$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa File: 4f94a629-79eb-368a-9b8f-56715d70c771.roa (raw, json) Hash identifier: +6tDkrVlPXS2HMVN3bds48z3zkgw3dwnYbNEt5l3wTM= Subject key identifier: 74:54:E7:BA:33:E4:78:4C:F9:07:33:D9:22:AF:C7:CC:19:4F:4D:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DBA3B125E029D8B3AAD42EA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 7029 IP address blocks: 71.28.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:12:5e:02:9d:8b:3a:ad:42:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=35ea6598-e95b-4444-a927-678bfecbf581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:ea:df:b7:e3:b0:74:1d:ff:4d:25:8b:59: 61:58:9c:f8:d1:ae:d5:fa:62:cd:5f:7a:dd:f5:d6: b7:c2:67:77:66:e8:a6:c7:09:3b:05:9e:d6:4c:f5: a6:81:81:41:1a:17:3e:15:53:a1:d0:ce:ad:65:6f: 6f:be:6f:5a:18:ec:dc:a1:ab:45:55:7d:0f:fb:2d: 53:31:6c:2a:12:00:f4:1f:c9:e0:13:d4:49:19:47: 50:ae:08:c4:5b:9f:a7:43:f7:62:bf:e7:40:ca:7b: 62:b6:c8:2e:93:49:f8:31:92:47:96:25:88:f8:12: b9:c9:8a:b4:64:99:8c:5e:db:74:cd:00:50:83:de: d0:e2:74:8a:83:86:13:63:b7:fe:ad:52:a5:c4:88: bb:13:34:97:85:0f:26:4a:ed:62:93:00:b4:15:1c: cd:c6:db:07:20:1d:5c:f7:3a:4f:cb:a9:c2:77:9a: 8f:7a:cb:1f:06:85:2b:a9:96:57:83:ab:86:be:53: 34:b3:1d:a5:39:db:3a:1e:5c:48:b3:78:a9:58:70: ff:df:7c:5c:4f:cb:01:72:e2:da:43:f5:28:e4:1b: 99:87:af:cf:73:74:f3:b6:e5:ee:fa:cc:a3:2e:76: 56:cd:bc:09:2b:9f:97:6e:74:9f:51:4d:7b:5f:8f: 41:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:54:E7:BA:33:E4:78:4C:F9:07:33:D9:22:AF:C7:CC:19:4F:4D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:10:11:96:05:72:3f:f4:ba:a1:fe:4f:e0:40:74:7f:dc:64: 93:ab:be:1f:4c:d8:0b:e7:79:78:bd:91:27:7e:13:bf:ad:85: 8c:55:d7:47:dd:5d:76:1f:73:6d:d4:67:41:f3:28:fd:0e:1e: 13:74:9f:02:53:dc:2b:2c:c9:37:5e:56:48:3e:a9:ce:d5:f7: 3e:bc:a4:1b:c2:1f:cc:6e:39:fa:01:69:af:ab:97:29:a3:78: 41:2a:30:77:37:42:8b:6a:7c:2c:22:49:52:bd:1c:03:50:8e: b9:61:a0:0c:cd:93:3d:87:97:08:f2:85:7f:10:c5:cc:ca:3d: dd:83:72:2a:3d:4d:72:8b:34:8b:0e:65:c6:04:cf:9f:1a:41: e3:fd:ce:d2:ed:4b:e6:99:d5:88:9d:5e:01:ed:d5:c8:42:15: df:b3:50:90:ff:ac:d9:33:d2:06:4c:d5:b6:f5:42:b7:d0:ce: 56:a0:a5:43:b7:65:9e:16:06:16:58:56:c7:0e:63:3d:f2:de: bf:e2:e5:20:c6:fe:83:60:7e:04:88:9c:21:1e:29:cf:1c:9b: c1:46:20:9a:d0:d7:ec:4b:88:a0:94:b2:5a:70:b6:04:13:97: 48:ac:9e:11:43:07:ae:fe:e7:4b:02:d1:b6:a5:68:34:50:2a: 8e:d8:8f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OxJeAp2LOq1C6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MzVlYTY1OTgtZTk1Yi00NDQ0LWE5MjctNjc4YmZlY2JmNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyvq37fjsHQd/00li1lhWJz40a7V+mLNX3rd 9da3wmd3Zuimxwk7BZ7WTPWmgYFBGhc+FVOh0M6tZW9vvm9aGOzcoatFVX0P+y1T MWwqEgD0H8ngE9RJGUdQrgjEW5+nQ/div+dAyntitsguk0n4MZJHliWI+BK5yYq0 ZJmMXtt0zQBQg97Q4nSKg4YTY7f+rVKlxIi7EzSXhQ8mSu1ikwC0FRzNxtsHIB1c 9zpPy6nCd5qPessfBoUrqZZXg6uGvlM0sx2lOds6HlxIs3ipWHD/33xcT8sBcuLa Q/Uo5BuZh6/Pc3TztuXu+syjLnZWzbwJK5+XbnSfUU17X49BQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRU57oz5HhM+Qcz2SKvx8wZT039MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY5NGE2MjktNzllYi0z NjhhLTliOGYtNTY3MTVkNzBjNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgQEZYFcj/0uqH+T+BAdH/cZJOrvh9M2AvneXi9kSd+E7+thYxV10fd XXYfc23UZ0HzKP0OHhN0nwJT3CssyTdeVkg+qc7V9z68pBvCH8xuOfoBaa+rlymj eEEqMHc3QotqfCwiSVK9HANQjrlhoAzNkz2HlwjyhX8QxczKPd2Dcio9TXKLNIsO ZcYEz58aQeP9ztLtS+aZ1YidXgHt1chCFd+zUJD/rNkz0gZM1bb1QrfQzlagpUO3 ZZ4WBhZYVscOYz3y3r/i5SDG/oNgfgSInCEeKc8cm8FGIJrQ1+xLiKCUslpwtgQT l0isnhFDB67+50sC0balaDRQKo7Yj/Q= -----END CERTIFICATE-----Generated at Wed May 13 11:39:35 2026 by rpki-client