$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa File: f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa (raw, json) Hash identifier: 8hpYDT/vK2KLjclbxgPqFawUN4B0yZKy2utgXlFZZZo= Subject key identifier: 17:4F:9E:58:D0:2E:5E:82:10:8B:92:D0:AE:3E:75:D2:51:FF:94:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F03D7A934FF7168325D60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 67.224.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:03:d7:a9:34:ff:71:68:32:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=071e2bbf-62f5-44d5-b5cf-75ca0104447c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:00:f4:b3:d6:6f:68:a0:4f:e4:5b:f9:b9: 7d:76:fc:fa:fd:54:65:13:81:c8:aa:5a:23:85:11: ad:c4:ac:99:95:b3:b4:32:b0:01:e4:f6:f6:14:e3: 31:cc:00:2b:8d:64:36:82:8b:a5:d0:30:32:a4:9a: 2a:7b:8a:07:23:12:98:06:3c:7a:cf:ff:e6:4f:b2: fa:e0:3d:6d:87:ce:96:05:83:dc:35:b9:37:b3:d4: 43:40:7f:4c:cb:6e:cf:79:fa:f0:e0:79:d7:89:78: df:e1:a5:6d:cd:c9:b0:4a:5a:54:ed:33:ce:3e:b0: 7b:15:d9:02:2c:25:6c:70:db:dd:2e:37:02:a1:71: 37:67:83:17:23:8f:cd:fe:b4:a1:6e:a7:59:c1:61: 87:2f:e4:63:41:0e:d2:94:cd:8b:6c:46:8d:f4:d0: c5:b9:4d:4d:c8:4e:46:03:2a:38:69:08:d1:2a:16: ae:25:38:e5:0e:b6:41:04:0a:6e:44:e4:a7:d1:ca: 29:d9:38:df:6f:e6:23:69:a2:0f:c2:40:c6:7a:9e: 0f:fa:e9:8b:a4:73:e9:de:01:3d:c4:d7:4d:d1:f7: 64:18:0d:22:82:a8:21:83:a9:72:d3:99:84:94:59: 9c:54:b3:cd:3e:28:98:98:e4:c7:cf:24:df:e4:24: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4F:9E:58:D0:2E:5E:82:10:8B:92:D0:AE:3E:75:D2:51:FF:94:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:bb:a8:ca:1a:74:03:91:ce:7e:14:84:08:f6:1f:0d:91:a8: 9e:57:6e:56:42:43:5c:5d:ad:b9:dc:85:64:5c:0f:2a:85:51: 40:22:1a:2d:49:c3:14:d6:8c:78:24:26:c8:7e:1b:8e:48:66: e7:48:32:19:20:37:ba:71:b2:4c:46:d4:92:a5:51:f4:ca:5f: db:da:1e:6e:ca:53:c2:7a:b5:c3:0b:56:fb:a9:02:a0:43:e6: d6:02:72:59:19:dc:3f:13:c8:77:64:62:69:4d:52:f2:79:49: e7:0b:5e:42:3a:59:63:cb:09:90:69:d3:a9:3a:80:56:1e:00: ee:af:8e:05:7e:05:d0:ff:f9:1e:b8:88:e3:da:7a:6c:97:89: e4:b9:e3:2f:70:74:d6:53:9f:09:45:8e:39:48:d2:0d:56:92: bf:78:c5:d1:a8:44:53:c8:08:80:a2:1e:92:cf:ac:c5:af:11: 63:e8:0b:52:25:c2:7b:2e:56:ac:73:41:88:d1:18:fc:12:b2: e8:79:c3:3b:04:b0:f0:68:c0:dc:2e:d8:43:ba:a7:f9:f1:59: b3:d2:76:b2:d5:37:dd:ce:13:95:ca:8c:ec:e1:f8:6e:a4:b5: 34:93:75:6f:aa:80:dc:a8:d0:25:11:88:66:0c:9e:a6:c2:6d: 35:ca:b1:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwPXqTT/cWgyXWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MDcxZTJiYmYtNjJmNS00NGQ1LWI1Y2YtNzVjYTAxMDQ0NDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7sA9LPWb2igT+Rb+bl9dvz6/VRlE4HIqloj hRGtxKyZlbO0MrAB5Pb2FOMxzAArjWQ2goul0DAypJoqe4oHIxKYBjx6z//mT7L6 4D1th86WBYPcNbk3s9RDQH9My27Pefrw4HnXiXjf4aVtzcmwSlpU7TPOPrB7FdkC LCVscNvdLjcCoXE3Z4MXI4/N/rShbqdZwWGHL+RjQQ7SlM2LbEaN9NDFuU1NyE5G Ayo4aQjRKhauJTjlDrZBBApuROSn0cop2Tjfb+YjaaIPwkDGep4P+umLpHPp3gE9 xNdN0fdkGA0igqghg6ly05mElFmcVLPNPiiYmOTHzyTf5CQSgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdPnljQLl6CEIuS0K4+ddJR/5QoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjRjMjBmNjktODVkZS0z YjEyLWJiNmQtNWI0NTQ2OWIwZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+AQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe7qMoadAORzn4UhAj2Hw2RqJ5XblZCQ1xdrbnchWRcDyqFUUAiGi1J wxTWjHgkJsh+G45IZudIMhkgN7pxskxG1JKlUfTKX9vaHm7KU8J6tcMLVvupAqBD 5tYCclkZ3D8TyHdkYmlNUvJ5SecLXkI6WWPLCZBp06k6gFYeAO6vjgV+BdD/+R64 iOPaemyXieS54y9wdNZTnwlFjjlI0g1Wkr94xdGoRFPICICiHpLPrMWvEWPoC1Il wnsuVqxzQYjRGPwSsuh5wzsEsPBowNwu2EO6p/nxWbPSdrLVN93OE5XKjOzh+G6k tTSTdW+qgNyo0CURiGYMnqbCbTXKsZo= -----END CERTIFICATE-----Generated at Sat Jun 13 06:05:07 2026 by rpki-client