$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa File: a2880666-4566-3c6f-8c7d-496e76f824a3.roa (raw, json) Hash identifier: QQbSJ9yBPew6PDM96LJ3D9ilcoRxI+ySyIT+zNtC5GQ= Subject key identifier: 35:1A:1F:64:0E:D2:30:4A:41:5E:51:D1:34:11:07:6B:86:0A:FE:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F21E0D68093077EA64FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 393238 IP address blocks: 64.199.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:21:e0:d6:80:93:07:7e:a6:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=b843b919-1cdf-4c15-ba48-913eb86e4b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:0a:3e:e6:1a:4b:47:5f:c4:bd:48:c3:e7: 47:f3:2a:58:35:73:4e:5d:bf:29:b2:2d:33:0b:d8: 26:e0:1c:b5:5d:ab:94:a8:73:86:82:de:e9:5f:16: 38:04:c7:27:b2:bc:3f:d9:39:5a:0b:81:d8:06:17: b3:e5:17:f4:18:12:4b:d6:7b:29:31:cd:5f:24:2b: 4b:c4:09:ac:fe:92:db:48:b4:b2:1e:5d:73:fd:14: 59:a7:3f:a7:83:0f:46:77:63:ea:68:2e:85:ed:d6: e0:fd:3f:f7:bb:b7:34:c1:02:5e:76:07:9b:8b:0e: 2e:03:bd:3d:6a:8f:a0:90:2a:db:97:19:61:fd:57: 90:23:9b:74:41:7d:f5:af:14:da:fb:c3:ea:a5:0a: e6:c4:f2:24:57:a6:5f:ca:93:69:ef:61:2c:b6:28: da:fd:9b:55:30:cc:61:78:e7:ff:df:e3:c5:41:88: 01:31:af:52:95:c5:03:c7:7a:5c:38:47:f6:c7:3c: b6:d6:94:24:5c:5b:f7:cd:46:cf:e0:0d:0c:8a:2d: 89:56:20:ef:0e:3d:1a:ef:82:f8:29:b3:19:df:74: d7:b9:ae:fc:e5:38:e6:01:34:7b:df:ff:65:8a:95: 25:0c:d3:32:ff:99:44:ff:74:55:5a:47:30:a9:1b: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1A:1F:64:0E:D2:30:4A:41:5E:51:D1:34:11:07:6B:86:0A:FE:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.199.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4b:b5:2e:52:23:d7:2c:aa:c3:0f:7a:1a:f2:22:63:52:2c: fc:26:05:8c:7d:bb:98:3c:72:be:69:0c:e6:bd:e0:d2:04:2e: 89:40:b2:b5:6e:61:ba:8e:84:55:82:c1:e3:a5:e1:c2:45:65: 33:82:9b:a8:8e:eb:eb:6b:75:b5:69:ba:02:38:94:e8:8e:9c: 29:85:62:5c:6c:1b:18:b2:05:eb:59:48:e5:82:73:c6:bc:f6: 5f:be:ea:5d:1d:7e:c3:e2:e3:27:8a:38:33:a8:86:46:ea:59: 0e:37:f1:77:f5:8f:82:05:d0:01:b2:1f:3a:45:03:d0:03:59: 2a:87:77:28:67:d6:1b:ea:00:c9:33:21:e9:01:34:77:ae:e9: a3:dd:a1:3e:45:e4:4c:16:79:cf:01:44:87:03:61:14:4f:98: 8a:e2:8e:04:4e:9b:ef:a1:2f:e7:96:9e:1d:8a:fb:ad:1d:d6: 18:3e:44:a8:d1:47:fc:79:b6:55:2c:c9:90:67:06:39:f8:a6: 06:b0:42:7e:55:03:29:70:f0:da:10:c1:e0:1b:5d:47:f1:8f: 27:16:48:98:c4:07:d7:53:f4:fa:a4:9a:08:f8:ab:d3:da:ad: b6:70:11:7c:6c:e0:2e:a1:12:3e:5d:83:df:5f:12:a4:cd:58: fb:0e:f0:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyHg1oCTB36mT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk Yjg0M2I5MTktMWNkZi00YzE1LWJhNDgtOTEzZWI4NmU0YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviwKPuYaS0dfxL1Iw+dH8ypYNXNOXb8psi0z C9gm4By1XauUqHOGgt7pXxY4BMcnsrw/2TlaC4HYBhez5Rf0GBJL1nspMc1fJCtL xAms/pLbSLSyHl1z/RRZpz+ngw9Gd2PqaC6F7dbg/T/3u7c0wQJedgebiw4uA709 ao+gkCrblxlh/VeQI5t0QX31rxTa+8PqpQrmxPIkV6ZfypNp72Estija/ZtVMMxh eOf/3+PFQYgBMa9SlcUDx3pcOEf2xzy21pQkXFv3zUbP4A0Mii2JViDvDj0a74L4 KbMZ33TXua785TjmATR73/9lipUlDNMy/5lE/3RVWkcwqRuOzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUaH2QO0jBKQV5R0TQRB2uGCv4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI4ODA2NjYtNDU2Ni0z YzZmLThjN2QtNDk2ZTc2ZjgyNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1LtS5SI9csqsMPehryImNSLPwmBYx9u5g8cr5pDOa94NIELolAsrVu YbqOhFWCweOl4cJFZTOCm6iO6+trdbVpugI4lOiOnCmFYlxsGxiyBetZSOWCc8a8 9l++6l0dfsPi4yeKODOohkbqWQ438Xf1j4IF0AGyHzpFA9ADWSqHdyhn1hvqAMkz IekBNHeu6aPdoT5F5EwWec8BRIcDYRRPmIrijgROm++hL+eWnh2K+60d1hg+RKjR R/x5tlUsyZBnBjn4pgawQn5VAylw8NoQweAbXUfxjycWSJjEB9dT9Pqkmgj4q9Pa rbZwEXxs4C6hEj5dg99fEqTNWPsO8AE= -----END CERTIFICATE-----Generated at Sat Jun 13 18:50:11 2026 by rpki-client