 0e:bb:b0:74:8d:d1:6f:92:d6:e7:3b:4f:d2:55:45:f0:a9:d8: 68:9b:ea:ca:e3:c0:86:06:66:b1:fb:ca:25:ba:15:75:47:8f: c2:f2:d8:b6:77:2c:31:2d:68:7e:3c:2e:79:79:e0:5d:d3:ed: 2d:74:ab:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuuj5Y4TAy6VsccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NWIwMWE2NzMtMjM2Ny00ZWFkLTgxOTUtMzNlNGZlNmIwMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/WkKKd8Cs0JLKsrY/6k4Xvur3IYg88SczpX GWU0zn4t2Uj2LSelykTKRNSIKmxGAdsFIOx7kuIxtDcx6DK1W3ewCu6ud3CdsFWw HruFCgkpQFlJR7SovIi9TiMO/cP5o7fPfY6SUuuSWv1ChWCkmnQQ7IMWmUHhJ3JA u+4CXd93G1iAwcJdHs+S8bRFoI+LCSKJeMGTuMWvz+Shoj3o0agFhnbImfpehaCt VheQTeJv/k+J1JYORrTXu6S9VXJ023tlUq/x2k78/5MHDDnGDcNXRZvn+uOxzrUU QlcCiXyuuql5FkT0ztGSPxaN/ckAN2HEHnIA2cyZS7Ad6AIHawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEOcGyyQjH4np108jtWd+rZOgMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTIzOWRmZTgtZmEyMS0z YzZmLThlMWEtOTk4MmFjZWQxNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRUKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIjcHTLsxoCAsv5ImtWZeTtOxdu6tgeHBWTUSEeY7r5hvfP5E+Wc/Xf VYZcotskTJmEZYOpKtraahfNZOQ/L732QzOQD+Q3VnLoQWShlVCJHZMe4hxa6eO/ lHSfLsd+opzbYmgnPvjtzhKw5pzB230x2xUmSJoQtOov5UORtbQlFrpVrhpe+IyJ 2cQTaRZGssNbrIZtMaDW38TxOv6w6cBIZqR0aJ5LaqYE+RbbiPF62qOlv0oh7DJK fpYU/buqblCvTC/kog67sHSN0W+S1uc7T9JVRfCp2Gib6srjwIYGZrH7yiW6FXVH j8Ly2LZ3LDEtaH48Lnl54F3T7S10q1I= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:38 2026 by rpki-client