$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa File: 6e646695-998a-3951-a3ca-a84efeb22b5b.roa (raw, json) Hash identifier: NY48koGb5Qt3c33m6YzNlddTK0bsNSkdQibXYq1RCxE= Subject key identifier: 32:C4:DA:65:46:85:FC:4F:49:E6:39:F2:08:AE:C8:34:DC:33:34:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D84312A5757E86FEA951680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 162.40.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:31:2a:57:57:e8:6f:ea:95:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=67c5d3b5-996c-4308-8e4b-3ec1d8774ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:bd:2e:72:19:0b:8c:68:70:e2:b2:4f:ed: eb:0f:50:71:37:9e:08:0a:00:0f:3f:9b:77:92:f3: 5d:8e:81:f0:11:37:cc:c3:92:ac:8e:8c:ed:1e:ec: 4d:92:4a:b6:8c:96:41:cc:7e:cd:c4:0e:24:a3:e3: 43:68:6b:7a:43:29:a4:46:e9:8e:6e:8e:b4:45:5e: f8:83:f0:c4:71:91:65:4b:53:26:bd:ae:bf:e3:cf: 39:86:d3:b2:2b:60:4e:5d:89:a0:2d:47:1c:1f:ab: 22:e5:1b:59:c2:72:88:ea:15:ef:d7:a5:8f:fe:d1: 2c:cc:93:76:0c:8c:a3:97:52:12:bf:00:d5:e7:d7: 92:f7:5d:22:f6:fe:9a:79:92:3a:e9:48:99:b7:43: c0:39:ab:8c:5b:b7:c0:75:65:02:80:5a:67:c3:8d: f5:8e:60:78:16:d4:84:58:b1:1d:95:17:de:e6:17: 49:88:89:ac:81:63:77:3d:e9:72:09:2e:b6:03:3d: 3d:46:2f:cb:65:18:09:68:4f:11:d6:b9:70:a4:df: dd:70:cc:84:18:f1:10:75:24:42:13:0a:dd:e7:e7: f4:89:f5:04:67:0d:4f:2b:b4:5d:20:db:06:99:b4: f2:12:5c:08:9e:57:ea:e7:64:f2:08:7f:86:ef:e6: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:DA:65:46:85:FC:4F:49:E6:39:F2:08:AE:C8:34:DC:33:34:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ef:bf:ed:6a:e1:0c:ac:ed:0f:c8:84:4b:63:ca:e1:19:c6: fe:34:f7:54:29:ee:99:3d:97:1a:1a:4c:da:47:6d:e2:1f:62: 81:dc:36:b5:79:09:65:fe:ab:3a:94:00:c2:c2:01:97:ed:ec: 0d:02:dd:87:9e:a6:79:a6:a9:12:8c:9a:18:98:14:30:5f:62: ea:74:3f:d1:29:a4:c5:0c:65:11:34:d6:6d:ef:40:5a:0c:f9: 5b:0f:b1:d8:91:ff:b3:ee:87:d8:ae:bc:c7:6e:d5:ab:e8:58: 50:e9:f0:dd:7b:b7:85:dc:8e:e3:96:24:1c:4e:b4:47:a8:45: 76:30:35:dd:ea:dd:85:43:56:d3:14:bc:22:24:01:0b:b7:1a: 88:94:39:fb:89:3d:e1:25:ff:12:c0:98:0a:d9:63:88:b2:36: 6c:a6:31:df:8b:91:0b:ef:a4:b7:d0:a6:35:36:34:57:cd:ec: 56:fa:2a:ec:8e:42:bf:3b:50:25:ce:b0:fe:6c:6e:22:af:fa: f5:c2:ae:79:66:a3:c7:a2:0a:40:64:a9:b1:0e:dc:15:9c:3f: 85:44:e3:1b:79:c1:c3:b7:a3:31:05:3b:f0:8c:f9:c2:e2:83: c4:0b:5e:92:d5:35:46:77:0b:09:16:bc:dc:a7:1a:d0:55:17: 58:48:2f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhDEqV1fob+qVFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NjdjNWQzYjUtOTk2Yy00MzA4LThlNGItM2VjMWQ4Nzc0ZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVS9LnIZC4xocOKyT+3rD1BxN54ICgAPP5t3 kvNdjoHwETfMw5KsjoztHuxNkkq2jJZBzH7NxA4ko+NDaGt6QymkRumObo60RV74 g/DEcZFlS1Mmva6/4885htOyK2BOXYmgLUccH6si5RtZwnKI6hXv16WP/tEszJN2 DIyjl1ISvwDV59eS910i9v6aeZI66UiZt0PAOauMW7fAdWUCgFpnw431jmB4FtSE WLEdlRfe5hdJiImsgWN3PelyCS62Az09Ri/LZRgJaE8R1rlwpN/dcMyEGPEQdSRC Ewrd5+f0ifUEZw1PK7RdINsGmbTyElwInlfq52TyCH+G7+ZQ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLE2mVGhfxPSeY58giuyDTcMzTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmU2NDY2OTUtOTk4YS0z OTUxLWEzY2EtYTg0ZWZlYjIyYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHvv+1q4Qys7Q/IhEtjyuEZxv4091Qp7pk9lxoaTNpHbeIfYoHcNrV5 CWX+qzqUAMLCAZft7A0C3YeepnmmqRKMmhiYFDBfYup0P9EppMUMZRE01m3vQFoM +VsPsdiR/7Puh9iuvMdu1avoWFDp8N17t4XcjuOWJBxOtEeoRXYwNd3q3YVDVtMU vCIkAQu3GoiUOfuJPeEl/xLAmArZY4iyNmymMd+LkQvvpLfQpjU2NFfN7Fb6KuyO Qr87UCXOsP5sbiKv+vXCrnlmo8eiCkBkqbEO3BWcP4VE4xt5wcO3ozEFO/CM+cLi g8QLXpLVNUZ3CwkWvNynGtBVF1hILyk= -----END CERTIFICATE-----Generated at Sat Jun 13 07:27:26 2026 by rpki-client