$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa File: 7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa (raw, json) Hash identifier: 2yfSeOhomG8R91M9iHT9UZr+uUHAdEEXM+AMq2p1BwA= Subject key identifier: 0D:D0:0A:A8:D8:0D:FC:6B:6B:7F:3C:84:59:9B:CC:3D:E4:B0:02:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F867FFFC12162A98B0300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 71.30.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:86:7f:ff:c1:21:62:a9:8b:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8d9c2622-67e2-40a7-ac24-8af227131391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:3e:52:1e:ad:f4:71:8f:52:0f:e5:7f:b6: 3c:aa:bb:ae:8c:d1:48:b3:a9:a9:ff:62:93:5c:93: 66:1a:b1:61:00:72:cc:e2:8c:4d:84:86:3a:2f:02: 57:94:90:71:c4:41:8e:27:71:80:b9:be:00:fb:98: 37:3f:d0:82:14:9a:6f:e8:56:e4:97:1e:74:68:0d: 4a:19:56:7c:d1:89:bb:19:70:af:01:6d:ed:d2:ee: f8:77:54:54:a9:be:9e:72:21:cf:8b:bd:9c:c8:4d: 55:f3:ef:b7:5b:4d:02:05:6c:06:12:2a:b3:6a:f2: 20:63:91:71:7c:b3:80:0b:f8:1a:cf:45:54:48:9c: 51:bd:be:7c:1a:ec:be:70:67:0d:7b:c1:83:b0:a3: 58:68:9e:e9:47:76:64:83:e2:3b:ce:3e:dd:eb:0f: 12:1b:93:36:37:68:d1:6b:79:c7:40:30:27:0f:1a: c7:8a:cb:2f:26:84:98:14:2e:ab:25:8f:38:b6:a0: 5e:94:a4:d6:37:d5:6e:3c:1a:d2:00:61:d2:69:35: ea:31:8c:f6:05:d2:74:f8:d5:ca:47:3b:b6:11:1f: 4f:4c:2d:12:78:8c:44:d8:e4:fc:71:5b:43:cb:05: 08:61:bf:02:b9:7c:4e:0f:9b:bf:83:fe:96:b4:e9: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D0:0A:A8:D8:0D:FC:6B:6B:7F:3C:84:59:9B:CC:3D:E4:B0:02:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d4:9d:01:c2:99:fa:bb:85:74:bb:e2:bd:63:10:5e:37:10: 98:97:82:d2:66:c1:c4:16:e0:72:27:fd:d9:86:92:68:d7:d8: 46:53:73:b5:ed:81:8e:5f:0e:00:95:f5:d7:79:20:23:8d:12: d6:1d:26:ab:3a:cf:73:59:79:59:de:31:2e:87:8e:3d:f4:c0: e1:09:ae:4a:8d:36:d6:98:06:6d:b8:97:d9:9d:fc:24:0b:26: 51:d7:59:71:15:37:1f:31:ad:43:cb:a0:8c:cf:d9:19:12:0b: 4a:e3:a9:57:42:60:f2:05:6e:f3:05:24:f2:22:46:fe:45:b7: f9:96:93:a1:4d:e4:83:77:2f:a8:22:7d:83:a6:14:07:9d:8e: 29:07:9b:c0:80:c3:e4:fd:e5:b1:17:a7:c1:bc:e5:b1:69:fd: 51:ac:34:9a:44:ff:c9:2a:bc:b3:ef:f1:e1:38:2b:61:b2:30: 5a:14:3c:48:f8:1e:77:b1:32:b2:62:ec:8d:f3:ca:98:a7:38: 73:01:ba:84:1c:a2:eb:f6:a3:54:0f:5e:17:b4:83:bb:ca:88: ba:f5:e4:21:35:c8:8e:71:b7:d8:4b:d0:1a:a6:b8:89:0e:d8: 80:60:52:3f:46:23:0c:b8:fc:a9:ac:aa:e3:a0:76:1b:59:24: f4:50:23:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4Z//8EhYqmLAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OGQ5YzI2MjItNjdlMi00MGE3LWFjMjQtOGFmMjI3MTMxMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlI+Uh6t9HGPUg/lf7Y8qruujNFIs6mp/2KT XJNmGrFhAHLM4oxNhIY6LwJXlJBxxEGOJ3GAub4A+5g3P9CCFJpv6Fbklx50aA1K GVZ80Ym7GXCvAW3t0u74d1RUqb6eciHPi72cyE1V8++3W00CBWwGEiqzavIgY5Fx fLOAC/gaz0VUSJxRvb58Guy+cGcNe8GDsKNYaJ7pR3Zkg+I7zj7d6w8SG5M2N2jR a3nHQDAnDxrHissvJoSYFC6rJY84tqBelKTWN9VuPBrSAGHSaTXqMYz2BdJ0+NXK Rzu2ER9PTC0SeIxE2OT8cVtDywUIYb8CuXxOD5u/g/6WtOmCzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3QCqjYDfxra388hFmbzD3ksAIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2E5YWM4ZjQtOTdlOS0z Zjc1LWE1N2YtMGQwOGQ1NTM4NjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTUnQHCmfq7hXS74r1jEF43EJiXgtJmwcQW4HIn/dmGkmjX2EZTc7Xt gY5fDgCV9dd5ICONEtYdJqs6z3NZeVneMS6Hjj30wOEJrkqNNtaYBm24l9md/CQL JlHXWXEVNx8xrUPLoIzP2RkSC0rjqVdCYPIFbvMFJPIiRv5Ft/mWk6FN5IN3L6gi fYOmFAedjikHm8CAw+T95bEXp8G85bFp/VGsNJpE/8kqvLPv8eE4K2GyMFoUPEj4 HnexMrJi7I3zypinOHMBuoQcouv2o1QPXhe0g7vKiLr15CE1yI5xt9hL0BqmuIkO 2IBgUj9GIwy4/KmsquOgdhtZJPRQIyk= -----END CERTIFICATE-----Generated at Thu Mar 26 12:43:32 2026 by rpki-client