$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa File: ecfb9210-26d0-385b-979e-e9e75e5f5103.roa (raw, json) Hash identifier: NbzgokaUIx+yWIU2eZfybNT0XF5EJyNxFEj6J9uHQDw= Subject key identifier: 20:6D:18:09:2B:4C:E2:50:99:53:5F:5F:53:A3:AE:39:13:9D:81:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E1E4477FB894C8266087ADEFC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 67.214.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:77:fb:89:4c:82:66:08:7a:de:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=8ae9fca8-77f5-4a9f-b056-0c228092bb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:12:37:d3:8b:1d:8d:cc:c3:a5:cc:20:76: 01:7e:94:cb:a6:01:92:05:86:90:95:4e:f1:75:90: 8f:2f:24:dd:9d:fe:d6:68:f7:3a:86:db:c1:e9:d6: bd:4a:a7:51:95:d4:a1:4a:70:c6:5c:7c:dd:5c:70: 29:d4:91:04:46:b7:e4:39:02:c1:67:fa:b9:07:01: b6:60:b2:38:e4:43:7b:52:6e:bb:70:ff:b8:68:fc: b7:94:9b:e0:fd:a4:d6:36:00:b6:bb:c0:57:2d:33: 73:c8:cd:28:22:60:35:c7:58:09:f6:ee:6c:ae:95: 1d:15:fe:68:5e:93:fd:44:3f:df:06:37:31:8f:b3: c7:ac:a9:6a:dd:65:d8:2a:52:ac:7c:ee:21:d8:8a: 59:f7:fe:e2:3a:aa:cf:0d:d1:c3:f0:38:aa:f2:3b: dd:e9:73:05:31:16:fe:81:50:3c:7e:02:15:08:f2: 10:33:42:46:14:1e:08:93:00:f6:92:c6:20:9b:79: 4f:01:a2:f8:d4:a4:84:8c:6a:50:9b:00:51:28:b7: 49:ad:2e:05:82:70:4c:c9:20:68:59:2e:37:10:bc: 4c:49:54:af:fd:cd:26:7a:a3:8d:cc:dd:f0:cf:68: a4:18:0e:b9:17:4d:52:1e:0a:44:46:6c:db:93:3b: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6D:18:09:2B:4C:E2:50:99:53:5F:5F:53:A3:AE:39:13:9D:81:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.214.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:04:11:e7:7b:f9:1e:44:23:c1:e9:c6:bd:5f:09:18:d7:96: ca:d6:95:f1:08:e5:6f:33:f5:e3:45:9a:bf:66:9c:87:d6:04: 04:65:1e:43:fd:b9:28:83:84:80:16:dd:f7:02:90:bf:39:f8: 90:28:2a:d5:c0:9b:f4:c3:61:b0:9b:12:54:13:89:89:76:f8: fa:1f:60:76:9a:f5:31:0e:d3:ef:3c:e2:5f:02:1e:5c:a6:8f: 81:3c:a1:7c:92:01:9e:72:f9:55:5f:c2:d0:c2:f2:fa:b1:f7: a2:19:45:ed:bf:c3:0c:4d:00:9b:c1:bd:e6:32:b4:d9:2d:ef: 42:54:f0:d7:02:24:15:65:b7:f4:5e:9f:94:a8:d6:9f:c1:06: 43:5f:47:82:d3:f4:10:2a:f0:ae:d8:da:b5:f4:22:0b:fe:56: 91:03:78:6e:fd:4e:94:c1:f8:61:fc:c0:c3:ea:9f:03:92:bf: 25:75:6f:8e:68:db:05:49:5f:b4:7b:77:c1:89:c7:c0:3d:7d: 8e:c0:37:c0:73:94:f7:f6:12:4f:50:cb:ee:30:d4:d1:44:73: 14:3c:e2:f8:e7:ad:4e:3d:60:78:e7:06:b3:9c:dc:bd:b2:d3: d4:74:60:f7:eb:a7:20:e6:7e:ae:fb:47:75:0c:23:10:bd:c2: cc:46:a9:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRHf7iUyCZgh63vwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk OGFlOWZjYTgtNzdmNS00YTlmLWIwNTYtMGMyMjgwOTJiYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOoSN9OLHY3Mw6XMIHYBfpTLpgGSBYaQlU7x dZCPLyTdnf7WaPc6htvB6da9SqdRldShSnDGXHzdXHAp1JEERrfkOQLBZ/q5BwG2 YLI45EN7Um67cP+4aPy3lJvg/aTWNgC2u8BXLTNzyM0oImA1x1gJ9u5srpUdFf5o XpP9RD/fBjcxj7PHrKlq3WXYKlKsfO4h2IpZ9/7iOqrPDdHD8Diq8jvd6XMFMRb+ gVA8fgIVCPIQM0JGFB4IkwD2ksYgm3lPAaL41KSEjGpQmwBRKLdJrS4FgnBMySBo WS43ELxMSVSv/c0meqONzN3wz2ikGA65F01SHgpERmzbkzsnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBtGAkrTOJQmVNfX1OjrjkTnYHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNmYjkyMTAtMjZkMC0z ODViLTk3OWUtZTllNzVlNWY1MTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4EEed7+R5EI8Hpxr1fCRjXlsrWlfEI5W8z9eNFmr9mnIfWBARlHkP9 uSiDhIAW3fcCkL85+JAoKtXAm/TDYbCbElQTiYl2+PofYHaa9TEO0+884l8CHlym j4E8oXySAZ5y+VVfwtDC8vqx96IZRe2/wwxNAJvBveYytNkt70JU8NcCJBVlt/Re n5So1p/BBkNfR4LT9BAq8K7Y2rX0Igv+VpEDeG79TpTB+GH8wMPqnwOSvyV1b45o 2wVJX7R7d8GJx8A9fY7AN8BzlPf2Ek9Qy+4w1NFEcxQ84vjnrU49YHjnBrOc3L2y 09R0YPfrpyDmfq77R3UMIxC9wsxGqTU= -----END CERTIFICATE-----Generated at Sat Jun 13 13:35:59 2026 by rpki-client