$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d37cc881-fa56-3966-9eca-6b4b6a4edf5c.roa File: d37cc881-fa56-3966-9eca-6b4b6a4edf5c.roa (raw, json) Hash identifier: czXk+9NgM7Q1V1dTxwYYJAqplv58hTtDj3l9EQPDa4Q= Subject key identifier: 53:55:5B:8B:B8:54:4D:D5:A7:68:D9:88:31:31:B2:B3:55:14:A3:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F17FED5A3A35F575251E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d37cc881-fa56-3966-9eca-6b4b6a4edf5c.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 166.102.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:17:fe:d5:a3:a3:5f:57:52:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=2e3f2e8b-946a-481f-9890-d236ff8d34cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:1d:66:8a:9e:11:50:e0:4d:6e:0a:c2:68: 7e:5c:be:34:1b:59:9e:15:7b:2d:fa:85:ac:d9:0f: d1:40:2b:ef:be:22:51:0b:31:cb:10:d8:de:e6:68: 35:39:02:01:14:af:f9:a6:44:6f:35:c8:0c:a2:65: 71:5e:c3:c7:91:76:98:87:d0:72:43:e2:93:cb:63: 74:20:42:3e:4a:ba:1d:71:20:0d:e8:84:48:b9:1c: 13:1d:6c:7d:17:55:30:0d:f6:f6:6b:1a:81:51:04: 46:32:09:6d:45:2c:1b:a3:dc:e1:67:d6:5f:0c:e1: 27:b3:6a:29:08:16:cf:7a:3f:5c:a5:d3:16:ee:4b: 8b:1a:69:81:14:af:ba:97:5c:f7:26:8c:f2:2f:3d: 17:a0:f7:22:dc:20:11:79:0d:c8:44:65:53:d1:31: 77:2f:32:02:59:0b:f2:0d:a8:bb:85:f8:b4:bf:db: b1:6a:e7:64:bf:87:4b:fd:c9:d3:82:2c:d7:61:91: 7d:2f:a8:60:a1:00:c3:e1:fc:5c:e4:8d:e4:05:68: 89:26:9f:99:4a:5f:f5:df:e6:a6:a5:6d:7a:ce:a6: 02:06:2e:a8:4f:e9:b9:78:12:5c:d6:22:ae:36:35: 9c:9f:1d:66:77:92:dc:a2:2b:29:6e:6f:3d:c4:89: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:55:5B:8B:B8:54:4D:D5:A7:68:D9:88:31:31:B2:B3:55:14:A3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d37cc881-fa56-3966-9eca-6b4b6a4edf5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:04:cd:d1:5b:4a:a7:62:f8:41:19:6c:49:8f:a0:6c:6d:16: 13:9e:e9:59:db:52:7a:a5:35:89:39:7b:67:68:4f:e3:81:12: 72:a9:03:2b:02:94:44:a7:e3:18:99:b3:6a:dc:ef:50:d5:65: d0:9b:17:f0:84:e5:7d:c9:b4:6d:12:d3:85:98:d6:8e:5c:70: 3e:de:e1:fd:46:1b:5a:12:dd:32:dd:77:cc:91:d5:be:fc:18: c6:c4:6a:ab:a0:8f:1f:5d:2f:50:c6:7c:e8:65:31:9d:35:e9: 99:f3:eb:71:bb:a7:81:88:eb:c5:bf:c7:6e:06:3c:26:01:74: d1:ca:72:e9:78:97:c2:8a:c3:5a:b0:de:f4:a7:40:39:fc:41: 9d:68:f3:5e:4f:88:67:b1:64:ec:0d:35:38:32:f2:9b:74:c3: 37:f5:21:80:4e:17:da:1b:48:4f:1a:b7:92:a9:8f:09:20:3a: 0c:fd:dd:c9:cc:4f:43:3d:d3:a3:4e:3f:c7:b3:33:42:9d:d6: a0:dd:54:d3:57:81:bb:aa:b1:da:43:99:0a:85:6f:0f:3f:bd: 8d:bf:72:2f:79:02:0f:0f:e2:1b:1e:cd:fa:c3:eb:7d:9c:b9: 4f:db:97:b4:4c:ae:22:92:72:f3:e0:35:e8:df:41:e9:98:28: 47:78:15:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxf+1aOjX1dSUeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MmUzZjJlOGItOTQ2YS00ODFmLTk4OTAtZDIzNmZmOGQzNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzksdZoqeEVDgTW4Kwmh+XL40G1meFXst+oWs 2Q/RQCvvviJRCzHLENje5mg1OQIBFK/5pkRvNcgMomVxXsPHkXaYh9ByQ+KTy2N0 IEI+SrodcSAN6IRIuRwTHWx9F1UwDfb2axqBUQRGMgltRSwbo9zhZ9ZfDOEns2op CBbPej9cpdMW7kuLGmmBFK+6l1z3JozyLz0XoPci3CAReQ3IRGVT0TF3LzICWQvy Dai7hfi0v9uxaudkv4dL/cnTgizXYZF9L6hgoQDD4fxc5I3kBWiJJp+ZSl/13+am pW16zqYCBi6oT+m5eBJc1iKuNjWcnx1md5Lcoispbm89xIlQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNVW4u4VE3Vp2jZiDExsrNVFKMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDM3Y2M4ODEtZmE1Ni0z OTY2LTllY2EtNmI0YjZhNGVkZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUEzdFbSqdi+EEZbEmPoGxtFhOe6VnbUnqlNYk5e2doT+OBEnKpAysC lESn4xiZs2rc71DVZdCbF/CE5X3JtG0S04WY1o5ccD7e4f1GG1oS3TLdd8yR1b78 GMbEaqugjx9dL1DGfOhlMZ016Znz63G7p4GI68W/x24GPCYBdNHKcul4l8KKw1qw 3vSnQDn8QZ1o815PiGexZOwNNTgy8pt0wzf1IYBOF9obSE8at5KpjwkgOgz93cnM T0M906NOP8ezM0Kd1qDdVNNXgbuqsdpDmQqFbw8/vY2/ci95Ag8P4hsezfrD632c uU/bl7RMriKScvPgNejfQemYKEd4FfA= -----END CERTIFICATE-----Generated at Sat Jun 13 17:03:21 2026 by rpki-client