$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa File: d8c08e04-7262-3bf8-a350-4441ff806c02.roa (raw, json) Hash identifier: ARMeM/iV5aAxCXr4VRUKwgosvQiUSJArCGBpI5IZwdU= Subject key identifier: E3:D1:60:CB:FD:F6:F0:1C:CF:26:55:A8:11:41:21:83:57:CF:E6:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BAE8B7CBB27AC44CA71400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 69.66.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:e8:b7:cb:b2:7a:c4:4c:a7:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=bb3c4201-0f04-4d84-842b-ef3028728f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:e4:af:5d:b9:8c:3e:e2:2a:c6:ec:03:97: 14:d4:3b:ce:9f:c8:e1:3d:25:73:bf:6d:73:e8:9e: 52:78:e9:c6:54:95:3e:50:63:bb:d5:f0:01:12:9e: ef:83:01:b7:55:1a:e1:3b:07:95:2c:94:55:86:e8: 40:da:80:83:c0:2f:46:34:0a:24:97:43:b2:af:a6: fc:8c:78:83:73:9e:b5:43:a3:f2:00:6b:62:71:71: 32:b1:91:39:65:45:fb:a7:86:ee:fd:ba:82:ce:65: 60:ed:e2:6c:e2:41:ea:a3:75:e2:a0:b1:c0:f8:fd: 17:7c:c6:73:ec:cd:30:36:c9:8c:3d:d4:b0:01:43: d7:de:04:47:65:db:aa:04:98:5e:9b:18:59:48:a2: b6:c4:46:2e:8a:dd:c9:a0:90:11:08:a4:98:3e:d7: 99:a2:52:3e:bd:c5:63:28:cc:31:3c:df:1a:b0:e7: 46:42:36:2c:c2:2e:45:c3:00:bd:5e:45:e8:3e:99: b5:47:17:2d:a6:b5:b8:9b:3b:ff:29:db:76:43:79: a1:13:bb:25:1d:8a:03:73:38:de:27:8e:2c:4a:48: 1e:03:6f:43:cf:be:88:f1:e6:e6:3a:1c:df:17:66: 17:e2:58:92:da:2d:78:e9:e3:d5:7b:64:da:83:22: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D1:60:CB:FD:F6:F0:1C:CF:26:55:A8:11:41:21:83:57:CF:E6:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:95:fe:54:8b:23:34:93:09:62:ee:31:6e:be:2d:dc:f9:9b: 4e:73:01:ad:0f:99:b3:0c:71:36:e6:10:30:34:01:57:01:25: 78:1d:2e:45:77:0d:5b:c2:72:04:c4:79:f0:bd:1b:0c:85:25: 45:41:d4:51:b0:17:0a:8a:bc:48:2b:c6:1f:19:d7:25:d0:1a: 1c:bc:2e:32:8f:2e:00:0b:54:bc:c2:32:80:7c:cd:6f:8e:e7: 88:3d:0d:52:32:46:33:f8:ce:03:bc:b4:b7:98:57:fc:b7:17: 7f:30:90:f4:65:12:ff:7c:d1:18:6f:de:02:8e:1b:d6:43:0d: 22:82:76:24:84:ce:18:44:ef:5c:df:56:20:77:4f:b5:70:3f: 6a:b3:53:19:4d:bb:2c:ca:bc:28:81:42:9d:9a:8c:e6:36:b6: 6c:82:10:ca:64:67:6f:3b:2d:d9:5c:d4:45:10:60:53:b2:66: 08:22:57:ed:e1:57:d6:56:13:26:1e:aa:25:5e:8d:13:08:52: 47:6d:45:5e:1f:3b:77:68:31:25:b6:e8:84:fd:e5:6a:5c:46: 31:f8:91:4d:69:15:5f:c8:28:f4:d6:2b:20:cc:ad:11:e5:5e: d4:1c:0d:36:00:fb:54:b5:e1:1d:57:86:19:03:dd:22:11:a9: 42:fe:5c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuui3y7J6xEynFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YmIzYzQyMDEtMGYwNC00ZDg0LTg0MmItZWYzMDI4NzI4ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+/kr125jD7iKsbsA5cU1DvOn8jhPSVzv21z 6J5SeOnGVJU+UGO71fABEp7vgwG3VRrhOweVLJRVhuhA2oCDwC9GNAokl0Oyr6b8 jHiDc561Q6PyAGticXEysZE5ZUX7p4bu/bqCzmVg7eJs4kHqo3XioLHA+P0XfMZz 7M0wNsmMPdSwAUPX3gRHZduqBJhemxhZSKK2xEYuit3JoJARCKSYPteZolI+vcVj KMwxPN8asOdGQjYswi5FwwC9XkXoPpm1RxctprW4mzv/Kdt2Q3mhE7slHYoDczje J44sSkgeA29Dz76I8ebmOhzfF2YX4liS2i146ePVe2TagyKjhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPRYMv99vAczyZVqBFBIYNXz+aPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDhjMDhlMDQtNzI2Mi0z YmY4LWEzNTAtNDQ0MWZmODA2YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaV/lSLIzSTCWLuMW6+Ldz5m05zAa0PmbMMcTbmEDA0AVcBJXgdLkV3 DVvCcgTEefC9GwyFJUVB1FGwFwqKvEgrxh8Z1yXQGhy8LjKPLgALVLzCMoB8zW+O 54g9DVIyRjP4zgO8tLeYV/y3F38wkPRlEv980Rhv3gKOG9ZDDSKCdiSEzhhE71zf ViB3T7VwP2qzUxlNuyzKvCiBQp2ajOY2tmyCEMpkZ287Ldlc1EUQYFOyZggiV+3h V9ZWEyYeqiVejRMIUkdtRV4fO3doMSW26IT95WpcRjH4kU1pFV/IKPTWKyDMrRHl XtQcDTYA+1S14R1XhhkD3SIRqUL+XAo= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:33 2026 by rpki-client