$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa File: aa28106e-e7e6-354b-9d61-537cbb86adc4.roa (raw, json) Hash identifier: o6zC8oTBRkLYISC1GrQUw7ovXxa0tI047Lzp+0BUv/o= Subject key identifier: A4:F4:17:70:94:2C:AF:B6:C9:9F:22:1E:6D:60:7D:D4:10:C0:99:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F21AB28C91E88FA91F200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 55107 IP address blocks: 66.173.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:21:ab:28:c9:1e:88:fa:91:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=1b810499-29b2-41a1-82e9-0dc77c134b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:08:c4:67:b6:24:53:0b:a6:04:5b:17:e5:5b: 4e:a3:72:82:f3:58:5b:01:27:91:de:9f:f5:3a:21: 16:a0:7f:5e:e7:c6:0c:c5:19:2c:4b:2e:b0:4e:ee: 06:1f:5d:e4:4b:5c:3c:24:bb:35:70:c0:20:79:95: 40:4a:c2:22:c2:9b:f1:1b:48:44:6d:b5:0c:9c:5c: 39:0c:8d:68:65:25:31:e7:a4:1a:cc:a0:bd:b7:56: aa:d0:3b:72:01:12:dc:91:7b:60:b8:85:a8:fc:7f: 8b:ce:e1:26:d4:36:8f:a3:3e:9f:0f:13:8b:ab:da: af:34:1a:d2:ae:01:b3:81:9b:15:e9:b9:84:2c:ec: 6d:7d:23:0d:a6:40:d6:60:b1:23:28:fe:fa:f5:a1: 7b:da:5b:02:af:92:44:6b:bf:c5:ca:ea:47:3f:50: 1f:6e:e3:02:35:8d:1f:78:90:bb:ed:f5:4f:8b:aa: 6b:8e:d9:57:cd:56:0b:21:34:d1:f2:c1:23:3a:8c: 73:88:8a:06:b2:10:4e:2f:3c:fb:6c:3d:25:8e:e7: fd:0a:32:f3:5a:6e:5d:47:26:a1:c7:96:54:6a:1d: e9:df:64:21:cc:e0:ba:d2:2e:42:d1:96:2e:c7:d1: 1b:34:50:01:76:1f:5c:1b:a3:7e:55:bb:a4:98:20: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F4:17:70:94:2C:AF:B6:C9:9F:22:1E:6D:60:7D:D4:10:C0:99:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a5:34:89:a1:47:93:4a:b5:4e:57:50:74:15:aa:e3:d6:a7: c2:cd:23:e7:d9:8a:94:cc:64:3f:ed:cc:60:37:4f:71:b7:17: 8d:03:04:90:04:57:ec:64:b7:d5:01:fb:df:6c:8d:0c:16:52: 58:84:75:f1:9d:7b:59:7f:59:15:b6:be:a6:6e:22:da:27:8e: d4:e1:a3:df:5e:58:80:1d:4c:d3:91:c9:60:0e:e9:7d:f8:a3: fc:d1:10:36:09:05:80:7c:d7:f6:e0:f9:a1:ea:95:29:7a:99: 0b:77:f6:3b:31:a4:96:d6:2c:ed:ac:6a:93:3f:3a:11:86:b0: 77:cc:1f:5e:c4:96:44:fb:d7:0a:d6:de:b7:21:9f:bd:92:7c: 5b:65:11:c9:4c:ea:66:1b:8a:d2:d6:30:cc:47:01:f0:37:c9: 78:11:f2:91:39:13:8f:f3:20:00:55:04:6b:60:73:e4:fe:05: 40:df:8e:dd:81:1f:27:a6:fe:60:ac:ef:a5:27:fe:e5:af:d1: ca:47:30:e6:f7:db:fb:c0:91:f2:b3:82:f5:8e:95:43:4e:aa: a5:00:11:ee:40:e3:2b:04:4e:c2:46:3c:ce:ba:55:ac:6d:f6: e0:f9:c4:69:5a:cd:31:1c:b9:51:46:af:da:0b:fe:5f:6e:ee: 98:ae:43:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyGrKMkeiPqR8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MWI4MTA0OTktMjliMi00MWExLTgyZTktMGRjNzdjMTM0Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAjEZ7YkUwumBFsX5VtOo3KC81hbASeR3p/1 OiEWoH9e58YMxRksSy6wTu4GH13kS1w8JLs1cMAgeZVASsIiwpvxG0hEbbUMnFw5 DI1oZSUx56QazKC9t1aq0DtyARLckXtguIWo/H+LzuEm1DaPoz6fDxOLq9qvNBrS rgGzgZsV6bmELOxtfSMNpkDWYLEjKP769aF72lsCr5JEa7/FyupHP1AfbuMCNY0f eJC77fVPi6prjtlXzVYLITTR8sEjOoxziIoGshBOLzz7bD0ljuf9CjLzWm5dRyah x5ZUah3p32QhzOC60i5C0ZYux9EbNFABdh9cG6N+VbukmCC9SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT0F3CULK+2yZ8iHm1gfdQQwJnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEyODEwNmUtZTdlNi0z NTRiLTlkNjEtNTM3Y2JiODZhZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2lNImhR5NKtU5XUHQVquPWp8LNI+fZipTMZD/tzGA3T3G3F40DBJAE V+xkt9UB+99sjQwWUliEdfGde1l/WRW2vqZuItonjtTho99eWIAdTNORyWAO6X34 o/zREDYJBYB81/bg+aHqlSl6mQt39jsxpJbWLO2sapM/OhGGsHfMH17ElkT71wrW 3rchn72SfFtlEclM6mYbitLWMMxHAfA3yXgR8pE5E4/zIABVBGtgc+T+BUDfjt2B Hyem/mCs76Un/uWv0cpHMOb32/vAkfKzgvWOlUNOqqUAEe5A4ysETsJGPM66Vaxt 9uD5xGlazTEcuVFGr9oL/l9u7piuQ7A= -----END CERTIFICATE-----Generated at Sat Jun 13 15:26:55 2026 by rpki-client