$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a886a35-8188-35cf-a736-e18de9d2c349.roa File: 2a886a35-8188-35cf-a736-e18de9d2c349.roa (raw, json) Hash identifier: 1qHC0fVzlJDpZsXt/JfEdI0m+vWUtFp1XXdnSbwBZwQ= Subject key identifier: 92:2A:8A:9D:F0:22:22:53:F1:9F:6A:CF:60:FA:92:5F:56:F4:11:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3DFFE491831266A5B941DD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a886a35-8188-35cf-a736-e18de9d2c349.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 71.30.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e4:91:83:12:66:a5:b9:41:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=41b4a7d7-55a8-4270-b962-f0ec95585e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:4f:24:32:d6:54:99:35:cf:07:76:c7:df: b2:57:14:2a:4b:4f:26:c6:7b:b8:c1:33:c7:87:af: 4c:68:ca:12:42:35:38:61:71:44:d7:0f:29:28:e1: 26:d1:31:4f:c3:29:f0:1a:45:4a:ff:9d:64:72:c6: df:e2:76:ff:69:4e:53:36:03:e1:45:aa:fd:c0:fc: 5f:f7:82:b1:b1:e1:ab:bf:4d:b3:35:3e:83:f5:88: b3:b3:b0:91:a6:71:4f:0f:52:e0:34:7a:dc:a6:27: a2:8a:6c:d4:77:b9:54:3c:89:48:ef:8f:ca:81:89: fd:d8:47:4b:49:09:b7:00:39:5a:a5:6d:cf:a4:39: 1b:ca:ec:1c:ef:d8:16:bc:27:05:9e:a5:45:d6:89: 70:9c:e8:22:37:f3:aa:b8:a8:79:19:f1:c0:50:72: fd:bb:68:be:25:71:97:fa:84:5a:93:07:8c:e2:5c: f6:28:c3:c5:13:06:c3:c8:62:6e:3c:a3:07:7d:cc: 34:78:21:55:ed:55:a7:9a:69:ea:86:59:51:2b:9a: 4e:3f:9f:23:48:15:6d:9e:74:68:2d:3e:3e:12:3d: e4:70:21:9c:5b:9f:79:1d:60:24:63:e6:77:86:18: 01:66:07:84:a7:5d:1d:94:45:06:e2:de:48:62:80: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2A:8A:9D:F0:22:22:53:F1:9F:6A:CF:60:FA:92:5F:56:F4:11:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a886a35-8188-35cf-a736-e18de9d2c349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2d:53:15:cc:b3:4d:87:b7:7b:48:58:7a:cf:76:5b:02:77: d8:41:ad:d7:fe:cf:47:2d:37:8d:ed:3a:6e:6c:61:d5:22:62: 95:e2:0e:d2:fb:1e:4e:69:45:fb:6f:49:62:84:ee:3e:dd:32: 8a:4c:e5:0a:7f:00:25:e6:d1:a5:a4:0c:15:97:a9:58:5e:21: 5f:b4:1c:9e:7f:5b:46:d5:0d:8f:55:da:05:c3:4d:f1:7d:9c: c8:92:0b:49:d9:8d:4b:13:0b:90:f5:ff:06:2a:16:a6:bd:ee: 75:c5:2e:4a:c8:7f:35:b9:52:a8:b2:28:9d:0a:80:19:d9:b1: 52:3c:e5:18:61:3a:97:26:c7:1e:9a:bd:88:cb:34:76:7a:ff: ec:d8:3f:57:77:13:86:b4:cb:c5:59:36:61:7d:4c:89:89:36: 57:12:e4:2d:f0:fb:c8:fd:6c:7f:10:12:66:f7:8b:11:b1:e7: af:b2:45:22:87:e3:01:f2:ea:9b:d9:55:10:02:03:a1:ce:22: 77:9a:3a:a9:bb:66:3b:05:43:25:e5:de:9c:56:3c:88:4f:6c: db:96:61:9b:de:3f:e3:3f:44:ec:c5:0a:fb:dd:2c:a8:b1:0b: ec:4a:63:45:54:da:d8:53:f8:63:29:18:b7:8b:c7:1a:61:90: 18:7e:70:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+SRgxJmpblB3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDFiNGE3ZDctNTVhOC00MjcwLWI5NjItZjBlYzk1NTg1ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+1PJDLWVJk1zwd2x9+yVxQqS08mxnu4wTPH h69MaMoSQjU4YXFE1w8pKOEm0TFPwynwGkVK/51kcsbf4nb/aU5TNgPhRar9wPxf 94KxseGrv02zNT6D9Yizs7CRpnFPD1LgNHrcpieiimzUd7lUPIlI74/KgYn92EdL SQm3ADlapW3PpDkbyuwc79gWvCcFnqVF1olwnOgiN/OquKh5GfHAUHL9u2i+JXGX +oRakweM4lz2KMPFEwbDyGJuPKMHfcw0eCFV7VWnmmnqhllRK5pOP58jSBVtnnRo LT4+Ej3kcCGcW595HWAkY+Z3hhgBZgeEp10dlEUG4t5IYoD5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIqip3wIiJT8Z9qz2D6kl9W9BFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE4ODZhMzUtODE4OC0z NWNmLWE3MzYtZTE4ZGU5ZDJjMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQtUxXMs02Ht3tIWHrPdlsCd9hBrdf+z0ctN43tOm5sYdUiYpXiDtL7 Hk5pRftvSWKE7j7dMopM5Qp/ACXm0aWkDBWXqVheIV+0HJ5/W0bVDY9V2gXDTfF9 nMiSC0nZjUsTC5D1/wYqFqa97nXFLkrIfzW5UqiyKJ0KgBnZsVI85RhhOpcmxx6a vYjLNHZ6/+zYP1d3E4a0y8VZNmF9TImJNlcS5C3w+8j9bH8QEmb3ixGx56+yRSKH 4wHy6pvZVRACA6HOIneaOqm7ZjsFQyXl3pxWPIhPbNuWYZveP+M/ROzFCvvdLKix C+xKY0VU2thT+GMpGLeLxxphkBh+cEI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:03 2026 by rpki-client