$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4210d371-03b7-36cf-8e48-2cb75c5ad6a2.roa File: 4210d371-03b7-36cf-8e48-2cb75c5ad6a2.roa (raw, json) Hash identifier: GQEdx0c+kzEmNWuRZXHx+sZvJHl8fmmGMSo7yHpp7Xw= Subject key identifier: 20:74:67:37:41:3A:02:C5:06:51:E6:6E:1B:41:9F:A8:18:04:CB:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A69F3516ACA26D5540300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4210d371-03b7-36cf-8e48-2cb75c5ad6a2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 69.30.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:69:f3:51:6a:ca:26:d5:54:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=94cb6939-6694-4226-9022-20f58b61d477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:1b:d2:75:cf:01:d5:18:0a:d3:79:7c:c7: 4d:5b:b1:e0:ef:02:67:c0:82:dc:5b:a4:cf:e5:52: 6a:b9:e8:aa:47:d0:e4:a1:50:12:70:dd:30:5e:d2: a3:3b:ed:4e:f3:99:3b:29:7c:68:db:1b:a6:b4:d4: fb:de:d2:c5:54:ad:42:a4:66:66:88:27:c3:d2:69: c0:35:4f:94:ce:cc:35:c0:a9:51:3e:bb:94:aa:0d: 1e:35:a9:79:10:c2:4e:e8:7c:12:72:a6:68:f4:12: 96:7c:be:e9:9b:6b:a5:47:c6:85:60:c5:03:2c:88: c1:de:f9:65:d5:93:bc:00:a0:88:29:78:e6:28:5c: ec:c7:fe:07:58:15:c9:db:8d:05:81:43:6f:ea:d5: fc:2c:6c:01:72:8a:24:0a:a9:17:e2:d1:5e:fb:ea: 6c:cb:3a:bf:c8:cc:cb:c7:b2:c8:51:13:2a:c4:1d: f8:ba:57:f0:4d:e4:c2:18:94:88:08:35:21:dd:f6: 46:37:17:ad:c0:c7:c2:b2:b1:e1:55:50:e8:e5:59: 2c:77:3f:d5:8a:06:ad:e6:c3:bf:20:64:07:b3:82: a9:54:b8:3c:ad:97:f0:cd:62:6b:4b:6b:0a:4e:6f: 83:b5:8f:bf:2c:4e:fc:f1:d0:20:1a:22:99:78:ef: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:74:67:37:41:3A:02:C5:06:51:E6:6E:1B:41:9F:A8:18:04:CB:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4210d371-03b7-36cf-8e48-2cb75c5ad6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.30.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:20:f3:50:58:42:06:13:83:39:8e:ff:48:c3:05:e2:6f:67: 36:a8:8e:4e:c4:1c:16:43:47:f8:48:4a:29:56:95:36:06:13: 13:03:c2:0d:d7:08:80:38:fb:52:1b:c2:b9:04:fa:87:92:ff: 4c:0c:59:9c:38:18:36:99:a3:24:c0:4c:b4:28:6c:87:53:1f: 05:ad:e1:5b:19:c7:dc:61:6e:63:24:ef:19:f4:53:ff:24:70: ed:49:fa:2e:76:60:d7:50:5b:09:0f:ae:4d:04:9d:b1:85:43: d6:e6:cd:ce:85:e0:62:76:b4:0e:9d:d5:f7:e2:dc:c4:71:c8: bf:78:c5:65:cc:26:c9:25:9e:15:03:b3:ec:92:0a:37:a1:8b: 13:9a:5d:20:1f:2c:e2:d7:9e:ac:ac:68:d5:ab:c4:33:74:c2: 91:f5:83:6d:80:ac:9b:df:37:56:90:c4:a9:60:29:13:1d:5b: a3:5a:f7:29:68:45:10:28:f9:85:44:8c:4a:fb:f1:d3:f3:3a: bb:75:04:12:59:dc:c2:25:48:16:c2:c8:dc:f8:a7:cd:05:00: 48:32:cb:7e:d0:7b:08:63:dc:fc:98:d7:08:c9:60:af:22:f8: 0e:72:51:5a:80:34:8a:32:26:a2:96:f3:58:3a:63:f5:f4:0c: 60:7d:ce:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmnzUWrKJtVUAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTRjYjY5MzktNjY5NC00MjI2LTkwMjItMjBmNThiNjFkNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29wb0nXPAdUYCtN5fMdNW7Hg7wJnwILcW6TP 5VJqueiqR9DkoVAScN0wXtKjO+1O85k7KXxo2xumtNT73tLFVK1CpGZmiCfD0mnA NU+Uzsw1wKlRPruUqg0eNal5EMJO6HwScqZo9BKWfL7pm2ulR8aFYMUDLIjB3vll 1ZO8AKCIKXjmKFzsx/4HWBXJ240FgUNv6tX8LGwBcookCqkX4tFe++psyzq/yMzL x7LIURMqxB34ulfwTeTCGJSICDUh3fZGNxetwMfCsrHhVVDo5Vksdz/Vigat5sO/ IGQHs4KpVLg8rZfwzWJrS2sKTm+DtY+/LE788dAgGiKZeO/KHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB0ZzdBOgLFBlHmbhtBn6gYBMuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDIxMGQzNzEtMDNiNy0z NmNmLThlNDgtMmNiNzVjNWFkNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRR6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEg81BYQgYTgzmO/0jDBeJvZzaojk7EHBZDR/hISilWlTYGExMDwg3X CIA4+1IbwrkE+oeS/0wMWZw4GDaZoyTATLQobIdTHwWt4VsZx9xhbmMk7xn0U/8k cO1J+i52YNdQWwkPrk0EnbGFQ9bmzc6F4GJ2tA6d1ffi3MRxyL94xWXMJsklnhUD s+ySCjehixOaXSAfLOLXnqysaNWrxDN0wpH1g22ArJvfN1aQxKlgKRMdW6Na9ylo RRAo+YVEjEr78dPzOrt1BBJZ3MIlSBbCyNz4p80FAEgyy37Qewhj3PyY1wjJYK8i +A5yUVqANIoyJqKW81g6Y/X0DGB9zsk= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:30 2026 by rpki-client