$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa File: c406f707-442e-31b7-a3ad-0e158a7f1148.roa (raw, json) Hash identifier: rG3UjvD2xP0SCMEKZ1ETQ8lP+kYineQeJUrpAN1O61s= Subject key identifier: 0B:50:6A:DC:ED:4A:62:0F:5F:D9:E6:F5:A6:BD:E0:A3:3A:DF:A3:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F007FB57BBDE46DB92E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 27338 IP address blocks: 66.0.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:00:7f:b5:7b:bd:e4:6d:b9:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=13084f2b-cf57-4b13-bd71-baf3effbd86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:38:85:65:f4:c0:d9:89:4b:00:da:eb:73:d9: 18:f6:32:e6:40:60:e5:d3:95:b2:16:e8:cb:2d:bc: f5:60:64:7c:1a:10:f7:dd:3b:c4:d5:7d:41:f5:23: 43:8b:2d:20:3c:f1:b4:6a:21:23:e6:d4:a8:dc:d8: 80:1a:3a:7b:99:bf:cc:cf:99:03:10:1f:33:db:cc: ba:4f:ec:2d:45:db:96:61:f3:8c:ff:0c:17:a1:7e: 76:91:fc:52:2e:db:df:72:98:3f:a0:24:7e:5a:85: 99:61:5d:6e:e0:b5:04:96:b6:c7:af:af:c7:25:74: f6:34:f3:f1:fb:6c:b1:fc:e4:aa:f6:17:86:01:71: 8d:59:ad:17:82:16:2d:ed:b0:bf:86:e4:bc:dc:21: eb:d3:64:8c:f2:19:2a:23:3b:70:88:ea:bd:fa:56: 2a:fa:56:fa:d1:88:78:3a:43:ae:f5:e1:f7:df:49: ee:89:ba:20:ed:ac:fb:f9:7e:8e:b5:cf:71:64:b4: 92:57:28:e3:39:c7:13:88:68:21:86:ce:dd:db:f1: 6d:6c:71:3c:f0:d4:2f:f0:39:83:30:9e:b7:98:21: 5d:a5:99:23:ba:51:c6:00:9c:61:9a:bb:2b:1e:38: dc:c7:7e:85:49:72:94:07:89:fa:a3:1a:b7:f0:3d: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:50:6A:DC:ED:4A:62:0F:5F:D9:E6:F5:A6:BD:E0:A3:3A:DF:A3:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6a:f9:28:f0:00:ba:f0:e5:32:b3:f7:75:d5:3d:b2:0c:79: 79:bf:cd:ab:34:a8:58:a5:c3:e5:42:5a:0c:95:38:41:43:59: d1:89:ee:5e:c5:ba:9b:bd:7c:4b:ab:0c:d9:71:cb:16:d9:59: ac:17:8b:b9:3c:d6:a6:8a:ac:13:3d:95:d2:2d:1b:72:f0:36: 48:27:bd:04:9a:f9:7f:41:e9:cb:38:d7:a4:d8:bf:ee:73:16: 9f:ed:b8:a1:21:0e:6b:c3:54:18:1b:22:76:70:c5:9e:c2:da: 26:ad:21:56:3c:87:d3:54:ff:5c:a8:1b:43:a2:82:1e:a7:b5: 2a:6e:8a:fb:64:26:24:38:46:06:37:29:29:80:f8:4e:da:ff: 7c:4d:35:52:3c:61:f5:e7:ff:65:a1:46:ef:f5:20:8e:a3:2a: 0e:ab:a3:5b:e0:f0:b7:ca:96:1a:dd:fe:b0:e4:74:1e:ef:00: 4d:76:6f:8f:fb:2a:17:2a:58:b5:fe:0e:45:f5:ca:8b:c4:38: 39:3b:4c:5b:8b:b8:b2:0e:42:48:90:81:ca:e1:63:12:10:b6: da:f1:74:81:d4:62:da:12:8a:af:48:33:42:2f:2c:8c:63:ad: e4:8e:7c:3d:fa:18:90:64:04:5a:52:be:ca:b9:3a:13:04:a4: aa:b4:65:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwB/tXu95G25LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MTMwODRmMmItY2Y1Ny00YjEzLWJkNzEtYmFmM2VmZmJkODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDiFZfTA2YlLANrrc9kY9jLmQGDl05WyFujL Lbz1YGR8GhD33TvE1X1B9SNDiy0gPPG0aiEj5tSo3NiAGjp7mb/Mz5kDEB8z28y6 T+wtRduWYfOM/wwXoX52kfxSLtvfcpg/oCR+WoWZYV1u4LUElrbHr6/HJXT2NPPx +2yx/OSq9heGAXGNWa0XghYt7bC/huS83CHr02SM8hkqIztwiOq9+lYq+lb60Yh4 OkOu9eH330nuibog7az7+X6Otc9xZLSSVyjjOccTiGghhs7d2/FtbHE88NQv8DmD MJ63mCFdpZkjulHGAJxhmrsrHjjcx36FSXKUB4n6oxq38D0c9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtQatztSmIPX9nm9aa94KM636MIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQwNmY3MDctNDQyZS0z MWI3LWEzYWQtMGUxNThhN2YxMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgBGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNq+SjwALrw5TKz93XVPbIMeXm/zas0qFilw+VCWgyVOEFDWdGJ7l7F upu9fEurDNlxyxbZWawXi7k81qaKrBM9ldItG3LwNkgnvQSa+X9B6cs416TYv+5z Fp/tuKEhDmvDVBgbInZwxZ7C2iatIVY8h9NU/1yoG0Oigh6ntSpuivtkJiQ4RgY3 KSmA+E7a/3xNNVI8YfXn/2WhRu/1II6jKg6ro1vg8LfKlhrd/rDkdB7vAE12b4/7 KhcqWLX+DkX1yovEODk7TFuLuLIOQkiQgcrhYxIQttrxdIHUYtoSiq9IM0IvLIxj reSOfD36GJBkBFpSvsq5OhMEpKq0ZfE= -----END CERTIFICATE-----Generated at Sat Jun 13 21:00:53 2026 by rpki-client