$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa File: cff704e6-6037-3379-841b-631795dec5ac.roa (raw, json) Hash identifier: sx8ppVnNAqMqTkvsJsp4bzQYFYp2EcDSl/Ek0uCEnKc= Subject key identifier: 14:8F:8D:13:15:E3:43:40:D7:C1:95:F1:69:F2:E7:68:29:1D:E0:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D8429FC0EB27DE98AB3B340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 67.140.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:29:fc:0e:b2:7d:e9:8a:b3:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=d193b213-8aac-492c-975b-bccf2a12cedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:31:73:fc:3b:d0:b7:65:28:f7:24:09:f0:4b: 76:fb:4d:1d:af:24:e8:4a:ca:16:1a:65:31:15:dd: 09:32:27:64:3a:c9:1f:ac:63:ed:c9:fb:54:66:f4: 64:86:95:3a:23:20:1c:a4:ce:16:a9:56:81:8b:b7: d1:e8:a4:b0:fb:13:e2:f8:be:e9:54:96:37:8c:8f: d9:8e:53:9a:4e:2d:40:38:ab:77:e2:8f:b7:4b:4d: a8:f6:26:e7:dc:70:15:af:50:cc:a6:7c:dd:e6:23: 8d:a4:66:ad:a1:f5:2f:76:7f:85:4e:28:3d:a2:98: f8:64:59:27:33:1e:84:ab:f4:8c:17:8d:8a:ae:f4: 33:25:61:57:ad:56:d4:27:1d:86:78:5f:c9:40:fc: e8:94:37:da:03:ce:34:b3:46:de:84:ab:e3:22:cf: 34:5a:be:34:6f:25:ce:e5:ae:60:61:07:16:43:62: 95:39:68:6d:64:9c:97:c8:56:b3:b8:8f:99:27:5d: e6:c2:ee:63:1e:d9:ed:60:c2:ad:7d:fe:f0:45:ed: f4:ef:a5:2b:70:69:cc:69:61:87:3f:86:ac:f6:83: de:a1:94:6b:b6:b7:40:c7:8d:00:3a:0a:ff:bc:1f: 9a:12:1e:cf:ad:cb:97:8c:58:69:c1:b8:92:a3:f7: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8F:8D:13:15:E3:43:40:D7:C1:95:F1:69:F2:E7:68:29:1D:E0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c3:71:18:90:9e:42:10:e0:1a:3d:b6:7b:3e:06:62:3b:25: be:81:9e:73:a6:1d:76:59:a2:2c:07:b3:93:6f:ed:a4:35:43: be:4d:72:2c:a2:39:53:aa:df:f6:87:4f:3e:ac:ed:90:c2:4e: c0:d3:63:ce:0e:d8:44:25:59:1f:1a:e9:cf:e8:fb:38:8f:07: 0e:96:b6:b3:44:b4:4c:d7:11:b5:ff:a5:10:18:98:a2:ba:88: f2:e7:a7:9f:87:a2:cc:0b:a6:d8:c7:45:c3:13:6a:7d:c9:b0: 42:24:fb:bc:40:c3:88:db:a5:a1:61:34:61:ac:4f:43:5e:52: a0:53:b4:2a:1f:c2:33:36:c4:6b:2d:d8:7c:80:75:4c:9e:df: 9e:ce:60:09:40:c2:70:05:5d:b1:c1:57:a7:3f:72:c0:2c:20: e0:b3:d6:46:d2:37:cf:77:ec:04:e6:88:e2:85:b5:70:ea:d9: 77:db:d4:74:c1:a2:78:e9:b4:5b:ec:ef:bb:21:30:e1:34:fe: 58:49:7f:42:41:2b:52:3a:c9:92:f8:b2:04:b3:ad:3b:19:18: fa:9b:0d:e2:3c:0d:52:4c:0e:a8:18:24:4e:ae:ac:4b:92:dd: 9e:73:62:1b:b9:13:9f:7e:45:e9:28:80:d7:db:a4:13:b6:be: 2d:35:6e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCn8DrJ96Yqzs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZDE5M2IyMTMtOGFhYy00OTJjLTk3NWItYmNjZjJhMTJjZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DFz/DvQt2Uo9yQJ8Et2+00dryToSsoWGmUx Fd0JMidkOskfrGPtyftUZvRkhpU6IyAcpM4WqVaBi7fR6KSw+xPi+L7pVJY3jI/Z jlOaTi1AOKt34o+3S02o9ibn3HAVr1DMpnzd5iONpGatofUvdn+FTig9opj4ZFkn Mx6Eq/SMF42KrvQzJWFXrVbUJx2GeF/JQPzolDfaA840s0behKvjIs80Wr40byXO 5a5gYQcWQ2KVOWhtZJyXyFazuI+ZJ13mwu5jHtntYMKtff7wRe3076UrcGnMaWGH P4as9oPeoZRrtrdAx40AOgr/vB+aEh7PrcuXjFhpwbiSo/de4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSPjRMV40NA18GV8Wny52gpHeD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2ZmNzA0ZTYtNjAzNy0z Mzc5LTg0MWItNjMxNzk1ZGVjNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDDcRiQnkIQ4Bo9tns+BmI7Jb6BnnOmHXZZoiwHs5Nv7aQ1Q75Nciyi OVOq3/aHTz6s7ZDCTsDTY84O2EQlWR8a6c/o+ziPBw6WtrNEtEzXEbX/pRAYmKK6 iPLnp5+HoswLptjHRcMTan3JsEIk+7xAw4jbpaFhNGGsT0NeUqBTtCofwjM2xGst 2HyAdUye357OYAlAwnAFXbHBV6c/csAsIOCz1kbSN8937ATmiOKFtXDq2Xfb1HTB onjptFvs77shMOE0/lhJf0JBK1I6yZL4sgSzrTsZGPqbDeI8DVJMDqgYJE6urEuS 3Z5zYhu5E59+RekogNfbpBO2vi01bpg= -----END CERTIFICATE-----Generated at Sat Jun 13 19:15:39 2026 by rpki-client