$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa File: 08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa (raw, json) Hash identifier: 5UfQ5RM5AYnEud8vx/gPYQcl4okRyPKKg+bbogPKIyg= Subject key identifier: 32:6D:04:94:9D:F5:49:EA:F9:F7:E0:23:A8:E4:2A:27:26:E8:01:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA07CBC40E4CF5E99B67C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 71.30.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:07:cb:c4:0e:4c:f5:e9:9b:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=4d3f4bb2-3a54-4829-96e0-88179a910586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:b0:35:a6:40:f7:e1:81:e4:29:97:3f:32: 81:d6:e4:50:02:57:c1:c9:1b:7b:71:f4:89:06:75: 5f:f2:2b:63:bc:50:2a:65:68:46:f4:a3:34:0b:85: 0e:d5:45:ef:95:3d:54:92:0a:6b:73:4a:b9:a2:ba: eb:ec:98:f6:e4:7e:07:ee:e5:98:81:8e:1d:ef:a1: e0:99:9c:db:07:81:a1:fd:ce:5a:46:04:5a:c1:da: 6e:70:8e:04:12:89:fb:6b:4b:10:25:cc:fd:a4:9a: a4:d9:2b:2d:27:c5:30:e5:9a:4e:a1:ae:fa:8a:7c: 02:2d:55:4d:10:e3:39:76:4d:40:9e:a8:81:6e:3a: 36:5b:75:29:cb:f6:5e:10:ca:91:e5:a1:c1:bb:94: 6a:59:11:6e:90:a9:c3:c5:fc:51:92:5f:20:1d:0d: 8a:90:c4:01:88:24:16:8d:03:f7:2b:0e:bf:0f:da: 1b:4c:a2:6e:f4:22:bc:d6:e6:d7:e1:ab:0d:4a:c7: 76:35:7d:1e:af:fd:fe:68:e4:31:40:15:84:89:45: 08:1b:b2:ff:ef:eb:ed:a3:12:18:d3:91:c3:3e:1d: c4:b5:58:a5:0d:9b:2e:39:c9:fd:ec:37:05:17:7b: f4:4a:90:48:13:42:2f:05:6b:09:fe:89:7b:e6:73: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6D:04:94:9D:F5:49:EA:F9:F7:E0:23:A8:E4:2A:27:26:E8:01:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:15:ff:f5:1e:3f:e1:45:0c:ca:d3:e5:84:70:b9:a0:53:fb: 24:91:aa:22:2e:cd:8d:8d:a9:3c:e0:b9:cd:8f:bc:8f:7c:00: c1:2d:22:49:d1:70:ea:b7:3e:32:e8:31:5f:be:ef:ad:87:59: 07:f4:48:fb:90:fc:ea:96:16:b1:bf:a4:bd:41:93:92:5c:1f: 9d:c8:f9:ce:c3:09:2b:08:c1:47:e0:69:df:b5:04:df:75:52: 01:ef:f1:43:0c:96:f2:26:f6:43:69:8b:0f:9f:f5:61:c8:ee: 45:46:c8:a9:7f:9a:fb:80:de:8b:8f:59:5f:2b:94:50:6a:5c: 9f:61:53:78:81:b5:35:4a:08:30:53:ae:d6:a2:ff:08:80:aa: 98:9c:f7:db:a8:17:26:18:1d:34:ce:df:d9:f7:fe:89:3c:02: b9:49:98:ff:b7:38:ec:1f:4d:d6:72:fc:89:48:a8:df:9a:ea: 10:68:c8:89:f0:cf:51:bb:04:4d:5a:ae:bd:7f:57:48:47:e9: 24:c9:43:90:56:91:f8:41:d5:aa:c5:0c:bc:75:24:fd:03:80: 88:ea:7b:a8:d3:ca:57:41:40:bf:6d:0d:a5:20:3a:ad:f9:96: 5b:e0:7e:3c:6f:62:d8:56:da:0a:24:d3:ef:67:0d:94:83:f5: e5:cc:df:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gfLxA5M9embZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NGQzZjRiYjItM2E1NC00ODI5LTk2ZTAtODgxNzlhOTEwNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfqwNaZA9+GB5CmXPzKB1uRQAlfByRt7cfSJ BnVf8itjvFAqZWhG9KM0C4UO1UXvlT1Ukgprc0q5orrr7Jj25H4H7uWYgY4d76Hg mZzbB4Gh/c5aRgRawdpucI4EEon7a0sQJcz9pJqk2SstJ8Uw5ZpOoa76inwCLVVN EOM5dk1AnqiBbjo2W3Upy/ZeEMqR5aHBu5RqWRFukKnDxfxRkl8gHQ2KkMQBiCQW jQP3Kw6/D9obTKJu9CK81ubX4asNSsd2NX0er/3+aOQxQBWEiUUIG7L/7+vtoxIY 05HDPh3EtVilDZsuOcn97DcFF3v0SpBIE0IvBWsJ/ol75nMB+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJtBJSd9Unq+ffgI6jkKicm6AEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhhZTdjMDctOTc4OS0z MzQ1LWExOGEtZWQwNThkMWJmYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0V//UeP+FFDMrT5YRwuaBT+ySRqiIuzY2NqTzguc2PvI98AMEtIknR cOq3PjLoMV++762HWQf0SPuQ/OqWFrG/pL1Bk5JcH53I+c7DCSsIwUfgad+1BN91 UgHv8UMMlvIm9kNpiw+f9WHI7kVGyKl/mvuA3ouPWV8rlFBqXJ9hU3iBtTVKCDBT rtai/wiAqpic99uoFyYYHTTO39n3/ok8ArlJmP+3OOwfTdZy/IlIqN+a6hBoyInw z1G7BE1arr1/V0hH6STJQ5BWkfhB1arFDLx1JP0DgIjqe6jTyldBQL9tDaUgOq35 llvgfjxvYthW2gok0+9nDZSD9eXM30A= -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:32 2026 by rpki-client