$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa File: f204efbb-87c6-3229-84e8-cf88708d2191.roa (raw, json) Hash identifier: F63RmF92wQoIC4ml5mh7SPD5iEy0UlkFpXKZMDwiMxw= Subject key identifier: F2:F6:AC:33:B0:AE:20:55:0C:69:23:C8:46:26:7A:CC:FB:26:70:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BAE9043E7BE70B3FB08900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 69.66.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:e9:04:3e:7b:e7:0b:3f:b0:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=cfaf8fc5-744c-4e08-aa14-f3597abb5f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:bc:c4:4a:23:f3:83:02:63:8a:ce:26:4d: 10:b6:25:b0:0b:de:5a:96:08:58:cc:12:31:87:fa: 39:17:f3:6f:e7:3f:d7:3a:8b:69:ef:b3:f6:4c:10: ef:53:84:98:0d:ec:4f:be:aa:16:fe:d4:ea:2b:75: 1f:f5:fe:80:f9:75:c2:54:fe:e6:d2:41:a4:3d:0f: c8:a1:c1:5e:df:68:f0:71:f6:32:e6:b6:7e:d0:4e: 3d:fb:52:d1:79:9b:fa:ee:6c:7c:c5:91:a8:8a:f7: 14:6d:ef:b6:c5:39:01:ec:8b:25:5b:14:aa:4d:b3: e1:a5:72:a5:ba:82:22:a5:fc:5d:82:97:0f:a2:d4: 41:1d:f0:ff:31:18:89:96:49:f9:e5:79:b2:65:ce: ac:53:13:a7:f1:d6:f8:30:1c:fb:7d:61:46:af:65: 94:33:7d:a9:6f:37:76:1b:1c:f1:44:22:30:ce:eb: aa:ca:64:c1:40:b4:75:b6:db:b3:aa:4e:01:3e:03: 5e:ad:27:2f:9f:f2:10:6e:1b:b2:80:44:fe:03:23: ff:b9:ce:ea:33:ae:b0:60:a7:15:b2:b8:dd:0a:9e: d0:fc:0b:f4:de:7d:c1:f4:42:f6:72:05:5f:d2:a9: e8:6c:c3:9b:9b:4d:6a:65:02:a8:58:68:55:fb:24: 58:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F6:AC:33:B0:AE:20:55:0C:69:23:C8:46:26:7A:CC:FB:26:70:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5c:26:9b:e8:bd:d5:ef:e6:9f:20:9b:8d:a4:1c:34:e2:5f: 20:a7:22:77:36:fd:0c:b1:19:27:54:cc:e3:28:40:07:4f:66: a4:4d:d8:30:6d:9d:7d:79:ac:78:a9:eb:8a:6f:8c:8d:4d:01: 3f:ba:72:f9:ad:c6:dc:cd:25:43:c2:ad:ad:b9:9e:a1:9f:c9: 8e:5c:22:90:1d:f3:c6:d5:56:74:12:30:56:16:59:61:0b:87: f1:f3:41:28:ed:a9:f6:f1:46:9b:98:b0:87:5c:e0:76:d5:3a: e3:ef:9e:df:f4:e1:b4:2c:50:3f:98:80:1d:42:27:69:1a:02: ad:1a:1b:6c:59:52:7d:2a:36:42:af:07:d4:2e:8e:c2:b3:9d: 9d:16:6d:d6:18:fe:39:4d:e4:ea:6a:b7:58:42:80:55:d4:9a: e9:b7:4b:75:ed:27:1c:4d:94:d1:d1:28:df:c3:06:47:a1:88: c1:6c:84:95:41:5d:f3:f1:5e:d4:33:fa:14:f7:cb:89:dc:98: e0:93:ff:d9:cb:bb:7d:a5:f3:15:70:93:29:33:33:4d:83:59: 20:49:01:74:5c:3b:15:e0:cb:22:68:ca:dc:f5:d5:ec:94:94: 4a:e7:1a:4f:0a:fb:3e:78:f0:dd:9d:2f:d7:ae:49:e9:e6:b5: 52:9a:44:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuukEPnvnCz+wiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2ZhZjhmYzUtNzQ0Yy00ZTA4LWFhMTQtZjM1OTdhYmI1ZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWq8xEoj84MCY4rOJk0QtiWwC95alghYzBIx h/o5F/Nv5z/XOotp77P2TBDvU4SYDexPvqoW/tTqK3Uf9f6A+XXCVP7m0kGkPQ/I ocFe32jwcfYy5rZ+0E49+1LReZv67mx8xZGoivcUbe+2xTkB7IslWxSqTbPhpXKl uoIipfxdgpcPotRBHfD/MRiJlkn55XmyZc6sUxOn8db4MBz7fWFGr2WUM32pbzd2 GxzxRCIwzuuqymTBQLR1ttuzqk4BPgNerScvn/IQbhuygET+AyP/uc7qM66wYKcV srjdCp7Q/Av03n3B9EL2cgVf0qnobMObm01qZQKoWGhV+yRYJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL2rDOwriBVDGkjyEYmesz7JnAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjIwNGVmYmItODdjNi0z MjI5LTg0ZTgtY2Y4ODcwOGQyMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRULgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxcJpvovdXv5p8gm42kHDTiXyCnInc2/QyxGSdUzOMoQAdPZqRN2DBt nX15rHip64pvjI1NAT+6cvmtxtzNJUPCra25nqGfyY5cIpAd88bVVnQSMFYWWWEL h/HzQSjtqfbxRpuYsIdc4HbVOuPvnt/04bQsUD+YgB1CJ2kaAq0aG2xZUn0qNkKv B9QujsKznZ0WbdYY/jlN5Opqt1hCgFXUmum3S3XtJxxNlNHRKN/DBkehiMFshJVB XfPxXtQz+hT3y4ncmOCT/9nLu32l8xVwkykzM02DWSBJAXRcOxXgyyJoytz11eyU lErnGk8K+z548N2dL9euSenmtVKaRBs= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:11 2026 by rpki-client