$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7df65b7-c153-31da-af31-3497511aec93.roa File: c7df65b7-c153-31da-af31-3497511aec93.roa (raw, json) Hash identifier: f7T4OAUvqbt0LHwYm/BsVKijTDZDr+37rPutMB2SCac= Subject key identifier: 29:C2:56:CA:57:70:79:A4:1F:36:94:77:DB:4D:92:6B:71:36:48:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB92E0F07BA0F68BC5E30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7df65b7-c153-31da-af31-3497511aec93.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 67.140.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b9:2e:0f:07:ba:0f:68:bc:5e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=5669a4d2-2e25-48e9-9452-1002506ce428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:5c:ab:13:c4:bb:e7:68:82:09:e7:5b:ba: 70:7d:39:9c:22:08:5c:b9:5d:27:a0:4f:eb:70:f5: b1:bc:32:ba:34:02:55:1f:d2:22:bd:b3:27:93:84: df:4a:d0:c0:08:7e:88:3f:77:70:27:fd:e5:37:d4: 73:99:a0:81:83:6d:56:fe:19:71:81:c3:e5:f3:72: c2:16:ee:0a:f5:8f:86:eb:f5:41:7a:13:63:16:44: dc:13:91:13:41:e1:fd:54:a7:b0:7b:dd:ce:40:13: 69:67:c0:35:4b:4d:d4:32:36:79:65:87:b4:47:c4: f4:86:5c:9e:77:86:79:6d:24:de:3b:90:fa:d0:55: a1:a1:b3:ae:62:58:03:e0:2d:fd:15:f0:cb:cb:9d: c9:b6:63:ba:9a:c1:fe:83:d4:b7:dd:1a:ec:52:00: 6f:d7:57:c6:e0:03:c7:8f:35:b5:dd:c5:f1:a2:51: 89:99:dd:db:bd:88:73:f8:c7:2a:14:a0:3e:43:96: a1:34:e8:87:78:c0:22:6f:0a:b5:1c:87:d4:43:05: bd:07:d8:6f:38:9e:0a:81:fe:da:a3:56:96:0f:72: e8:da:1e:04:ac:69:04:79:74:4d:0f:89:03:f9:fe: 0a:3e:d4:e2:f8:85:3d:be:83:b6:a8:91:9a:bb:b6: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C2:56:CA:57:70:79:A4:1F:36:94:77:DB:4D:92:6B:71:36:48:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7df65b7-c153-31da-af31-3497511aec93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:55:ac:d5:df:1e:71:58:c8:b5:02:b6:53:ae:fa:41:36:94: 8f:93:8d:e4:3c:a7:27:1c:4d:3b:ba:8c:73:ac:0d:3a:ed:db: fe:15:a4:03:0b:b3:19:64:f9:76:04:3f:d9:e6:ab:16:c7:0a: b6:70:5f:31:cb:a9:e8:58:12:50:0d:da:56:ac:d2:46:ac:94: a2:0f:f5:87:6d:7a:1b:62:64:2d:dc:89:ad:fa:2d:3c:28:00: 98:f0:d8:a5:c6:af:0a:40:18:28:4e:dc:ef:b0:a5:16:4d:57: 89:2d:f0:c8:87:6c:ac:b3:ea:ee:bd:70:a9:a3:33:65:18:39: 82:48:0c:d7:8b:80:de:a8:2d:07:05:e2:aa:3d:55:36:4c:ca: 3c:3f:ff:fd:7c:27:2c:db:fd:56:c8:f0:cf:7b:84:d0:a6:a2: 86:50:ce:96:af:00:dd:66:73:cd:43:c2:39:80:6c:be:31:2f: 52:53:72:ba:91:4e:ad:92:ec:be:79:9b:2b:21:1b:31:d4:66: fa:5c:de:66:6e:45:ec:9d:05:39:b8:be:91:68:ab:bb:28:b2: da:e0:6e:e4:2c:a7:87:10:03:4d:61:06:84:ff:1e:c3:66:80: 20:2e:d8:a5:05:b4:50:2a:f5:35:fd:a0:e2:c8:a4:ba:dd:2c: 2c:4f:b4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLkuDwe6D2i8XjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NTY2OWE0ZDItMmUyNS00OGU5LTk0NTItMTAwMjUwNmNlNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk55cqxPEu+doggnnW7pwfTmcIghcuV0noE/r cPWxvDK6NAJVH9IivbMnk4TfStDACH6IP3dwJ/3lN9RzmaCBg21W/hlxgcPl83LC Fu4K9Y+G6/VBehNjFkTcE5ETQeH9VKewe93OQBNpZ8A1S03UMjZ5ZYe0R8T0hlye d4Z5bSTeO5D60FWhobOuYlgD4C39FfDLy53JtmO6msH+g9S33RrsUgBv11fG4APH jzW13cXxolGJmd3bvYhz+McqFKA+Q5ahNOiHeMAibwq1HIfUQwW9B9hvOJ4Kgf7a o1aWD3Lo2h4ErGkEeXRND4kD+f4KPtTi+IU9voO2qJGau7ZuewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnCVspXcHmkHzaUd9tNkmtxNkgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdkZjY1YjctYzE1My0z MWRhLWFmMzEtMzQ5NzUxMWFlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9VrNXfHnFYyLUCtlOu+kE2lI+TjeQ8pyccTTu6jHOsDTrt2/4VpAML sxlk+XYEP9nmqxbHCrZwXzHLqehYElAN2las0kaslKIP9YdtehtiZC3cia36LTwo AJjw2KXGrwpAGChO3O+wpRZNV4kt8MiHbKyz6u69cKmjM2UYOYJIDNeLgN6oLQcF 4qo9VTZMyjw///18Jyzb/VbI8M97hNCmooZQzpavAN1mc81DwjmAbL4xL1JTcrqR Tq2S7L55myshGzHUZvpc3mZuReydBTm4vpFoq7sostrgbuQsp4cQA01hBoT/HsNm gCAu2KUFtFAq9TX9oOLIpLrdLCxPtLY= -----END CERTIFICATE-----Generated at Mon Apr 13 11:42:17 2026 by rpki-client