$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d253f950-d9ce-3513-90d5-e8256b0c4b40.roa File: d253f950-d9ce-3513-90d5-e8256b0c4b40.roa (raw, json) Hash identifier: nbTGe21Ezej/mvbQGl9tbLKpnJtQnFIapDXqfreOupc= Subject key identifier: C0:37:27:0E:48:C0:4D:EB:EE:42:52:4B:6B:E5:6F:A7:BC:97:A4:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F229929EC3ED9C5055400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d253f950-d9ce-3513-90d5-e8256b0c4b40.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 69.66.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:22:99:29:ec:3e:d9:c5:05:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=0d76613e-9185-44ca-bbfe-a402aac08102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:4d:dc:48:38:6c:39:2d:6f:4e:bf:bc:01: 0b:f6:0b:11:16:3a:8b:cd:b2:5a:0b:2a:77:7a:6b: 9e:87:0a:06:33:92:ed:02:12:11:c8:da:a4:9c:1f: ac:7e:b9:f5:54:e2:94:80:6f:a1:de:63:8e:5e:c9: 84:d3:e9:79:f8:e7:6c:2f:3f:e6:3a:82:8f:7c:dd: 26:75:56:ff:30:08:04:6c:4a:e9:d9:82:fb:6f:89: 8a:36:b1:98:2c:ab:1c:5c:29:8e:20:7c:d0:02:6e: b3:b0:d3:08:f4:ef:63:2b:f8:3d:0e:08:1d:84:e2: d0:6f:5a:db:4a:f7:44:28:a7:ae:3c:3a:98:a3:00: 4f:39:b7:b2:fd:62:b1:5a:e3:a1:41:57:77:e2:78: b4:e9:ff:dc:5c:a7:95:50:d4:7c:ec:df:f4:4b:33: 30:55:3d:9c:b1:51:8e:54:3b:cd:2a:1c:07:28:18: c7:97:81:80:c6:02:b6:a3:a3:b7:11:4d:20:60:12: 93:83:fb:5c:fd:7b:2e:c7:60:13:fd:39:62:1a:c3: d0:d4:36:93:31:7d:12:6a:3b:43:23:d7:9a:6b:d1: 57:8b:e6:48:d8:24:16:bf:75:68:5a:e1:72:df:a8: 61:49:91:7e:70:fe:8d:02:c9:8e:1f:5b:95:61:59: 38:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:37:27:0E:48:C0:4D:EB:EE:42:52:4B:6B:E5:6F:A7:BC:97:A4:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d253f950-d9ce-3513-90d5-e8256b0c4b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c4:51:d8:a4:d0:02:b4:3c:4a:12:5a:d6:6a:dc:59:91:84: 16:23:8a:6e:75:01:f3:cc:91:66:a7:9c:7c:33:48:bb:b0:41: 5e:cd:2e:5b:52:e2:cf:e5:98:42:54:6d:40:f5:3a:53:82:b1: ed:ee:a5:37:81:ee:79:12:bf:ae:34:53:9d:87:3c:8b:21:a8: 0e:a1:a4:a7:40:50:7a:35:e3:b2:70:97:a1:59:79:95:4b:46: 8c:09:b0:5a:88:d0:a8:85:43:66:77:1e:00:74:ba:0f:8c:03: aa:43:62:ed:6c:59:58:f1:9c:dc:8a:2d:39:7e:4c:be:b5:f9: 00:91:37:30:7e:bb:5b:ff:80:8c:30:97:9d:f2:82:37:da:e8: 1f:52:46:d6:79:63:38:83:9d:24:4a:82:6e:35:f2:25:97:fc: de:a5:92:10:8d:d1:9d:ac:85:e0:40:ac:45:1c:6d:0d:d8:9f: de:97:c7:e9:c7:65:71:5a:45:82:45:c1:fb:68:31:59:ad:05: 1d:49:72:24:1d:ae:bb:9c:51:07:85:0a:e0:9b:0c:41:2e:d8: f7:f7:b9:a2:21:e6:f6:bb:4a:f0:41:e1:24:5b:21:38:0a:61: 30:7d:61:d2:8a:49:17:3d:84:8f:bb:4a:9d:32:d6:ae:55:0d: e5:fc:42:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyKZKew+2cUFVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MGQ3NjYxM2UtOTE4NS00NGNhLWJiZmUtYTQwMmFhYzA4MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIxN3Eg4bDktb06/vAEL9gsRFjqLzbJaCyp3 emuehwoGM5LtAhIRyNqknB+sfrn1VOKUgG+h3mOOXsmE0+l5+OdsLz/mOoKPfN0m dVb/MAgEbErp2YL7b4mKNrGYLKscXCmOIHzQAm6zsNMI9O9jK/g9DggdhOLQb1rb SvdEKKeuPDqYowBPObey/WKxWuOhQVd34ni06f/cXKeVUNR87N/0SzMwVT2csVGO VDvNKhwHKBjHl4GAxgK2o6O3EU0gYBKTg/tc/Xsux2AT/TliGsPQ1DaTMX0SajtD I9eaa9FXi+ZI2CQWv3VoWuFy36hhSZF+cP6NAsmOH1uVYVk4gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA3Jw5IwE3r7kJSS2vlb6e8l6TCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI1M2Y5NTAtZDljZS0z NTEzLTkwZDUtZTgyNTZiMGM0YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHEUdik0AK0PEoSWtZq3FmRhBYjim51AfPMkWannHwzSLuwQV7NLltS 4s/lmEJUbUD1OlOCse3upTeB7nkSv640U52HPIshqA6hpKdAUHo147Jwl6FZeZVL RowJsFqI0KiFQ2Z3HgB0ug+MA6pDYu1sWVjxnNyKLTl+TL61+QCRNzB+u1v/gIww l53ygjfa6B9SRtZ5YziDnSRKgm418iWX/N6lkhCN0Z2sheBArEUcbQ3Yn96Xx+nH ZXFaRYJFwftoMVmtBR1JciQdrrucUQeFCuCbDEEu2Pf3uaIh5va7SvBB4SRbITgK YTB9YdKKSRc9hI+7Sp0y1q5VDeX8QnI= -----END CERTIFICATE-----Generated at Sat Jun 13 05:59:33 2026 by rpki-client