$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59f1cf2f-5688-3047-b77c-95886deac729.roa File: 59f1cf2f-5688-3047-b77c-95886deac729.roa (raw, json) Hash identifier: oyLEd7vvLw1ITxnWBqZXKllRSHnAOjcD5th11CJhKXg= Subject key identifier: 27:50:AD:CB:55:EE:9A:7C:26:B8:48:17:FF:E4:4C:D8:17:0A:7E:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8E8A5E4221CCBA897700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59f1cf2f-5688-3047-b77c-95886deac729.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 71.29.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:8e:8a:5e:42:21:cc:ba:89:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=1b60de05-e93c-4da0-a867-7931fce9a39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:97:4a:6f:bc:7c:72:9d:16:81:5f:e6:71:02: 11:ff:a2:54:be:53:d5:a4:0f:2d:bd:5e:3e:a8:ad: 52:f4:6a:08:15:54:40:fc:dd:c1:1e:f8:f5:14:d9: 57:de:18:ac:a3:1a:ce:58:ef:41:17:2d:79:00:b5: 91:98:46:ac:c7:b5:95:bf:71:ae:4d:2d:b0:51:ee: e9:89:9f:65:94:8f:a4:ca:61:e0:18:45:05:3e:70: 3b:bf:80:15:95:b0:0f:7d:f0:7a:f1:93:35:52:d9: 32:6e:e4:f5:4e:2b:cd:6b:17:78:6e:10:01:e6:50: 32:f3:3c:49:4f:51:49:64:ba:66:96:de:1b:34:92: dd:ff:74:e7:5f:ce:fe:cc:3a:c2:b6:e9:a8:36:09: e9:ce:0d:51:4f:2c:c4:cd:ea:66:a8:6e:83:8e:3a: 60:f5:61:46:fb:71:18:9f:33:c5:20:20:67:ba:13: 24:95:2a:d6:c9:d7:e1:f9:14:d8:cb:e6:3c:07:75: ab:57:26:64:ab:94:29:ec:3d:d9:85:37:06:2e:c2: ef:01:b3:28:53:dd:9f:8e:30:2d:d6:8e:1a:86:d5: 1b:4c:c6:91:1a:be:ef:99:45:75:4d:e3:81:c5:61: 6a:30:a4:5c:ad:d2:79:97:b4:25:de:f3:ef:c4:5c: 34:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:50:AD:CB:55:EE:9A:7C:26:B8:48:17:FF:E4:4C:D8:17:0A:7E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59f1cf2f-5688-3047-b77c-95886deac729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f7:51:58:1d:3b:e7:a2:2a:97:db:74:60:b5:05:59:25:bf: f0:31:76:eb:2a:4d:37:be:c3:f5:ac:cb:18:6d:73:aa:09:39: 2f:b1:8c:38:4e:84:e2:76:e6:f1:37:c6:57:c9:24:77:5e:aa: cd:ab:d1:df:a2:70:5a:eb:2e:97:e0:0b:48:1d:a0:d3:46:98: d8:5e:b1:21:23:37:e0:6e:be:a4:57:20:c1:a1:98:46:20:c8: 7e:c7:10:e7:e8:67:da:4a:91:a5:fa:d3:46:bf:cc:00:be:40: 1f:8a:5b:cb:09:9c:d7:9f:6d:48:8d:75:4f:9d:f8:f0:7d:ce: b8:b0:ab:22:0f:7f:5c:01:63:22:2a:cc:b0:c4:cf:21:9a:80: 2e:cb:8e:a1:81:34:24:2c:68:ee:b0:68:c3:38:0b:3b:e3:b9: 9a:e7:75:42:25:8b:27:4b:f7:a2:95:e1:f5:41:2a:ce:98:94: 50:17:32:77:5f:cf:e4:2d:d0:ed:82:6e:b0:95:5b:8c:f4:91: a8:c1:30:92:e5:41:39:42:77:73:9c:7e:f3:c9:fa:12:23:81: e9:61:0c:1d:7f:7e:65:d6:51:fa:fd:f7:54:7f:84:71:07:13: 08:94:b8:15:f2:65:92:95:21:04:53:0e:22:9c:d0:42:9c:fe: 90:c3:e2:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP46KXkIhzLqJdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MWI2MGRlMDUtZTkzYy00ZGEwLWE4NjctNzkzMWZjZTlhMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJdKb7x8cp0WgV/mcQIR/6JUvlPVpA8tvV4+ qK1S9GoIFVRA/N3BHvj1FNlX3hisoxrOWO9BFy15ALWRmEasx7WVv3GuTS2wUe7p iZ9llI+kymHgGEUFPnA7v4AVlbAPffB68ZM1UtkybuT1TivNaxd4bhAB5lAy8zxJ T1FJZLpmlt4bNJLd/3TnX87+zDrCtumoNgnpzg1RTyzEzepmqG6Djjpg9WFG+3EY nzPFICBnuhMklSrWydfh+RTYy+Y8B3WrVyZkq5Qp7D3ZhTcGLsLvAbMoU92fjjAt 1o4ahtUbTMaRGr7vmUV1TeOBxWFqMKRcrdJ5l7Ql3vPvxFw0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdQrctV7pp8JrhIF//kTNgXCn6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTlmMWNmMmYtNTY4OC0z MDQ3LWI3N2MtOTU4ODZkZWFjNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI73UVgdO+eiKpfbdGC1BVklv/AxdusqTTe+w/Wsyxhtc6oJOS+xjDhO hOJ25vE3xlfJJHdeqs2r0d+icFrrLpfgC0gdoNNGmNhesSEjN+BuvqRXIMGhmEYg yH7HEOfoZ9pKkaX600a/zAC+QB+KW8sJnNefbUiNdU+d+PB9zriwqyIPf1wBYyIq zLDEzyGagC7LjqGBNCQsaO6waMM4CzvjuZrndUIliydL96KV4fVBKs6YlFAXMndf z+Qt0O2CbrCVW4z0kajBMJLlQTlCd3OcfvPJ+hIjgelhDB1/fmXWUfr991R/hHEH EwiUuBXyZZKVIQRTDiKc0EKc/pDD4jc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:19 2026 by rpki-client