$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa File: d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa (raw, json) Hash identifier: LZ2Bj3OROnqkn1m+iRKchEEY9zvKFZIx4MTE2DjHOvk= Subject key identifier: CF:99:5C:0C:7B:8A:C9:4B:CD:D7:A9:CE:E4:9E:52:4A:49:35:96:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E147EE156302CF346FDD4AAF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 66.19.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:e1:56:30:2c:f3:46:fd:d4:aa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=1c61a3e8-c9d2-497f-8100-2e5c1c48ba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:08:f2:58:5f:22:74:d3:90:3d:df:8a:37: 54:5a:0e:e0:bc:1d:49:24:61:26:1d:e7:80:c9:fe: af:cf:7c:79:90:05:00:57:2f:dc:91:33:3b:54:5f: 2b:a0:f7:e2:a0:98:b1:68:62:48:d7:27:96:c5:b1: d6:a7:f8:80:5c:72:a0:0c:e4:56:5d:cd:5d:df:4d: 65:a7:bc:f1:64:6b:ba:f0:c2:b4:01:2f:f2:bf:08: bc:a5:9a:94:88:8a:a8:19:d1:04:79:84:e8:6b:73: e6:36:11:4c:ab:62:ea:64:d5:34:2f:b5:92:b5:e6: 7f:0f:33:f4:ac:d9:e3:d4:fe:4a:ee:4c:5f:ff:21: 31:83:1c:fd:ab:47:3d:b8:b1:47:92:b2:f4:fb:f4: 6b:bd:45:f9:c8:1b:0a:a8:05:42:f2:37:87:7c:0c: bd:24:a1:ba:1e:c3:1e:5e:82:b8:b8:96:54:85:85: b9:b5:55:11:43:78:ea:f3:c3:3b:3d:e0:be:88:ee: a5:5c:d5:4b:40:21:ac:ba:9b:2d:9e:ed:6e:91:3b: fa:0c:86:35:4a:78:4c:92:e6:ec:a9:1c:4d:02:ae: ed:3b:fd:13:ae:a2:a7:12:9b:07:b4:e3:3f:3b:d6: cf:1c:ec:26:d5:f9:5f:61:14:d8:d2:ef:38:99:22: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:99:5C:0C:7B:8A:C9:4B:CD:D7:A9:CE:E4:9E:52:4A:49:35:96:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ab:32:da:8b:83:c1:61:cb:9c:a6:0f:b7:47:c8:ff:ba:01: e7:0e:ff:c4:ff:b4:8a:71:31:41:a3:57:fa:37:c8:aa:da:87: 06:2b:fa:2f:31:57:11:47:90:32:0f:72:69:76:68:ae:e3:7a: 5f:bf:ea:e9:3c:c3:5c:09:6e:91:84:5e:0f:ec:6e:82:80:e4: 21:c1:23:72:69:b9:7f:11:9d:d1:e4:18:5e:80:7e:87:ef:da: 9d:ec:62:8d:59:12:71:64:4d:a8:c3:85:08:54:91:b8:da:f7: 57:dd:ea:d2:8b:53:6e:a3:1a:65:b9:2f:9e:1a:da:dd:7b:e4: c4:fc:1e:ac:a2:b6:c7:6e:a1:ed:e5:ab:f3:96:c4:5e:c8:34: 6b:63:d2:6e:12:19:7a:c8:a8:fb:64:40:f1:d5:9d:bb:fa:eb: 20:42:9e:b1:03:7c:eb:5d:38:5e:d6:0e:f4:87:56:fe:8c:9d: b6:65:2f:cc:c5:55:64:00:3d:64:54:d0:7a:da:dd:52:51:7b: 21:4c:cf:48:37:62:da:df:19:03:a8:c3:3c:54:76:c4:ec:63: d8:b2:e9:21:b4:4b:1e:d0:53:af:23:6a:e3:fc:a2:3d:db:be: ce:4c:7a:6f:34:e5:78:2a:bb:c2:62:ea:cc:ee:b5:e4:e0:16: b5:a2:99:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UfuFWMCzzRv3UqvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk MWM2MWEzZTgtYzlkMi00OTdmLTgxMDAtMmU1YzFjNDhiYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsAI8lhfInTTkD3fijdUWg7gvB1JJGEmHeeA yf6vz3x5kAUAVy/ckTM7VF8roPfioJixaGJI1yeWxbHWp/iAXHKgDORWXc1d301l p7zxZGu68MK0AS/yvwi8pZqUiIqoGdEEeYToa3PmNhFMq2LqZNU0L7WSteZ/DzP0 rNnj1P5K7kxf/yExgxz9q0c9uLFHkrL0+/RrvUX5yBsKqAVC8jeHfAy9JKG6HsMe XoK4uJZUhYW5tVURQ3jq88M7PeC+iO6lXNVLQCGsupstnu1ukTv6DIY1SnhMkubs qRxNAq7tO/0TrqKnEpsHtOM/O9bPHOwm1flfYRTY0u84mSIUYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+ZXAx7islLzdepzuSeUkpJNZYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg5ZTkwNDYtOTJjZS0z YzRkLTk1YTktNGUwNTc0YTk2OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGrMtqLg8Fhy5ymD7dHyP+6AecO/8T/tIpxMUGjV/o3yKrahwYr+i8x VxFHkDIPcml2aK7jel+/6uk8w1wJbpGEXg/sboKA5CHBI3JpuX8RndHkGF6Afofv 2p3sYo1ZEnFkTajDhQhUkbja91fd6tKLU26jGmW5L54a2t175MT8Hqyitsduoe3l q/OWxF7INGtj0m4SGXrIqPtkQPHVnbv66yBCnrEDfOtdOF7WDvSHVv6MnbZlL8zF VWQAPWRU0Hra3VJReyFMz0g3YtrfGQOowzxUdsTsY9iy6SG0Sx7QU68jauP8oj3b vs5Mem805Xgqu8Ji6szuteTgFrWimeI= -----END CERTIFICATE-----Generated at Sat Jun 13 06:01:52 2026 by rpki-client