$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa File: 1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa (raw, json) Hash identifier: U7rmDjE38z57sE7JOW+Ah04LdOK2mrwc9NO6Q4nVFf8= Subject key identifier: AF:A7:30:61:07:6F:2C:9F:E0:DA:D4:5F:68:59:4A:3C:CE:44:BE:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F156754E4DEA2AEE97300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 67.217.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:15:67:54:e4:de:a2:ae:e9:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=b306131b-f3f3-4a36-9d67-1bb9e8eb81a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:56:06:a9:13:ad:70:28:ae:97:ca:7b:a1: d3:e2:0c:82:e7:4d:12:2b:f8:31:8b:5b:fe:4b:a9: a3:1b:96:35:6a:ad:e3:23:f1:3a:6b:d2:96:4c:da: a4:65:66:c3:5e:a7:da:20:86:5c:21:d9:e2:fa:4b: ea:1d:4a:0f:c4:e9:be:b7:ac:dd:86:58:04:b4:bf: 9f:a2:be:ee:fc:ad:3c:57:82:ab:e8:37:08:be:80: 9a:77:10:f0:c9:26:27:84:ed:1a:e7:4d:57:b1:52: 91:61:37:60:5b:03:cf:3e:35:5d:30:6a:ee:c5:99: 54:b7:a9:66:fc:b9:93:5e:97:10:07:94:ed:75:b4: 02:92:75:c3:db:13:ad:d4:c5:29:38:00:7e:67:de: 3e:3b:56:eb:09:54:5a:43:9d:f3:e9:de:24:59:3c: f2:95:72:84:f5:99:6d:67:c3:af:e9:04:4c:b1:08: 61:83:6f:c7:71:c0:34:fa:56:de:e4:2d:85:0c:e3: 9b:ab:28:8b:42:41:ea:aa:8c:ba:7d:92:35:5a:81: de:03:f2:36:83:97:2b:ff:3a:50:44:e4:a0:3c:1e: ca:0c:b2:78:a4:5a:4d:2d:66:4e:fd:11:d9:2d:26: 74:ea:20:42:81:1c:74:11:7a:41:f7:e3:10:59:6c: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:30:61:07:6F:2C:9F:E0:DA:D4:5F:68:59:4A:3C:CE:44:BE:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:45:05:f2:ad:0d:62:6a:5c:44:1d:6d:0d:e6:6f:41:32:a9: 11:64:a1:d8:da:01:b6:b1:6f:8e:45:c4:d2:fe:55:fc:d5:02: 9d:a3:4f:a7:c1:b2:3f:72:7b:d7:b6:41:7f:27:aa:70:c7:16: c9:90:60:40:dc:4c:70:65:61:13:53:9f:c1:17:db:bc:4c:28: 6e:fc:cc:cf:6b:43:74:13:00:87:0f:0d:d8:fe:ea:80:89:c0: 08:74:07:f7:15:f2:26:73:8c:8b:de:c7:13:0e:7c:b2:40:2c: 68:95:8c:bc:c4:e5:9b:22:3f:0e:31:4f:6e:62:7b:a7:58:a7: cc:59:ae:8f:15:f4:6a:45:a5:9f:44:30:af:96:96:c1:b8:72: 86:e0:25:76:5a:07:78:5a:b6:5a:79:54:77:73:40:c3:84:6e: 82:fb:ad:90:91:e1:4d:cd:03:ea:25:4b:4a:1e:3a:65:b8:0f: 91:a6:72:32:71:61:90:54:91:25:1b:ce:e5:0a:50:db:a5:66: bd:a7:17:b7:c8:f9:50:c1:58:07:11:90:27:2a:29:2c:88:9c: 01:a7:54:ff:7d:43:2e:17:3e:92:ca:22:8c:47:50:a1:95:99: 21:de:6b:96:a9:7f:77:e8:44:d1:30:1e:6d:38:d0:dd:d3:41: d2:34:2c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxVnVOTeoq7pcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YjMwNjEzMWItZjNmMy00YTM2LTlkNjctMWJiOWU4ZWI4MWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh1WBqkTrXAorpfKe6HT4gyC500SK/gxi1v+ S6mjG5Y1aq3jI/E6a9KWTNqkZWbDXqfaIIZcIdni+kvqHUoPxOm+t6zdhlgEtL+f or7u/K08V4Kr6DcIvoCadxDwySYnhO0a501XsVKRYTdgWwPPPjVdMGruxZlUt6lm /LmTXpcQB5TtdbQCknXD2xOt1MUpOAB+Z94+O1brCVRaQ53z6d4kWTzylXKE9Zlt Z8Ov6QRMsQhhg2/HccA0+lbe5C2FDOObqyiLQkHqqoy6fZI1WoHeA/I2g5cr/zpQ ROSgPB7KDLJ4pFpNLWZO/RHZLSZ06iBCgRx0EXpB9+MQWWyV7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+nMGEHbyyf4NrUX2hZSjzORL5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA0NWJhNTgtNTgzMC0z ZWQxLWEyYjAtMGYzZmRlNGVmZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNFBfKtDWJqXEQdbQ3mb0EyqRFkodjaAbaxb45FxNL+VfzVAp2jT6fB sj9ye9e2QX8nqnDHFsmQYEDcTHBlYRNTn8EX27xMKG78zM9rQ3QTAIcPDdj+6oCJ wAh0B/cV8iZzjIvexxMOfLJALGiVjLzE5ZsiPw4xT25ie6dYp8xZro8V9GpFpZ9E MK+WlsG4cobgJXZaB3hatlp5VHdzQMOEboL7rZCR4U3NA+olS0oeOmW4D5GmcjJx YZBUkSUbzuUKUNulZr2nF7fI+VDBWAcRkCcqKSyInAGnVP99Qy4XPpLKIoxHUKGV mSHea5apf3foRNEwHm040N3TQdI0LLo= -----END CERTIFICATE-----Generated at Sat Jun 13 06:03:50 2026 by rpki-client