$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f247c08-da54-303e-bd38-05ed013d791a.roa File: 4f247c08-da54-303e-bd38-05ed013d791a.roa (raw, json) Hash identifier: WG5TygWNmDnHvoaIMYED3UHi+5UA6VNMYR0Ce8j3uUo= Subject key identifier: 85:7B:89:78:46:E7:13:35:B0:D5:ED:5B:C7:37:03:6C:B6:8C:F3:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D9E5001DBF038DFF75A084D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f247c08-da54-303e-bd38-05ed013d791a.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 71.30.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:01:db:f0:38:df:f7:5a:08:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=f7931c0c-c027-4e59-884c-f7e24518b2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a5:3f:94:12:5b:8c:1e:ae:43:0d:c0:32:d0: 78:3f:54:58:82:b6:77:a2:69:f4:03:d5:50:60:c1: 30:af:38:ab:9a:27:a9:b2:48:ef:27:ba:04:37:6a: 15:ec:b3:0d:7e:d9:66:03:06:ee:8e:0d:08:5b:ed: 13:56:12:e4:77:2f:8c:15:d6:8c:d0:99:61:8d:5a: 01:d6:e6:3a:3c:55:4f:26:c1:0e:40:e2:31:42:7f: ef:1f:7d:8f:05:56:46:4a:97:01:85:91:be:29:80: 60:7b:9f:04:4e:c1:1c:a4:13:2c:d6:34:98:cc:5d: d4:9c:e5:fb:f4:a8:97:27:a1:89:58:8b:2f:b6:8f: 15:10:fc:61:4e:4a:6c:97:8d:46:db:5e:b0:22:9a: e0:c9:ee:f2:71:c3:49:46:2d:39:bb:a6:92:c8:84: d0:a7:29:6c:8f:fe:b7:51:8b:41:18:f1:f6:1c:3f: 87:0f:d8:86:27:80:7c:8f:20:09:7c:96:d3:72:fb: ad:24:17:05:f8:89:86:77:55:6a:d3:d8:76:e7:ad: bc:ad:2c:03:7d:b7:f2:0e:c3:f2:4d:4d:2b:b0:76: bc:94:fd:a7:7f:ab:73:eb:01:55:95:cf:e5:14:e1: 06:d6:97:d7:1f:48:01:de:c7:fd:6e:9d:ba:b9:8c: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7B:89:78:46:E7:13:35:B0:D5:ED:5B:C7:37:03:6C:B6:8C:F3:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f247c08-da54-303e-bd38-05ed013d791a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ed:34:a6:b1:ba:47:e7:0b:f3:43:6d:e9:c6:c5:18:4f:ac: 14:2c:2a:42:d9:19:23:c2:76:75:b3:8a:1c:5a:c5:94:9b:31: ef:5f:8b:5b:c9:3a:a5:fc:d1:1c:d6:c4:ed:d4:6d:ab:12:d4: f6:cb:dc:03:29:c6:fa:4c:a9:34:c6:29:a1:42:7d:bb:0e:a1: 5c:82:25:1e:03:ad:17:34:b4:4d:d9:ec:24:95:a9:5e:0c:96: 6a:94:ec:66:d6:b3:df:a1:4d:c4:73:d1:da:7a:e1:37:16:50: 00:5f:32:d7:ea:64:f7:dc:9d:a6:0b:85:9b:df:2a:f5:6f:a6: 5a:bb:05:1b:44:89:c9:c4:41:75:9b:fb:97:93:c7:2b:88:d6: d5:07:24:2c:b5:1d:61:89:43:88:39:52:31:1f:a0:51:af:fb: 02:1f:79:2a:d7:f8:da:74:13:7c:6d:8b:25:2c:9f:1d:8e:ca: 91:d6:d1:48:e3:15:74:41:33:77:e5:fb:1e:03:ac:a2:79:c1: 61:5d:71:e8:d5:e4:e8:b6:d3:4f:ed:d8:63:80:3a:bf:7e:49: 8a:ca:56:dc:56:54:aa:df:f6:04:be:ae:b3:40:ce:75:50:1b: 37:79:d9:8c:6c:d1:5e:04:ba:bc:27:23:02:81:e7:c4:50:09: 16:a3:98:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAHb8Djf91oITYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk Zjc5MzFjMGMtYzAyNy00ZTU5LTg4NGMtZjdlMjQ1MThiMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKU/lBJbjB6uQw3AMtB4P1RYgrZ3omn0A9VQ YMEwrzirmiepskjvJ7oEN2oV7LMNftlmAwbujg0IW+0TVhLkdy+MFdaM0JlhjVoB 1uY6PFVPJsEOQOIxQn/vH32PBVZGSpcBhZG+KYBge58ETsEcpBMs1jSYzF3UnOX7 9KiXJ6GJWIsvto8VEPxhTkpsl41G216wIprgye7yccNJRi05u6aSyITQpylsj/63 UYtBGPH2HD+HD9iGJ4B8jyAJfJbTcvutJBcF+ImGd1Vq09h25628rSwDfbfyDsPy TU0rsHa8lP2nf6tz6wFVlc/lFOEG1pfXH0gB3sf9bp26uYw+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIV7iXhG5xM1sNXtW8c3A2y2jPMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGYyNDdjMDgtZGE1NC0z MDNlLWJkMzgtMDVlZDAxM2Q3OTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLtNKaxukfnC/NDbenGxRhPrBQsKkLZGSPCdnWzihxaxZSbMe9fi1vJ OqX80RzWxO3UbasS1PbL3AMpxvpMqTTGKaFCfbsOoVyCJR4DrRc0tE3Z7CSVqV4M lmqU7GbWs9+hTcRz0dp64TcWUABfMtfqZPfcnaYLhZvfKvVvplq7BRtEicnEQXWb +5eTxyuI1tUHJCy1HWGJQ4g5UjEfoFGv+wIfeSrX+Np0E3xtiyUsnx2OypHW0Ujj FXRBM3fl+x4DrKJ5wWFdcejV5Oi200/t2GOAOr9+SYrKVtxWVKrf9gS+rrNAznVQ Gzd52Yxs0V4EurwnIwKB58RQCRajmK0= -----END CERTIFICATE-----Generated at Wed May 13 09:18:49 2026 by rpki-client