$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a34c0e0-6991-31e7-83b5-c94b71053679.roa File: 5a34c0e0-6991-31e7-83b5-c94b71053679.roa (raw, json) Hash identifier: H1CXuXoDWIJDhnTDnGMxAUdaLdxw7EWQxqvfaMi0LUY= Subject key identifier: 09:CE:D5:16:49:52:83:4B:12:2C:5C:26:FC:04:01:8C:EE:08:A9:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A56064A4A9B1DDE76FE60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a34c0e0-6991-31e7-83b5-c94b71053679.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 71.30.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:56:06:4a:4a:9b:1d:de:76:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=39182458-ae42-4efd-ab34-865025255e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:44:f8:67:0c:7e:9f:e9:57:e7:b7:07:cc:64: 35:40:b8:e8:12:39:60:f6:90:46:33:c2:e0:a7:6e: 8e:83:4e:32:aa:37:95:93:0d:ac:5f:2b:3c:5e:87: f8:32:4a:50:80:fc:66:f1:42:53:8e:ed:08:da:6c: 59:14:a5:40:70:a3:8e:ef:9b:2c:67:02:58:a0:8c: a0:01:b7:20:6d:fe:99:5e:8d:e3:11:d2:f9:f7:a7: 74:1e:2b:86:d8:29:83:ac:6a:d4:65:c0:fb:04:f8: 35:c4:1d:bd:89:9b:e3:6d:99:74:ae:39:ee:fb:53: 51:81:ee:0a:a6:9c:68:d0:cf:7e:58:aa:3a:8d:e0: 21:bc:d8:14:9f:fa:c1:d9:bc:2f:cb:b0:33:f2:55: ce:40:ef:51:c3:aa:48:cb:6b:93:6f:15:5e:c3:a7: 78:07:f9:40:c0:23:85:26:e4:a2:ae:b6:04:61:11: ca:64:b1:40:ce:63:20:18:34:71:a8:ea:c3:a4:8a: 38:0a:54:cc:37:e6:ac:40:7c:77:eb:f2:64:4d:f5: de:9d:ff:cf:bb:1a:74:e4:a8:8b:ac:d8:7d:8f:83: f9:bf:b6:cb:0c:18:2b:6b:f7:b7:f0:d1:d7:f0:c4: d1:36:ec:d4:c4:20:c9:bc:b7:9f:58:f4:02:06:49: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CE:D5:16:49:52:83:4B:12:2C:5C:26:FC:04:01:8C:EE:08:A9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a34c0e0-6991-31e7-83b5-c94b71053679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:dd:c6:f7:1c:2a:0c:84:64:18:b6:e0:24:35:b1:d1:9a:72: 97:46:1b:d6:0e:f3:9a:79:d4:30:26:5c:db:3f:c7:58:c3:32: b0:ed:c7:ed:e4:37:d3:1b:d5:98:73:f4:ca:bc:47:3f:43:c3: 82:41:98:2b:52:6d:b2:b9:b2:f1:e5:e2:09:65:84:01:77:63: 86:64:6f:7a:1d:37:90:81:d5:53:30:b1:46:46:44:c3:8b:55: a3:a6:91:2a:8f:a2:47:27:4b:b2:5a:f4:4d:f7:3f:c2:fb:32: 4e:75:46:e9:b2:30:fb:dc:13:7b:81:e8:8f:34:52:03:f2:6c: aa:10:81:3d:d8:20:11:67:d7:02:c5:27:ca:88:b9:15:36:88: 19:49:f2:e1:8f:7c:e6:15:40:80:e2:eb:a1:c0:f7:e0:b4:b5: 8a:0e:e6:45:77:a6:d3:ec:2f:76:84:c8:b2:61:36:84:1c:81: 97:e4:1c:e1:22:53:40:12:08:fd:e5:84:37:4f:3f:85:31:bd: 47:6e:f3:0c:7e:10:f3:1d:a1:2d:43:4e:80:12:7b:6a:ac:70: 3d:65:9a:7e:f9:6c:d2:45:43:43:80:77:43:60:f5:82:2c:57: 48:b3:44:a6:b4:21:5c:d3:65:54:77:01:0d:63:ab:c9:18:ad: 8b:fa:7f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alYGSkqbHd52/mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MzkxODI0NTgtYWU0Mi00ZWZkLWFiMzQtODY1MDI1MjU1ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkT4Zwx+n+lX57cHzGQ1QLjoEjlg9pBGM8Lg p26Og04yqjeVkw2sXys8Xof4MkpQgPxm8UJTju0I2mxZFKVAcKOO75ssZwJYoIyg Abcgbf6ZXo3jEdL596d0HiuG2CmDrGrUZcD7BPg1xB29iZvjbZl0rjnu+1NRge4K ppxo0M9+WKo6jeAhvNgUn/rB2bwvy7Az8lXOQO9Rw6pIy2uTbxVew6d4B/lAwCOF JuSirrYEYRHKZLFAzmMgGDRxqOrDpIo4ClTMN+asQHx36/JkTfXenf/Puxp05KiL rNh9j4P5v7bLDBgra/e38NHX8MTRNuzUxCDJvLefWPQCBklHzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnO1RZJUoNLEixcJvwEAYzuCKnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWEzNGMwZTAtNjk5MS0z MWU3LTgzYjUtYzk0YjcxMDUzNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/dxvccKgyEZBi24CQ1sdGacpdGG9YO85p51DAmXNs/x1jDMrDtx+3k N9Mb1Zhz9Mq8Rz9Dw4JBmCtSbbK5svHl4gllhAF3Y4Zkb3odN5CB1VMwsUZGRMOL VaOmkSqPokcnS7Ja9E33P8L7Mk51RumyMPvcE3uB6I80UgPybKoQgT3YIBFn1wLF J8qIuRU2iBlJ8uGPfOYVQIDi66HA9+C0tYoO5kV3ptPsL3aEyLJhNoQcgZfkHOEi U0ASCP3lhDdPP4UxvUdu8wx+EPMdoS1DToASe2qscD1lmn75bNJFQ0OAd0Ng9YIs V0izRKa0IVzTZVR3AQ1jq8kYrYv6fzQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:18 2026 by rpki-client