$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa File: 736dd3da-b7fc-332b-a64b-9670e8707f23.roa (raw, json) Hash identifier: k+foDp1/xnubQN0MNE+sZV01717CB+d0pC0U6C67mm0= Subject key identifier: 4C:42:E6:56:AB:2D:DD:31:89:6F:93:AA:C4:EF:00:0F:73:27:A7:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3DFFE4802261539DC7BAC960 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 71.29.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e4:80:22:61:53:9d:c7:ba:c9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ffb5fd88-a6b2-4dc0-808b-4497b13ff0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:cf:a4:76:48:c5:cc:4d:df:a3:96:70:e8: 5f:54:3d:84:0f:ae:2f:36:b2:5b:59:61:bc:5a:5f: 9b:ca:1a:fb:0e:84:ea:47:01:c0:6a:98:81:63:ff: fa:ce:7d:6b:8f:97:2f:94:0d:8f:1c:41:74:ba:37: 34:76:26:1d:2a:41:e7:1d:97:6e:6e:3f:94:ad:dd: 09:75:11:0b:90:d7:b4:d9:b0:dc:73:7e:ce:0e:4f: de:c6:e1:90:72:ce:dd:e1:07:aa:47:25:a3:4f:5e: a7:f8:be:f9:58:47:83:d6:5a:dc:d6:a1:60:f5:52: 48:48:d4:e7:99:3a:6f:7f:0e:4e:a9:05:08:73:2e: 84:02:0c:0a:2f:5d:1a:78:e8:a1:ab:41:fe:88:41: 14:35:a9:91:1b:a0:5b:c0:e5:c2:c2:34:40:6d:f6: ce:31:4e:f6:13:9f:42:25:4e:9a:31:12:8d:09:d5: f8:27:7e:33:de:ee:3c:90:96:17:fa:86:e6:a6:3f: 32:10:79:bd:ac:01:66:a2:21:90:d4:da:0d:72:95: b8:e7:87:85:19:4d:55:1a:e1:fc:d9:20:ff:8f:fd: 00:e8:d5:b2:70:79:46:5c:c6:5a:0c:8b:60:4e:d4: a2:6c:d0:b4:a4:2e:90:c4:62:cd:99:4f:4b:a6:d4: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:42:E6:56:AB:2D:DD:31:89:6F:93:AA:C4:EF:00:0F:73:27:A7:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a3:3c:3d:f6:25:14:96:41:4d:c0:5a:9e:51:2b:28:26:7f: fc:71:0e:d2:84:a6:03:b7:e7:59:27:61:9a:cc:1d:cb:fc:d0: 15:bd:13:f3:48:fc:d3:4f:56:44:a8:c9:37:eb:7e:d7:bb:d0: 30:1c:6e:1d:72:4d:dd:6e:cf:1f:54:96:92:3b:ec:af:e1:20: d9:4b:a0:e5:dc:60:18:f0:41:85:7f:8d:d2:78:f5:b5:9b:57: e3:5e:64:ae:64:7d:83:f7:fc:01:44:fa:b5:03:48:ab:06:6b: d0:0f:db:66:c3:1f:dc:10:71:83:b4:70:3f:ec:3b:ce:b0:1b: 5a:cc:31:f7:75:8e:bd:6b:df:be:4e:12:b2:52:c9:7c:59:e7: aa:74:84:c1:1d:de:e1:6a:84:4e:e6:9f:d1:9f:26:39:bc:48: db:5f:91:c2:0f:37:ca:bd:cc:da:1d:0b:21:28:88:04:50:00: 88:03:71:eb:77:45:d9:17:95:29:92:42:47:ff:23:86:d5:c6: 0c:54:b7:44:e0:d4:a8:70:8c:31:5b:de:73:3a:13:48:0e:74: 3e:00:ba:e7:13:79:52:b4:16:6d:70:b5:18:b4:28:52:ac:49: 95:6e:eb:18:6b:0e:a7:f6:f6:21:68:a9:25:66:08:b4:bd:80: cd:50:4b:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+SAImFTnce6yWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZmZiNWZkODgtYTZiMi00ZGMwLTgwOGItNDQ5N2IxM2ZmMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKTPpHZIxcxN36OWcOhfVD2ED64vNrJbWWG8 Wl+byhr7DoTqRwHAapiBY//6zn1rj5cvlA2PHEF0ujc0diYdKkHnHZdubj+Urd0J dRELkNe02bDcc37ODk/exuGQcs7d4QeqRyWjT16n+L75WEeD1lrc1qFg9VJISNTn mTpvfw5OqQUIcy6EAgwKL10aeOihq0H+iEEUNamRG6BbwOXCwjRAbfbOMU72E59C JU6aMRKNCdX4J34z3u48kJYX+obmpj8yEHm9rAFmoiGQ1NoNcpW454eFGU1VGuH8 2SD/j/0A6NWycHlGXMZaDItgTtSibNC0pC6QxGLNmU9LptTJlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExC5larLd0xiW+TqsTvAA9zJ6dlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzM2ZGQzZGEtYjdmYy0z MzJiLWE2NGItOTY3MGU4NzA3ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmjPD32JRSWQU3AWp5RKygmf/xxDtKEpgO351knYZrMHcv80BW9E/NI /NNPVkSoyTfrfte70DAcbh1yTd1uzx9UlpI77K/hINlLoOXcYBjwQYV/jdJ49bWb V+NeZK5kfYP3/AFE+rUDSKsGa9AP22bDH9wQcYO0cD/sO86wG1rMMfd1jr1r375O ErJSyXxZ56p0hMEd3uFqhE7mn9GfJjm8SNtfkcIPN8q9zNodCyEoiARQAIgDcet3 RdkXlSmSQkf/I4bVxgxUt0Tg1KhwjDFb3nM6E0gOdD4AuucTeVK0Fm1wtRi0KFKs SZVu6xhrDqf29iFoqSVmCLS9gM1QS/E= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:35 2026 by rpki-client