$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa File: 555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa (raw, json) Hash identifier: 79QFfdIZh73YU9er54+s1KvKwLKZXVMlLzu11/43rVo= Subject key identifier: 2D:C2:9A:F6:7C:DC:72:0A:56:6C:4D:CC:61:09:43:44:43:35:0C:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA9CBA9EE92933036D7E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 71.29.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a9:cb:a9:ee:92:93:30:36:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c7250803-c5a1-4a0f-b0a1-33e68ce09e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:b6:a5:04:6f:d0:8a:61:54:22:b1:9b:04: 66:ef:4b:97:34:9e:2c:dc:8e:bd:91:e4:e0:1e:98: 40:6b:d1:b6:64:20:ab:5e:7b:6d:80:02:c3:3e:80: 30:a6:01:54:3e:81:38:b9:e3:70:7c:ac:ec:f3:7a: 12:44:b0:45:9e:e9:00:9b:84:82:d1:78:9f:fb:cc: c5:0c:22:1e:dc:b1:6a:12:27:89:49:39:4c:fa:cf: d5:95:52:a7:ec:6e:ed:8d:05:9f:d3:f3:e9:d5:2a: 27:7e:e9:3a:a9:6d:dd:af:51:ec:26:b2:2c:d1:e9: ac:5c:3c:19:2f:c2:24:db:68:ef:8c:1b:ff:1b:ed: cc:85:f8:0d:e8:33:77:ff:f1:ab:f8:4d:28:4f:2b: c2:c4:ba:5d:e8:bb:e1:9b:82:0c:a5:6d:53:19:50: 0a:2d:8e:32:c5:3e:d5:06:f4:23:fe:21:7f:c9:71: e1:73:73:92:c4:83:17:70:d8:9a:90:ba:ec:04:cf: 85:9d:18:9f:60:60:17:c4:f1:14:0d:19:2c:7a:1b: f8:e6:21:01:0f:26:99:42:ce:8b:71:ef:03:1e:54: 74:f9:c4:3c:02:ab:7a:30:59:ba:39:6a:ef:61:51: 0f:38:52:39:84:fe:5b:f1:5a:84:0a:bc:7f:b9:d3: 5a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C2:9A:F6:7C:DC:72:0A:56:6C:4D:CC:61:09:43:44:43:35:0C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:28:d5:ee:3a:d4:68:9b:6b:c6:c6:b3:bc:16:e8:36:d4:c0: 28:59:8c:ff:6d:e5:f9:b0:63:14:d0:a8:04:0e:a8:6c:aa:6a: b4:27:9f:d9:b7:2c:a0:29:02:1a:c2:60:ec:37:e1:26:99:8b: 98:6b:db:03:70:3b:7e:83:9c:cc:39:1b:1b:2c:4e:11:a1:65: 5f:d1:15:45:a7:20:d7:90:5e:a5:1c:e9:9d:de:64:b0:da:9d: 44:9a:d9:c1:c7:8f:1f:e2:48:f7:dd:29:40:92:93:60:45:cc: ed:b5:ea:1a:18:a8:dc:c3:9a:d8:fa:2c:ed:35:3a:8a:0b:50: e5:9f:7b:b3:cb:4d:48:be:5e:96:7e:9d:5b:a5:d2:7f:57:e1: c3:8b:18:26:7b:f2:6c:ee:31:eb:5c:86:b1:f7:88:6a:14:b1: e5:38:f8:a0:44:a1:8e:41:b8:c8:a9:41:8b:58:4a:88:33:c4: d0:a9:aa:9a:15:cb:18:eb:6e:f8:16:0c:d2:42:51:5f:d6:b0: c7:9c:b8:e1:4e:c8:5e:93:b1:fd:41:c8:08:a5:ba:8a:28:28: b4:f4:ea:21:b8:09:5e:be:a7:49:38:0b:a2:70:fc:57:9c:9d: 7f:ee:05:9e:93:2a:e4:8b:5b:db:24:df:d2:95:f4:60:4e:c6: 73:a0:4c:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqnLqe6SkzA21+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzcyNTA4MDMtYzVhMS00YTBmLWIwYTEtMzNlNjhjZTA5ZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKS2pQRv0IphVCKxmwRm70uXNJ4s3I69keTg HphAa9G2ZCCrXnttgALDPoAwpgFUPoE4ueNwfKzs83oSRLBFnukAm4SC0Xif+8zF DCIe3LFqEieJSTlM+s/VlVKn7G7tjQWf0/Pp1Sonfuk6qW3dr1HsJrIs0emsXDwZ L8Ik22jvjBv/G+3MhfgN6DN3//Gr+E0oTyvCxLpd6Lvhm4IMpW1TGVAKLY4yxT7V BvQj/iF/yXHhc3OSxIMXcNiakLrsBM+FnRifYGAXxPEUDRksehv45iEBDyaZQs6L ce8DHlR0+cQ8Aqt6MFm6OWrvYVEPOFI5hP5b8VqECrx/udNaOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3CmvZ83HIKVmxNzGEJQ0RDNQxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU1ZmY5N2ItN2RiNS0z MGNjLThlMGMtZWE0MDJiNzc5ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEo1e461Giba8bGs7wW6DbUwChZjP9t5fmwYxTQqAQOqGyqarQnn9m3 LKApAhrCYOw34SaZi5hr2wNwO36DnMw5GxssThGhZV/RFUWnINeQXqUc6Z3eZLDa nUSa2cHHjx/iSPfdKUCSk2BFzO216hoYqNzDmtj6LO01OooLUOWfe7PLTUi+XpZ+ nVul0n9X4cOLGCZ78mzuMetchrH3iGoUseU4+KBEoY5BuMipQYtYSogzxNCpqpoV yxjrbvgWDNJCUV/WsMecuOFOyF6Tsf1ByAiluoooKLT06iG4CV6+p0k4C6Jw/Fec nX/uBZ6TKuSLW9sk39KV9GBOxnOgTBI= -----END CERTIFICATE-----Generated at Thu Mar 26 12:28:58 2026 by rpki-client