$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa File: 290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa (raw, json) Hash identifier: sZ0zrV1jJ2bGX/9CZ2zu+MqNSXhXij16kkn+i66/L84= Subject key identifier: C3:7F:80:18:97:AF:80:BA:BD:44:1B:40:F8:3A:D4:23:43:04:E9:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A90C3D9D690200D737080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 67.141.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:90:c3:d9:d6:90:20:0d:73:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=28579531-cddf-48ec-b822-0028865db527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:22:77:fb:17:23:5d:a5:f2:3d:43:5a:59: a1:fe:a6:c8:c9:63:81:1b:7d:3a:f7:0d:3d:11:85: c3:13:96:01:3d:ff:d7:0a:cd:7c:b5:65:e4:f9:c2: 31:bb:14:8b:a4:8c:53:6f:3b:51:e4:da:1b:a5:2c: eb:93:16:0c:86:ab:4c:dd:c0:ae:2b:d4:01:ba:87: 55:6b:16:d6:bc:23:ef:d1:30:f7:00:d5:f0:d3:b6: 41:98:c1:8d:df:f7:a8:ce:3b:e7:8d:f7:0b:42:f3: 64:17:a0:d3:c8:73:9b:87:ea:a0:52:d6:ea:6e:19: 59:c3:21:f9:3c:70:ee:22:8c:8d:5b:82:d1:83:20: 00:d5:c5:52:5f:11:1c:24:d9:92:8d:74:a3:63:cb: 54:b8:c4:0e:fc:c7:88:d2:6c:14:55:82:d6:ca:18: 8c:61:68:0a:c1:99:69:2c:2d:f8:33:5a:db:2f:59: eb:96:33:36:79:27:ad:d4:04:73:85:c5:80:51:11: ae:12:5b:ec:77:a3:27:1d:ab:29:be:9b:6b:37:a8: cf:6b:95:aa:42:4b:f9:bc:c1:19:34:d8:2a:7c:93: f9:d4:8c:8f:e7:80:75:b8:0c:16:0f:1c:71:05:84: 94:02:5e:ff:c6:5d:e2:2f:50:de:92:b1:cc:bb:b9: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7F:80:18:97:AF:80:BA:BD:44:1B:40:F8:3A:D4:23:43:04:E9:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:07:aa:8a:0c:21:f5:c1:3c:7d:27:4e:b6:61:36:a6:ef:53: ed:2b:01:0a:b0:4b:97:f9:9b:c3:02:7d:26:61:85:f6:db:cf: 6c:c1:95:cc:74:30:35:86:f0:a5:22:98:8e:84:1a:e6:78:c2: 2d:4e:c5:85:10:04:26:bc:50:14:61:6d:02:c7:44:b5:77:97: 20:48:d0:bf:12:07:98:6e:e2:e8:d3:ce:c8:62:5e:e1:f5:a0: 98:4b:83:76:d1:0f:d1:48:e0:41:84:48:bd:66:d8:24:4d:0d: 7b:f2:75:4d:7d:65:9d:ef:46:fd:97:d9:7a:c5:1b:97:50:ca: fb:ed:da:3b:aa:3f:d2:f0:2e:85:f8:d4:da:95:0c:17:24:77: 19:c7:6b:55:de:f3:12:ba:27:27:41:97:23:dd:84:60:d7:b8: 8d:1a:53:50:a3:7f:52:67:e4:58:96:88:8a:6c:e5:1f:1f:9a: ba:7b:73:ea:e6:12:96:25:92:b6:3b:82:51:93:6d:4d:08:bd: 35:0b:80:8f:32:d9:00:23:1f:8b:fe:e1:77:5c:b7:cb:5c:1a: f7:c7:51:1c:02:35:96:c7:68:72:a7:69:37:ea:0a:56:c8:99: b0:73:04:c8:dc:41:ca:7f:c8:41:0c:d0:d9:3a:a8:03:b6:ba: 5a:d8:f5:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpDD2daQIA1zcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk Mjg1Nzk1MzEtY2RkZi00OGVjLWI4MjItMDAyODg2NWRiNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO0id/sXI12l8j1DWlmh/qbIyWOBG3069w09 EYXDE5YBPf/XCs18tWXk+cIxuxSLpIxTbztR5NobpSzrkxYMhqtM3cCuK9QBuodV axbWvCPv0TD3ANXw07ZBmMGN3/eozjvnjfcLQvNkF6DTyHObh+qgUtbqbhlZwyH5 PHDuIoyNW4LRgyAA1cVSXxEcJNmSjXSjY8tUuMQO/MeI0mwUVYLWyhiMYWgKwZlp LC34M1rbL1nrljM2eSet1ARzhcWAURGuElvsd6MnHaspvptrN6jPa5WqQkv5vMEZ NNgqfJP51IyP54B1uAwWDxxxBYSUAl7/xl3iL1DekrHMu7k9SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN/gBiXr4C6vUQbQPg61CNDBOmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjkwYjE3ZDMtNDZkMS0z ODNlLWJhYTEtNWExZGQxOWJiZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ41gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMHqooMIfXBPH0nTrZhNqbvU+0rAQqwS5f5m8MCfSZhhfbbz2zBlcx0 MDWG8KUimI6EGuZ4wi1OxYUQBCa8UBRhbQLHRLV3lyBI0L8SB5hu4ujTzshiXuH1 oJhLg3bRD9FI4EGESL1m2CRNDXvydU19ZZ3vRv2X2XrFG5dQyvvt2juqP9LwLoX4 1NqVDBckdxnHa1Xe8xK6JydBlyPdhGDXuI0aU1Cjf1Jn5FiWiIps5R8fmrp7c+rm EpYlkrY7glGTbU0IvTULgI8y2QAjH4v+4Xdct8tcGvfHURwCNZbHaHKnaTfqClbI mbBzBMjcQcp/yEEM0Nk6qAO2ulrY9fw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:48:27 2026 by rpki-client