$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa File: d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa (raw, json) Hash identifier: sbYe+IAYzXUhwzuT6h3S+cHkDSmR70g+dAQPtvZ7T1E= Subject key identifier: 12:82:72:F8:8D:7E:F7:50:39:93:F1:2F:5A:87:BB:46:D6:F3:4E:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F13D2E5B8C93B26E4C740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 64.61.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:13:d2:e5:b8:c9:3b:26:e4:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=3d6ae975-a1cf-413b-a776-7bb9b53cd0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:91:6e:b8:b2:59:0c:c2:44:ff:ca:9d:a9: 57:e2:c5:c9:ef:1a:f8:60:47:6d:0b:9c:f7:9a:2f: a2:79:b5:15:ca:d6:e8:db:57:9b:cf:cf:2d:55:7a: 1b:6f:d7:a9:aa:f6:cb:08:b2:28:ef:74:a4:79:86: 52:b0:f9:09:b3:3e:2e:54:a1:04:05:50:f9:91:ac: 22:9b:f9:49:49:17:bd:76:9a:17:a5:69:d3:bf:0f: 3e:74:cb:c1:b0:df:66:04:7e:ee:d2:db:c8:cd:f0: a8:f2:56:28:47:c1:42:43:72:65:4f:58:0d:61:49: 4d:ad:ce:86:08:6b:e6:3a:16:78:1b:94:c5:a9:94: c8:69:7c:af:ad:9f:cd:7b:6c:46:f9:66:fa:e0:67: 4e:b5:79:0b:08:32:08:70:48:e6:60:69:19:ce:07: 0f:ce:00:a7:28:17:d8:6a:bf:f7:4c:12:cd:49:88: cb:74:2b:c8:3d:f2:61:75:4a:4a:ac:9f:c7:4c:47: a3:93:39:15:61:00:e5:ba:d3:e3:3a:f3:97:8e:14: 57:d4:8b:a6:41:a7:63:67:0f:aa:00:cb:54:5a:f0: ac:94:cc:c3:f1:90:73:9a:3d:7c:f1:14:50:8a:30: e2:22:cc:ae:a6:53:60:b4:dc:cd:35:b5:c0:d2:65: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:82:72:F8:8D:7E:F7:50:39:93:F1:2F:5A:87:BB:46:D6:F3:4E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.61.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:89:14:ea:53:b8:6b:a7:11:f8:66:67:a0:a9:73:2d:7d:53: 42:6a:d0:d2:a2:9f:32:e7:b9:81:38:87:75:e9:04:da:31:7a: f1:d5:39:29:16:8a:a0:2b:55:51:fe:b8:2a:ea:b8:e9:ce:c0: d5:65:4e:55:3c:52:3f:67:af:99:98:20:4a:3c:a4:6d:34:89: e0:d7:30:a5:9c:fd:98:79:32:38:26:fc:2f:3f:1c:1d:ef:28: 78:0e:97:8a:97:c8:48:c4:72:94:55:33:d0:20:b3:50:37:8c: 52:e6:b4:41:53:13:db:2b:48:7c:c8:53:ce:bb:3e:f2:3a:21: 04:b0:d5:47:7f:92:74:11:e7:76:57:d6:86:69:dd:d4:c7:7e: a8:11:81:a2:e1:39:13:bd:0a:15:c0:54:1e:f6:ba:58:aa:c5: 07:64:70:e2:94:20:0c:0a:a7:82:ec:08:34:3e:e6:ef:f7:36: e6:aa:6b:01:a9:d5:f0:37:32:04:10:63:e8:1e:a8:3a:fb:bb: bd:c3:9e:64:83:16:d2:74:8b:1b:91:13:e1:52:92:1e:21:0e: aa:13:a2:b4:14:1c:36:75:e4:ed:bc:85:ca:c3:84:34:7d:64: 24:ac:8d:81:83:06:96:91:72:6e:c2:47:e1:c1:f3:1e:7e:40: e1:5a:f0:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxPS5bjJOybkx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk M2Q2YWU5NzUtYTFjZi00MTNiLWE3NzYtN2JiOWI1M2NkMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsKRbriyWQzCRP/KnalX4sXJ7xr4YEdtC5z3 mi+iebUVytbo21ebz88tVXobb9epqvbLCLIo73SkeYZSsPkJsz4uVKEEBVD5kawi m/lJSRe9dpoXpWnTvw8+dMvBsN9mBH7u0tvIzfCo8lYoR8FCQ3JlT1gNYUlNrc6G CGvmOhZ4G5TFqZTIaXyvrZ/Ne2xG+Wb64GdOtXkLCDIIcEjmYGkZzgcPzgCnKBfY ar/3TBLNSYjLdCvIPfJhdUpKrJ/HTEejkzkVYQDlutPjOvOXjhRX1IumQadjZw+q AMtUWvCslMzD8ZBzmj188RRQijDiIsyuplNgtNzNNbXA0mWGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKCcviNfvdQOZPxL1qHu0bW805FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDY4ZTRmOGYtYTU3ZC0z MjU5LWE2ZGUtYTQ3ZGFiM2ZlMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQD2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSJFOpTuGunEfhmZ6Cpcy19U0Jq0NKinzLnuYE4h3XpBNoxevHVOSkW iqArVVH+uCrquOnOwNVlTlU8Uj9nr5mYIEo8pG00ieDXMKWc/Zh5Mjgm/C8/HB3v KHgOl4qXyEjEcpRVM9Ags1A3jFLmtEFTE9srSHzIU867PvI6IQSw1Ud/knQR53ZX 1oZp3dTHfqgRgaLhORO9ChXAVB72uliqxQdkcOKUIAwKp4LsCDQ+5u/3NuaqawGp 1fA3MgQQY+geqDr7u73DnmSDFtJ0ixuRE+FSkh4hDqoTorQUHDZ15O28hcrDhDR9 ZCSsjYGDBpaRcm7CR+HB8x5+QOFa8Ds= -----END CERTIFICATE-----Generated at Sat Jun 13 06:00:58 2026 by rpki-client