$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa File: 21ef65b0-89b3-3b33-8192-e464535e916c.roa (raw, json) Hash identifier: ZL9iY+nPDFirdztuja5Q4jYU4WUUFJ5MOxA8gS/XubY= Subject key identifier: AD:42:28:E0:71:73:57:6B:03:D8:5D:6F:01:A1:68:E6:BA:41:E0:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFA9B8EF21E5E4CE649A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 207.222.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fa:9b:8e:f2:1e:5e:4c:e6:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=d2a4ccce-df79-43c1-b15a-3ecaf246150e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cd:ae:26:e8:6b:fc:45:61:27:20:0f:ed:a8: 17:8a:a9:5e:9d:91:30:f8:04:87:30:6a:7c:c1:ed: 33:42:f4:9f:ea:27:fa:8a:bc:d8:f9:64:fb:8a:fe: f7:d0:3c:05:7b:68:ab:29:90:22:41:61:ae:09:06: b6:38:36:b4:62:b2:05:c4:80:cc:0d:14:85:be:4c: 54:5a:17:cb:e2:9d:3e:ab:ab:f6:ad:da:c1:fc:29: f9:a6:d6:08:10:cd:db:33:51:0b:46:50:f3:e6:80: 0b:fb:61:ee:f9:75:44:6a:d0:3f:5c:c0:f2:77:12: e6:be:de:34:2f:49:ac:96:45:42:3f:e8:a0:d3:8d: 87:00:bc:5d:68:63:07:eb:0b:fd:07:a2:32:51:36: ce:12:55:c7:a4:38:7f:de:f3:7f:1b:0e:50:21:b2: 8f:15:b3:b0:b7:db:51:d7:08:a9:c4:af:28:8b:13: 08:39:79:3b:1d:ea:17:c5:79:5e:e6:12:e7:a7:68: 67:dd:b1:e3:40:7f:77:d0:df:b6:12:f7:2d:fa:ec: da:e2:c2:dd:5b:5f:4e:b3:ed:78:ad:f0:11:4d:42: 58:6f:b1:2e:36:f7:32:4b:53:90:04:c9:99:96:25: b0:e4:d7:07:d1:ab:85:9c:18:97:03:92:31:16:a8: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:42:28:E0:71:73:57:6B:03:D8:5D:6F:01:A1:68:E6:BA:41:E0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5f:fd:c5:ad:05:68:17:c8:57:4b:e1:fb:bd:40:e7:a2:1d: fa:6b:9a:22:97:db:d2:e8:e9:7d:7f:73:ab:b7:cb:51:05:01: 17:62:02:f4:41:5d:e0:36:30:92:f8:d5:ed:d2:52:2d:14:8c: e6:80:92:b1:7b:03:3d:cb:d1:9d:f3:5b:77:50:69:08:4b:e0: b8:f0:46:3e:ea:54:bd:e8:31:a2:c5:64:88:94:10:b7:11:a2: 9d:bc:5a:f5:df:cb:02:71:fc:33:a6:26:3a:b8:a0:9b:8e:34: e4:12:b7:15:5f:fd:00:ba:34:20:ab:ce:f4:6f:e9:2e:a1:4d: 6e:5c:5d:af:45:9d:7c:cb:07:15:9b:b8:a9:fd:dc:46:0e:ad: 03:d1:e9:44:9d:6f:5e:4a:3e:a4:85:b3:29:52:de:23:9e:22: 41:2e:3a:7c:3c:88:8a:79:6c:26:be:b7:f7:bb:c8:b7:ff:05: 72:70:25:f9:d6:90:12:1e:55:d4:c9:5c:6c:01:f5:5e:d8:2f: 5f:e9:5a:1d:f4:c9:a1:c2:d5:55:0b:c3:db:b6:18:62:00:3e: 18:be:e2:16:e9:0a:19:be:f1:5b:ec:88:d5:c5:c7:7a:2e:10: cc:e8:8f:38:e2:ca:f6:78:7b:cf:1a:15:6d:8f:f1:15:4d:4f: 3d:39:2f:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvqbjvIeXkzmSaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZDJhNGNjY2UtZGY3OS00M2MxLWIxNWEtM2VjYWYyNDYxNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c2uJuhr/EVhJyAP7agXiqlenZEw+ASHMGp8 we0zQvSf6if6irzY+WT7iv730DwFe2irKZAiQWGuCQa2ODa0YrIFxIDMDRSFvkxU WhfL4p0+q6v2rdrB/Cn5ptYIEM3bM1ELRlDz5oAL+2Hu+XVEatA/XMDydxLmvt40 L0mslkVCP+ig042HALxdaGMH6wv9B6IyUTbOElXHpDh/3vN/Gw5QIbKPFbOwt9tR 1wipxK8oixMIOXk7HeoXxXle5hLnp2hn3bHjQH930N+2Evct+uza4sLdW19Os+14 rfARTUJYb7EuNvcyS1OQBMmZliWw5NcH0auFnBiXA5IxFqjtmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1CKOBxc1drA9hdbwGhaOa6QeAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFlZjY1YjAtODliMy0z YjMzLTgxOTItZTQ2NDUzNWU5MTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz94DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlf/cWtBWgXyFdL4fu9QOeiHfprmiKX29Lo6X1/c6u3y1EFARdiAvRB XeA2MJL41e3SUi0UjOaAkrF7Az3L0Z3zW3dQaQhL4LjwRj7qVL3oMaLFZIiUELcR op28WvXfywJx/DOmJjq4oJuONOQStxVf/QC6NCCrzvRv6S6hTW5cXa9FnXzLBxWb uKn93EYOrQPR6USdb15KPqSFsylS3iOeIkEuOnw8iIp5bCa+t/e7yLf/BXJwJfnW kBIeVdTJXGwB9V7YL1/pWh30yaHC1VULw9u2GGIAPhi+4hbpChm+8VvsiNXFx3ou EMzojzjiyvZ4e88aFW2P8RVNTz05LxM= -----END CERTIFICATE-----Generated at Sat Jun 13 06:02:04 2026 by rpki-client