$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a8b9cb-2e00-3de9-87f2-52c68b30d909.roa File: 23a8b9cb-2e00-3de9-87f2-52c68b30d909.roa (raw, json) Hash identifier: X8auW/Qt+7/sZeRmKG9k1UQLr0dgxKw5qW2b+DnpXow= Subject key identifier: 01:F0:9C:27:BB:E0:C0:A9:B0:7E:CB:CB:D9:7B:5A:11:4E:C3:F2:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F159FB96AE77ADA0B7600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a8b9cb-2e00-3de9-87f2-52c68b30d909.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 69.66.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:15:9f:b9:6a:e7:7a:da:0b:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=e25e8648-5f5f-4665-a4dd-2a7d1bc66045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:fc:4c:aa:2c:1e:38:fb:ef:33:91:a7:f5: 33:9c:4f:d6:32:85:84:fb:8e:5e:16:be:69:de:a3: cf:3c:4b:ae:2b:db:aa:d9:4d:77:dc:f2:96:25:ba: 8a:d1:33:f6:ad:10:fd:4f:2b:12:f9:99:16:fd:ba: d7:f7:31:ea:0c:3b:36:3e:21:79:14:61:00:61:d3: 89:b7:80:02:b3:46:32:ee:9d:13:d1:86:6d:12:5f: 2c:68:cc:e9:38:98:71:5c:68:6a:29:24:49:d1:e2: 37:2a:2d:86:d5:16:71:38:b6:5d:23:3a:4a:13:5e: 97:c0:19:91:9b:2a:ad:35:ac:a0:15:63:cf:f2:2b: 77:72:5f:28:e8:9f:ac:2c:9c:1c:53:8f:a7:b4:f8: 52:35:0e:aa:94:b0:ba:2b:f9:df:4b:aa:e6:79:dc: eb:36:55:a8:ae:34:f9:13:3d:e3:f7:a4:be:c7:db: 99:23:03:f7:5e:93:a5:dc:53:a2:9a:6f:2b:9d:56: 7e:aa:4b:f9:02:ed:d5:a9:a9:af:74:c9:15:a8:b2: 3d:bb:6d:a2:f9:8f:11:bf:83:84:35:86:a8:13:21: 72:97:b8:96:21:13:c2:f1:3c:da:6a:d0:18:43:36: df:47:8b:a9:44:b1:e1:20:2c:ff:93:cb:5f:b1:1f: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F0:9C:27:BB:E0:C0:A9:B0:7E:CB:CB:D9:7B:5A:11:4E:C3:F2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a8b9cb-2e00-3de9-87f2-52c68b30d909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:aa:9f:bd:cc:90:5d:9a:5b:38:b0:d7:a0:79:19:30:61:d4: 7a:4b:ff:9b:4d:b5:63:ae:06:76:dc:73:99:7b:64:bb:bd:3a: 55:e5:e1:62:a3:40:e9:f0:8c:7e:21:ab:3c:bb:19:bd:13:81: 83:0d:b3:e3:53:f3:6f:58:83:98:b3:d8:d0:da:c9:90:98:f1: 5f:50:2d:80:4e:02:b7:0e:77:93:d1:34:f6:97:24:1b:02:87: a4:a9:83:ce:35:f7:89:2c:01:f0:53:8c:ce:89:19:72:67:d8: 5f:f1:8d:d4:d8:c3:17:9f:86:a4:84:78:20:e2:ed:74:1d:6c: 57:1b:77:89:ad:96:f8:dd:3e:18:7e:59:3c:c3:13:f2:ed:26: ab:19:22:2f:e2:fc:00:6f:08:62:fa:17:74:9b:3f:0b:e0:f3: 15:5d:ae:1e:bc:c0:1d:06:cd:13:a4:da:69:ec:30:d4:bd:18: 0a:6a:cc:1b:58:bc:b3:cd:bf:9b:bd:4c:a0:4c:a5:78:63:08: 56:f4:14:a0:55:9f:5d:ad:4b:2f:42:40:c1:c1:41:21:62:a6: a8:ee:54:57:30:ac:de:09:16:d8:b1:41:88:fe:7c:bb:ad:84: 62:8d:30:a7:02:d8:d1:67:3f:9c:9b:24:93:b2:7b:84:83:29: e7:92:d6:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxWfuWrnetoLdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZTI1ZTg2NDgtNWY1Zi00NjY1LWE0ZGQtMmE3ZDFiYzY2MDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVD8TKosHjj77zORp/UznE/WMoWE+45eFr5p 3qPPPEuuK9uq2U133PKWJbqK0TP2rRD9TysS+ZkW/brX9zHqDDs2PiF5FGEAYdOJ t4ACs0Yy7p0T0YZtEl8saMzpOJhxXGhqKSRJ0eI3Ki2G1RZxOLZdIzpKE16XwBmR myqtNaygFWPP8it3cl8o6J+sLJwcU4+ntPhSNQ6qlLC6K/nfS6rmedzrNlWorjT5 Ez3j96S+x9uZIwP3XpOl3FOimm8rnVZ+qkv5Au3VqamvdMkVqLI9u22i+Y8Rv4OE NYaoEyFyl7iWIRPC8TzaatAYQzbfR4upRLHhICz/k8tfsR9ACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHwnCe74MCpsH7Ly9l7WhFOw/KXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNhOGI5Y2ItMmUwMC0z ZGU5LTg3ZjItNTJjNjhiMzBkOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUJ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiqn73MkF2aWziw16B5GTBh1HpL/5tNtWOuBnbcc5l7ZLu9OlXl4WKj QOnwjH4hqzy7Gb0TgYMNs+NT829Yg5iz2NDayZCY8V9QLYBOArcOd5PRNPaXJBsC h6Spg84194ksAfBTjM6JGXJn2F/xjdTYwxefhqSEeCDi7XQdbFcbd4mtlvjdPhh+ WTzDE/LtJqsZIi/i/ABvCGL6F3SbPwvg8xVdrh68wB0GzROk2mnsMNS9GApqzBtY vLPNv5u9TKBMpXhjCFb0FKBVn12tSy9CQMHBQSFipqjuVFcwrN4JFtixQYj+fLut hGKNMKcC2NFnP5ybJJOye4SDKeeS1iM= -----END CERTIFICATE-----Generated at Sat Jun 13 06:01:09 2026 by rpki-client