$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9158033-9432-32b6-9e76-162cc075a3e8.roa File: f9158033-9432-32b6-9e76-162cc075a3e8.roa (raw, json) Hash identifier: 9aGoQbZwr+L+uj7+z7YmvBkKlcYhl6XEnq0qzN3kL50= Subject key identifier: 1B:95:A5:19:11:80:F5:D3:FE:95:BA:A9:CF:EC:76:38:70:53:18:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F2278A530C77A933DF500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9158033-9432-32b6-9e76-162cc075a3e8.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 67.224.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:22:78:a5:30:c7:7a:93:3d:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=bf750802-640c-4db1-a27d-b01d2d3202ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:01:bd:4d:d7:27:ea:d8:19:82:7a:03:8c:91: 4a:75:93:2a:a9:45:4a:2e:8b:5e:31:2c:76:e7:7a: 76:2a:c5:9c:50:1d:3b:53:d9:90:44:47:00:ce:cb: 11:cc:cd:76:cc:20:64:df:05:d6:e8:39:e5:04:a7: 52:f0:1e:60:73:f7:27:29:c0:b4:fd:c1:18:79:2a: 33:67:d8:d3:da:30:c7:0b:ad:75:fd:43:53:37:32: 1e:0d:ec:e8:ea:54:b4:84:19:1b:23:14:9c:37:4d: 30:61:42:b7:64:19:17:d8:f3:83:15:72:79:36:69: 8b:74:dd:b8:8a:18:3c:cc:d5:08:f8:dd:0e:f5:c5: 81:1d:a7:8e:b9:1a:45:e5:ef:03:13:de:cb:e4:9b: 42:3a:92:75:1f:7b:d2:07:a1:40:09:0d:2e:af:cf: 52:36:f7:55:c9:8a:a0:ce:4d:f0:67:56:ad:8f:f0: dc:95:18:53:92:97:bd:53:52:89:a5:7a:02:8e:13: 65:11:19:cd:97:e9:ae:29:24:f3:43:3c:3d:f7:07: bb:04:71:35:66:d9:b8:c3:5e:6e:95:5e:2b:56:4e: 80:20:f8:2d:6e:03:9b:67:37:65:1c:f8:95:06:67: 12:83:19:16:be:17:89:aa:b6:13:e0:3b:e4:ba:87: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:95:A5:19:11:80:F5:D3:FE:95:BA:A9:CF:EC:76:38:70:53:18:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9158033-9432-32b6-9e76-162cc075a3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ba:54:b5:a6:c4:22:8c:a1:ae:4d:02:6c:a4:d6:26:d8:4f: c9:43:eb:7e:0c:19:23:d4:68:35:24:c5:d1:07:74:85:26:ba: 5e:41:a3:01:ae:e9:d5:11:49:47:c4:c0:f3:e9:7f:5d:f4:2b: 08:73:0f:02:c5:0c:4b:28:fe:8a:03:ae:c5:dd:78:fd:71:f4: b3:92:e1:7f:e2:ff:55:4e:75:6d:96:36:00:45:08:0f:92:cb: ba:8f:3f:74:f7:6d:18:8b:bd:42:b5:19:c2:07:64:69:d4:da: ab:e0:50:ea:c9:2a:de:79:2f:ed:84:4c:a8:fe:58:e2:76:5d: c1:8a:81:6f:05:c3:fe:bd:18:38:02:de:a1:1e:27:05:3e:cc: d1:b7:b7:97:c2:c8:84:b1:61:95:32:d8:33:80:f9:c2:6f:3b: f8:70:78:a3:07:bc:ec:6b:ff:df:e3:90:36:7f:c9:b8:bf:f1: f0:b6:ce:71:94:52:74:f1:ab:36:8d:a0:0b:52:a6:8a:ea:82: ae:87:88:fe:fb:cb:c6:cf:b1:3a:45:7c:64:23:2e:80:5e:80: 8a:30:81:d1:65:3f:5a:d5:36:e5:fd:0b:86:f2:1d:79:22:c5: 25:f2:23:2a:d7:2a:68:36:e2:ec:35:17:68:9f:45:0d:43:40: e4:cc:59:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyJ4pTDHepM99QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YmY3NTA4MDItNjQwYy00ZGIxLWEyN2QtYjAxZDJkMzIwMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggG9Tdcn6tgZgnoDjJFKdZMqqUVKLoteMSx2 53p2KsWcUB07U9mQREcAzssRzM12zCBk3wXW6DnlBKdS8B5gc/cnKcC0/cEYeSoz Z9jT2jDHC611/UNTNzIeDezo6lS0hBkbIxScN00wYUK3ZBkX2PODFXJ5NmmLdN24 ihg8zNUI+N0O9cWBHaeOuRpF5e8DE97L5JtCOpJ1H3vSB6FACQ0ur89SNvdVyYqg zk3wZ1atj/DclRhTkpe9U1KJpXoCjhNlERnNl+muKSTzQzw99we7BHE1Ztm4w15u lV4rVk6AIPgtbgObZzdlHPiVBmcSgxkWvheJqrYT4DvkuoeQmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuVpRkRgPXT/pW6qc/sdjhwUxhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjkxNTgwMzMtOTQzMi0z MmI2LTllNzYtMTYyY2MwNzVhM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO6VLWmxCKMoa5NAmyk1ibYT8lD634MGSPUaDUkxdEHdIUmul5BowGu 6dURSUfEwPPpf130KwhzDwLFDEso/ooDrsXdeP1x9LOS4X/i/1VOdW2WNgBFCA+S y7qPP3T3bRiLvUK1GcIHZGnU2qvgUOrJKt55L+2ETKj+WOJ2XcGKgW8Fw/69GDgC 3qEeJwU+zNG3t5fCyISxYZUy2DOA+cJvO/hweKMHvOxr/9/jkDZ/ybi/8fC2znGU UnTxqzaNoAtSporqgq6HiP77y8bPsTpFfGQjLoBegIowgdFlP1rVNuX9C4byHXki xSXyIyrXKmg24uw1F2ifRQ1DQOTMWaU= -----END CERTIFICATE-----Generated at Sat Jun 13 20:53:16 2026 by rpki-client