$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7892fcd0-4501-3e1c-a4be-e01561b18ffa.roa File: 7892fcd0-4501-3e1c-a4be-e01561b18ffa.roa (raw, json) Hash identifier: tzh9uEmp6CDJHWG061jKXID9XQSRvzh2XFveOw2cb8Y= Subject key identifier: D9:0D:D9:5B:72:D1:54:5C:FE:0C:C8:9C:5C:7D:A7:38:18:64:AF:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7D963FC0873FA5CA5A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7892fcd0-4501-3e1c-a4be-e01561b18ffa.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 71.7.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7d:96:3f:c0:87:3f:a5:ca:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=789634a5-9194-460c-a1b1-057a9889e967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:89:33:ab:90:b8:f9:5c:df:79:4d:08:f4: fb:35:b4:d9:c5:d5:73:97:aa:9e:9f:8a:ef:3d:b1: d8:a8:fd:18:03:10:55:4b:ec:4c:7a:ae:2b:03:40: 74:af:be:73:06:55:ed:e4:18:32:a7:67:84:d1:f6: 2b:bf:08:9b:fc:91:08:1b:3c:36:d5:b8:da:90:3d: cd:e1:f0:fd:89:0b:d8:0b:df:b4:2a:f3:dc:c5:fe: df:16:8a:63:8e:6d:29:53:fe:5d:b6:51:1c:4e:b2: b8:aa:a1:7a:ae:dd:d6:96:4d:9f:c9:eb:3c:33:6f: 17:8f:8e:e5:d1:2a:87:54:f8:86:74:43:cc:0c:1b: d8:c5:b4:b9:fd:a3:2e:5c:dd:25:ee:1c:6c:59:65: 96:30:15:fa:5b:d6:b4:c9:19:d8:6c:65:88:d7:7e: 3e:c7:ce:de:10:3c:1d:86:15:fc:85:79:db:b4:aa: 52:2d:a0:c6:9a:b0:b8:25:16:74:5f:6d:ac:c2:28: 53:ef:54:e9:1a:e3:df:f1:10:e5:9c:cb:de:a9:82: 9b:12:0b:44:1d:36:6b:bf:b1:65:13:f5:bf:9d:02: 53:d4:cc:28:38:59:56:09:74:0d:db:a2:d5:6f:06: df:0b:23:dc:a1:e5:72:96:d9:9a:bc:fe:87:eb:8d: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0D:D9:5B:72:D1:54:5C:FE:0C:C8:9C:5C:7D:A7:38:18:64:AF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7892fcd0-4501-3e1c-a4be-e01561b18ffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:49:57:26:f5:7b:a8:65:5a:0e:be:83:89:48:e8:bf:83:f7: 18:a6:1e:cd:f4:12:5d:78:8f:c5:98:86:4b:7a:da:13:5d:60: 04:bd:af:13:77:64:fb:ea:c6:b5:c4:25:56:a4:ad:d9:f6:27: 20:3c:04:9c:3a:bc:36:2b:39:50:d6:c4:ac:d4:63:42:ae:b7: 55:0f:63:6d:4b:35:44:68:ab:aa:5a:45:e7:5f:3d:c5:6b:52: 6b:01:fb:b3:b4:06:d9:be:e1:50:25:1c:db:12:fa:32:d1:70: 6b:6f:ed:4d:15:f3:d5:a0:69:cf:84:bf:ae:84:e8:a7:5e:45: a8:a6:5c:a2:d9:bf:bd:44:9d:e6:d7:1b:d5:6b:52:a7:3e:93: 75:26:6e:db:cc:ae:b3:24:a8:ce:70:2a:0e:c5:95:9d:69:ed: 33:af:61:d0:ff:39:2b:b1:fe:13:e6:88:fb:b4:c3:e4:ec:67: 46:50:90:85:70:66:cc:b9:95:d7:9f:c2:c9:97:9b:79:ef:f6: 4a:56:8e:00:bb:74:59:d8:79:2d:c1:d4:9b:4f:9e:00:a7:a2: 5e:f6:47:ef:a8:44:26:5e:2b:2d:11:b2:46:9f:b6:34:de:97: f1:15:55:b6:1b:33:d7:b1:48:d7:73:78:cf:10:13:d9:f8:41: d7:dc:72:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCn2WP8CHP6XKWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Nzg5NjM0YTUtOTE5NC00NjBjLWExYjEtMDU3YTk4ODllOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi2JM6uQuPlc33lNCPT7NbTZxdVzl6qen4rv PbHYqP0YAxBVS+xMeq4rA0B0r75zBlXt5Bgyp2eE0fYrvwib/JEIGzw21bjakD3N 4fD9iQvYC9+0KvPcxf7fFopjjm0pU/5dtlEcTrK4qqF6rt3Wlk2fyes8M28Xj47l 0SqHVPiGdEPMDBvYxbS5/aMuXN0l7hxsWWWWMBX6W9a0yRnYbGWI134+x87eEDwd hhX8hXnbtKpSLaDGmrC4JRZ0X22swihT71TpGuPf8RDlnMveqYKbEgtEHTZrv7Fl E/W/nQJT1MwoOFlWCXQN26LVbwbfCyPcoeVyltmavP6H642/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkN2Vty0VRc/gzInFx9pzgYZK8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg5MmZjZDAtNDUwMS0z ZTFjLWE0YmUtZTAxNTYxYjE4ZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRwd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxJVyb1e6hlWg6+g4lI6L+D9ximHs30El14j8WYhkt62hNdYAS9rxN3 ZPvqxrXEJVakrdn2JyA8BJw6vDYrOVDWxKzUY0Kut1UPY21LNURoq6paRedfPcVr UmsB+7O0Btm+4VAlHNsS+jLRcGtv7U0V89Wgac+Ev66E6KdeRaimXKLZv71EnebX G9VrUqc+k3UmbtvMrrMkqM5wKg7FlZ1p7TOvYdD/OSux/hPmiPu0w+TsZ0ZQkIVw Zsy5ldefwsmXm3nv9kpWjgC7dFnYeS3B1JtPngCnol72R++oRCZeKy0RskaftjTe l/EVVbYbM9exSNdzeM8QE9n4QdfccoM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:35 2026 by rpki-client