$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/109ce6d8-6205-3534-baef-884080578281.roa File: 109ce6d8-6205-3534-baef-884080578281.roa (raw, json) Hash identifier: j0nphy0TRMav2gRu3SdGKSoCQzq84Zd/1lg7THqH1PA= Subject key identifier: C2:6A:70:30:AE:A4:3B:2F:FF:7B:AA:AC:FD:E0:54:D4:4B:3C:52:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DB7703C649BEC4306B917F180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/109ce6d8-6205-3534-baef-884080578281.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 7029 IP address blocks: 71.28.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:3c:64:9b:ec:43:06:b9:17:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=6c091709-3351-46ff-ad06-cceaa367505f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:0d:22:3c:8c:81:7d:14:93:87:14:84:11: 40:7b:10:c7:4f:3f:13:03:7a:83:23:6e:d7:13:f6: b6:b4:4c:13:63:89:c3:a0:5d:28:1a:46:da:cd:1f: 40:5d:03:0f:df:b9:d0:bc:fd:36:d1:f5:f3:40:06: fe:c7:91:86:13:de:fd:78:d7:aa:31:4e:0e:1c:18: 40:ce:d4:43:be:c4:34:4b:a1:14:ee:9d:97:7f:ec: 81:8b:99:f6:5a:8a:b1:0b:d3:f8:cf:27:8c:d2:79: b2:d8:1d:2f:9d:04:55:e8:f8:d1:40:2e:11:c8:15: ad:1c:86:f8:de:2b:09:3f:21:cf:99:e0:a6:4d:ca: c3:70:6c:ca:be:8f:ff:40:6c:19:7e:22:71:ab:77: 94:44:6a:8a:35:fe:f8:92:14:95:1a:1e:c4:b4:67: fa:25:87:5f:24:45:35:ab:7b:b1:cb:ab:51:ed:86: 88:d8:c0:6e:89:68:b4:64:fb:b4:d6:30:2e:8f:d1: 88:99:da:3b:83:f7:92:c6:1d:7f:07:c1:bf:50:b4: 92:f4:2d:7f:44:20:2f:99:98:81:d6:36:81:5b:21: 05:5a:cb:2c:fb:45:ee:36:c8:de:68:f0:42:d6:a1: 80:4d:1f:ca:aa:53:8e:d9:06:3d:b9:5d:02:6d:a3: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6A:70:30:AE:A4:3B:2F:FF:7B:AA:AC:FD:E0:54:D4:4B:3C:52:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/109ce6d8-6205-3534-baef-884080578281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cb:af:35:6a:75:ab:16:82:9d:e3:2a:a5:5c:c8:4f:1f:fc: 4f:ee:9c:58:40:5e:c7:52:4d:7c:67:9d:05:4d:2d:fd:e3:43: 99:ec:82:de:16:ff:6a:20:90:31:8a:de:7f:2a:60:b6:b3:dc: e7:c0:2f:da:0d:d2:39:67:98:9d:2a:57:6b:c5:8c:12:a9:de: 1f:61:08:b0:7c:b7:fb:6f:e7:e9:b2:81:1f:d4:36:d4:48:84: a9:21:1e:ef:14:84:30:aa:da:16:97:e4:88:96:a2:68:26:4b: b5:2b:0a:6b:cf:2c:cc:f6:03:97:29:39:d3:43:f6:bd:d9:b4: 03:4b:1e:28:4b:a6:7d:ef:7d:5b:02:2d:32:2d:ff:c3:8e:3c: e2:58:d3:c5:a6:89:0b:4d:41:e1:b7:84:bc:24:86:ec:77:6b: 34:05:83:4c:b2:2b:c5:86:6f:83:c4:40:bd:11:ba:10:93:53: 7b:90:27:fc:b9:86:60:87:92:36:1d:1a:7c:5e:07:a7:54:03: 23:99:9e:d7:71:75:49:4f:e7:fe:54:db:41:49:f3:95:9f:5b: 91:35:9f:16:89:60:a3:ba:a3:65:51:5d:51:ab:36:b6:01:24: ec:9e:59:65:13:77:5b:d0:7d:0f:db:70:83:09:0b:59:fd:46: de:71:f7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDxkm+xDBrkX8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NmMwOTE3MDktMzM1MS00NmZmLWFkMDYtY2NlYWEzNjc1MDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKANIjyMgX0Uk4cUhBFAexDHTz8TA3qDI27X E/a2tEwTY4nDoF0oGkbazR9AXQMP37nQvP020fXzQAb+x5GGE979eNeqMU4OHBhA ztRDvsQ0S6EU7p2Xf+yBi5n2WoqxC9P4zyeM0nmy2B0vnQRV6PjRQC4RyBWtHIb4 3isJPyHPmeCmTcrDcGzKvo//QGwZfiJxq3eURGqKNf74khSVGh7EtGf6JYdfJEU1 q3uxy6tR7YaI2MBuiWi0ZPu01jAuj9GImdo7g/eSxh1/B8G/ULSS9C1/RCAvmZiB 1jaBWyEFWsss+0XuNsjeaPBC1qGATR/KqlOO2QY9uV0CbaP+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJqcDCupDsv/3uqrP3gVNRLPFJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA5Y2U2ZDgtNjIwNS0z NTM0LWJhZWYtODg0MDgwNTc4MjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxwGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALLrzVqdasWgp3jKqVcyE8f/E/unFhAXsdSTXxnnQVNLf3jQ5nsgt4W /2ogkDGK3n8qYLaz3OfAL9oN0jlnmJ0qV2vFjBKp3h9hCLB8t/tv5+mygR/UNtRI hKkhHu8UhDCq2haX5IiWomgmS7UrCmvPLMz2A5cpOdND9r3ZtANLHihLpn3vfVsC LTIt/8OOPOJY08WmiQtNQeG3hLwkhux3azQFg0yyK8WGb4PEQL0RuhCTU3uQJ/y5 hmCHkjYdGnxeB6dUAyOZntdxdUlP5/5U20FJ85WfW5E1nxaJYKO6o2VRXVGrNrYB JOyeWWUTd1vQfQ/bcIMJC1n9Rt5x91M= -----END CERTIFICATE-----Generated at Wed May 13 14:46:45 2026 by rpki-client