$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35790ca9-e5d7-31bf-8055-490fad2a9429.roa File: 35790ca9-e5d7-31bf-8055-490fad2a9429.roa (raw, json) Hash identifier: enKYOX5ykAWlRxnFrUNF71JT3sTfc5PHoHOitWUYSNk= Subject key identifier: 7E:16:2C:6D:6C:BD:9A:5C:B9:13:24:7E:BD:96:90:E1:0B:E4:80:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2644B95B0C217A92BBA71AE4 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35790ca9-e5d7-31bf-8055-490fad2a9429.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 7029 IP address blocks: 71.28.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b9:5b:0c:21:7a:92:bb:a7:1a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=b71c8f8b-3254-4743-9e7c-557c1e946ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d5:38:02:23:f6:4d:0c:db:18:03:10:1d:00: 2d:45:37:ca:50:b3:c3:89:d7:5b:1f:61:fc:6f:e4: 2b:a3:a2:99:a3:98:78:9c:93:3e:08:dd:b9:cb:1c: d5:e3:fb:a0:70:01:39:a5:ac:09:e4:ac:9b:61:16: c3:1a:a0:02:26:2c:61:44:29:ef:e9:31:76:72:c1: 90:1e:52:6a:6b:c5:ce:ac:52:74:f5:0f:43:08:f9: 8a:c7:c3:e1:5e:ff:da:4d:4b:c8:59:f1:7a:c2:07: 75:6d:75:ee:a4:99:3d:4b:00:70:0d:58:06:0e:a5: dd:5b:2b:06:ff:5b:d7:59:2c:a9:5d:31:67:1a:c3: df:67:cf:30:8b:28:23:36:5a:36:26:16:7e:e7:ee: ca:c4:48:9e:0f:cf:8f:ab:98:9e:eb:bd:81:ff:03: d3:4e:4b:45:f8:29:dc:ce:cb:b5:1a:aa:3e:18:9c: ef:6a:1c:be:76:77:fc:6f:ab:06:17:4f:b2:76:63: 68:93:88:bb:50:91:22:71:a7:e9:5e:68:87:81:d7: af:98:af:f3:72:3e:2a:70:02:51:f1:07:c5:cc:a1: 0c:88:b3:f3:a0:2e:3c:35:0b:98:5b:f5:df:bf:e0: 5b:bf:df:a0:7c:25:45:ef:6f:bb:df:96:ae:5a:7a: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:16:2C:6D:6C:BD:9A:5C:B9:13:24:7E:BD:96:90:E1:0B:E4:80:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35790ca9-e5d7-31bf-8055-490fad2a9429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:70:01:b1:2b:3e:c9:30:81:3f:0c:6e:02:af:40:08:f1:f8: f6:83:d3:d0:72:39:7f:ff:7e:c6:ca:6d:22:c5:c0:a4:b6:08: 7f:95:19:b0:66:e0:c8:02:22:4c:e9:96:29:56:3e:73:8d:67: 05:4e:9b:e6:c3:b7:9c:a0:3e:5d:4e:4c:f5:1b:d9:3f:89:41: b6:81:56:ca:70:8f:f3:34:bd:a0:2a:89:1c:25:98:a4:e7:55: d4:2a:4b:74:92:7e:f9:00:da:16:c9:ce:b5:6f:f8:77:9f:f1: 02:4c:08:1e:8e:46:ed:5c:d4:04:b4:4a:52:6a:e8:f5:b8:93: cd:2d:b6:73:bd:83:75:96:59:d8:2f:b6:68:42:9b:e7:ee:5a: 98:a1:d4:a6:2b:0f:48:3a:57:83:13:63:2c:60:72:ff:1c:14: dc:f5:aa:c3:ac:df:fd:ae:6c:e8:e5:2b:9f:10:48:37:49:bc: 4e:4c:eb:85:88:f6:5e:49:1c:ce:e3:50:d4:25:19:60:1c:09: 42:85:4c:85:92:aa:b6:d2:dd:1c:7a:6b:cc:37:d3:1a:fc:31: 54:fb:ff:ec:85:f9:70:14:d0:4e:99:18:4c:49:0f:c7:06:1f: ee:22:63:82:3c:4c:19:67:af:3c:fb:c0:c0:ec:c9:5a:ff:10: e2:da:ac:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLlbDCF6krunGuQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YjcxYzhmOGItMzI1NC00NzQzLTllN2MtNTU3YzFlOTQ2YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdU4AiP2TQzbGAMQHQAtRTfKULPDiddbH2H8 b+Qro6KZo5h4nJM+CN25yxzV4/ugcAE5pawJ5KybYRbDGqACJixhRCnv6TF2csGQ HlJqa8XOrFJ09Q9DCPmKx8PhXv/aTUvIWfF6wgd1bXXupJk9SwBwDVgGDqXdWysG /1vXWSypXTFnGsPfZ88wiygjNlo2JhZ+5+7KxEieD8+Pq5ie672B/wPTTktF+Cnc zsu1Gqo+GJzvahy+dnf8b6sGF0+ydmNok4i7UJEicafpXmiHgdevmK/zcj4qcAJR 8QfFzKEMiLPzoC48NQuYW/Xfv+Bbv9+gfCVF72+735auWnrcawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4WLG1svZpcuRMkfr2WkOEL5IAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzU3OTBjYTktZTVkNy0z MWJmLTgwNTUtNDkwZmFkMmE5NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlwAbErPskwgT8MbgKvQAjx+PaD09ByOX//fsbKbSLFwKS2CH+VGbBm 4MgCIkzplilWPnONZwVOm+bDt5ygPl1OTPUb2T+JQbaBVspwj/M0vaAqiRwlmKTn VdQqS3SSfvkA2hbJzrVv+Hef8QJMCB6ORu1c1AS0SlJq6PW4k80ttnO9g3WWWdgv tmhCm+fuWpih1KYrD0g6V4MTYyxgcv8cFNz1qsOs3/2ubOjlK58QSDdJvE5M64WI 9l5JHM7jUNQlGWAcCUKFTIWSqrbS3Rx6a8w30xr8MVT7/+yF+XAU0E6ZGExJD8cG H+4iY4I8TBlnrzz7wMDsyVr/EOLarB4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:46 2026 by rpki-client