$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa File: 3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa (raw, json) Hash identifier: dT6RHoH8Yd+wYDXJi/VQ+wMBHX01kbDSXOoiOv5cZ3k= Subject key identifier: 9A:BF:E1:97:BD:49:EC:83:05:53:37:AD:6A:B2:23:D8:8A:93:F3:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E13198518B7700D6CB42E4280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 69.40.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:85:18:b7:70:0d:6c:b4:2e:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=75911e86-602f-45cb-8c43-cbbd9bee8771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:85:cf:d8:2e:65:58:a7:5f:74:ca:b7:c3:aa: f6:c0:20:f0:76:27:99:1e:51:00:5d:2f:8a:35:f0: 27:a2:a4:e7:99:39:65:60:51:e9:a6:cd:4c:00:1a: 88:9a:fa:c4:f9:8b:72:7d:15:ff:47:a6:65:03:f5: 06:79:47:51:fc:a4:e1:18:3c:a4:9c:a5:e5:24:34: de:3f:17:cc:9b:d4:9d:07:b2:e8:a6:06:1b:5a:a5: c6:ea:cd:92:28:86:7e:d4:1d:0a:9b:5d:19:e1:01: 34:67:e9:ce:17:45:8b:ab:04:c3:59:7b:78:14:b6: 9a:26:4e:10:d9:a3:ca:9f:04:0e:01:2d:ce:cd:d5: a7:41:77:a0:14:d5:98:48:c6:f3:81:50:18:67:99: 21:1c:6a:a9:40:c9:e8:35:5a:19:64:5f:76:3a:61: 65:2d:5b:78:6a:48:05:54:98:e1:6d:b0:bc:6d:b7: 46:2f:27:d6:b5:fe:a8:dd:6b:bc:14:12:af:b1:40: f7:ed:7e:0f:7d:4f:44:01:17:63:b8:ba:03:2f:89: d4:62:d1:79:8f:d0:d5:12:9d:cd:11:04:ae:d2:f1: ef:58:6c:00:99:4b:eb:e3:39:5b:7e:cd:05:64:5f: 2c:6e:e3:49:35:c8:c7:1c:39:43:d2:02:66:5e:f9: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BF:E1:97:BD:49:EC:83:05:53:37:AD:6A:B2:23:D8:8A:93:F3:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a214c3c-7f80-3e2b-8a1b-6d47edb228ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:36:ae:e8:43:98:d3:e9:26:2f:6b:4c:a2:60:90:f0:79:42: 52:20:55:f1:a1:43:cc:79:a6:75:be:2a:e3:70:55:5e:57:93: f8:c4:fa:81:6e:26:ee:24:72:15:df:b0:c2:27:69:b8:43:94: b4:5a:52:cf:fc:82:cf:a2:4e:cd:bb:70:5a:e5:bb:e4:be:f1: 54:2f:62:9f:5c:de:03:98:9c:d5:18:26:c4:ef:90:39:8c:ae: 64:a9:42:58:fa:9e:3e:c3:d9:56:9e:af:d5:22:de:ba:a7:ea: c7:9d:e7:17:65:56:8c:6a:0c:76:c1:f2:75:7e:a2:8a:2c:c7: b8:3b:66:72:b5:10:d1:0d:64:29:a0:25:82:90:23:8a:9b:64: 4b:78:10:40:e5:8e:72:2d:5e:c3:cf:2a:7e:c6:95:96:0a:68: dc:3f:28:a9:a3:80:39:78:85:61:a0:c6:09:c8:1b:ec:52:8b: 57:8f:af:85:0d:5d:13:92:8c:e8:46:3d:c7:5f:92:f2:25:3d: 47:34:85:f3:7a:e5:b8:7c:60:3b:e7:f4:f3:ef:ba:e8:92:11: e4:20:2f:96:d6:a8:9a:42:02:0a:bf:8f:34:6d:98:d1:ce:d1: 0b:ba:31:97:fa:ec:0f:67:25:b0:08:a2:56:5e:4f:5e:c9:8a: 2c:80:05:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4TGYUYt3ANbLQuQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk NzU5MTFlODYtNjAyZi00NWNiLThjNDMtY2JiZDliZWU4NzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4XP2C5lWKdfdMq3w6r2wCDwdieZHlEAXS+K NfAnoqTnmTllYFHpps1MABqImvrE+YtyfRX/R6ZlA/UGeUdR/KThGDyknKXlJDTe PxfMm9SdB7LopgYbWqXG6s2SKIZ+1B0Km10Z4QE0Z+nOF0WLqwTDWXt4FLaaJk4Q 2aPKnwQOAS3OzdWnQXegFNWYSMbzgVAYZ5khHGqpQMnoNVoZZF92OmFlLVt4akgF VJjhbbC8bbdGLyfWtf6o3Wu8FBKvsUD37X4PfU9EARdjuLoDL4nUYtF5j9DVEp3N EQSu0vHvWGwAmUvr4zlbfs0FZF8sbuNJNcjHHDlD0gJmXvlXhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq/4Ze9SeyDBVM3rWqyI9iKk/PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2EyMTRjM2MtN2Y4MC0z ZTJiLThhMWItNmQ0N2VkYjIyOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk2ruhDmNPpJi9rTKJgkPB5QlIgVfGhQ8x5pnW+KuNwVV5Xk/jE+oFu Ju4kchXfsMInabhDlLRaUs/8gs+iTs27cFrlu+S+8VQvYp9c3gOYnNUYJsTvkDmM rmSpQlj6nj7D2Vaer9Ui3rqn6sed5xdlVoxqDHbB8nV+ooosx7g7ZnK1ENENZCmg JYKQI4qbZEt4EEDljnItXsPPKn7GlZYKaNw/KKmjgDl4hWGgxgnIG+xSi1ePr4UN XROSjOhGPcdfkvIlPUc0hfN65bh8YDvn9PPvuuiSEeQgL5bWqJpCAgq/jzRtmNHO 0Qu6MZf67A9nJbAIolZeT17JiiyABaA= -----END CERTIFICATE-----Generated at Sat Jun 13 10:05:04 2026 by rpki-client