$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/716b575a-a1e9-3fe0-ab63-6b778af0f46d.roa File: 716b575a-a1e9-3fe0-ab63-6b778af0f46d.roa (raw, json) Hash identifier: pbe8TKhuayZFEqcPHV39mADmrpY0Ayu9gdOLNRpOVlU= Subject key identifier: B5:34:78:99:BD:F2:89:25:5B:68:4C:C5:C4:BD:70:4B:36:C5:A9:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A98DB2E7425392554FB60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/716b575a-a1e9-3fe0-ab63-6b778af0f46d.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 67.140.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:98:db:2e:74:25:39:25:54:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=e70e7fb4-c537-460a-a1a2-12e236d45733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:c6:bb:22:82:83:12:58:94:83:62:76:a9: d7:d8:38:3b:69:50:04:99:ac:f4:b4:f0:96:32:08: 8c:a8:ee:df:d9:75:d4:46:f2:4b:8e:82:f4:69:55: 18:62:32:35:46:da:ed:dc:49:05:9a:37:f9:1c:26: bc:60:e2:a1:3d:79:9b:c5:41:23:41:cc:36:6d:40: d7:94:32:ae:f8:34:53:9c:a5:d9:e4:ba:1a:d8:1c: 97:a8:5d:d9:cb:33:11:25:a8:04:42:c3:de:24:9f: b1:6d:81:c6:2f:bc:d8:b6:8c:45:90:51:2b:7d:83: 41:31:68:b3:6a:06:de:bb:91:dc:78:7f:c7:fa:3f: ee:6e:60:8f:0f:e8:5c:26:96:4c:4c:13:9a:d1:4a: 12:90:4a:ef:02:02:5a:3e:82:91:c5:9f:62:8e:9e: af:76:1a:29:ce:fe:35:6c:94:90:3d:44:b5:f9:93: 4d:9f:fc:ad:d1:0d:96:ab:df:d3:c4:30:9c:7b:d1: f6:4b:98:3d:33:e5:d3:ce:68:67:85:1f:6b:68:40: 82:1a:74:4e:8b:db:f6:26:53:fe:f0:d1:48:6c:97: e3:d6:f6:aa:c0:17:37:6b:3f:76:11:6c:13:56:ca: 84:b9:0e:55:35:ce:8d:16:ba:32:9d:ff:1a:b4:98: d9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:34:78:99:BD:F2:89:25:5B:68:4C:C5:C4:BD:70:4B:36:C5:A9:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/716b575a-a1e9-3fe0-ab63-6b778af0f46d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0b:fe:49:d5:49:25:05:d9:e3:64:f4:84:0a:78:1c:3b:9e: 90:65:b1:14:a4:d6:dc:83:3a:22:37:23:f4:89:f4:8e:08:b2: af:5f:07:b9:8b:04:be:fe:07:ce:1f:79:a2:ec:d6:84:d5:d8: 26:af:c7:6d:20:27:01:6a:b9:1c:d1:88:59:a4:36:bb:82:78: 8b:79:33:82:5d:44:d1:e7:0a:f9:42:3e:fc:d9:d6:8d:9d:d3: a6:1a:2d:11:c1:5e:fd:85:62:52:66:84:3f:aa:72:bb:1d:ab: d0:10:78:5a:5e:0c:14:2a:65:58:6f:16:26:d1:de:a1:9d:c0: 90:22:e5:7c:f2:47:71:d9:fb:e0:81:9d:44:92:e7:ae:fa:b7: 4c:f9:75:81:ec:61:9b:e6:2a:2a:b3:37:9c:74:69:99:22:aa: 3d:ee:ae:11:ac:40:b6:47:83:78:08:dc:43:d8:41:f2:7b:d4: 0d:4f:ae:cc:93:0f:1f:98:b5:02:ef:e9:06:c4:b1:25:48:0a: 48:c9:e5:e2:a8:d2:77:7a:41:12:8a:9c:1f:24:8e:b4:96:54: 6a:3a:39:35:2e:b5:a5:0b:b6:67:75:cb:68:ae:3b:3e:0e:d4: 9b:4b:c0:c3:7e:2d:59:f7:c9:3b:37:b4:67:5d:ce:9a:d2:1c: 58:cb:20:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpjbLnQlOSVU+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZTcwZTdmYjQtYzUzNy00NjBhLWExYTItMTJlMjM2ZDQ1NzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0DGuyKCgxJYlINidqnX2Dg7aVAEmaz0tPCW MgiMqO7f2XXURvJLjoL0aVUYYjI1Rtrt3EkFmjf5HCa8YOKhPXmbxUEjQcw2bUDX lDKu+DRTnKXZ5Loa2ByXqF3ZyzMRJagEQsPeJJ+xbYHGL7zYtoxFkFErfYNBMWiz agbeu5HceH/H+j/ubmCPD+hcJpZMTBOa0UoSkErvAgJaPoKRxZ9ijp6vdhopzv41 bJSQPUS1+ZNNn/yt0Q2Wq9/TxDCce9H2S5g9M+XTzmhnhR9raECCGnROi9v2JlP+ 8NFIbJfj1vaqwBc3az92EWwTVsqEuQ5VNc6NFroynf8atJjZIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU0eJm98oklW2hMxcS9cEs2xan9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzE2YjU3NWEtYTFlOS0z ZmUwLWFiNjMtNmI3NzhhZjBmNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4xgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYL/knVSSUF2eNk9IQKeBw7npBlsRSk1tyDOiI3I/SJ9I4Isq9fB7mL BL7+B84feaLs1oTV2Cavx20gJwFquRzRiFmkNruCeIt5M4JdRNHnCvlCPvzZ1o2d 06YaLRHBXv2FYlJmhD+qcrsdq9AQeFpeDBQqZVhvFibR3qGdwJAi5XzyR3HZ++CB nUSS5676t0z5dYHsYZvmKiqzN5x0aZkiqj3urhGsQLZHg3gI3EPYQfJ71A1PrsyT Dx+YtQLv6QbEsSVICkjJ5eKo0nd6QRKKnB8kjrSWVGo6OTUutaULtmd1y2iuOz4O 1JtLwMN+LVn3yTs3tGddzprSHFjLIKg= -----END CERTIFICATE-----Generated at Fri Apr 17 16:44:09 2026 by rpki-client