$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa File: 95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa (raw, json) Hash identifier: 99cDHa9PCznH+5kqi+85eP5fJcbnrOw16S76j3DafRs= Subject key identifier: F3:E8:4B:36:E6:D7:80:67:FA:5D:AA:45:A7:BF:A4:F1:9F:94:07:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F85C1B47A80CC8F2EB240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 71.29.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:85:c1:b4:7a:80:cc:8f:2e:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=a86145b9-5538-4031-881d-acd31729361a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:5d:d9:45:34:88:05:af:7d:45:01:6a:2f: 68:3e:65:4d:27:82:4f:a8:75:f7:f3:6c:f7:b9:a6: 72:c2:6b:3c:01:c8:86:30:81:78:c4:85:06:4f:0f: 23:87:5e:e6:04:6d:96:9d:89:95:d6:eb:dc:f5:20: 39:bf:f0:73:50:22:27:f2:4a:13:0d:a7:92:01:ec: 28:9e:46:a5:ae:81:66:c7:80:1e:67:bf:44:bc:b2: bc:2a:d3:a0:cf:6a:d4:95:6a:6e:f4:17:7c:b9:db: b3:3d:91:9f:c8:0f:4a:62:62:2f:56:cc:ba:ad:02: 9f:06:72:86:23:43:c3:42:e0:80:bd:9b:07:7a:ec: a5:f4:22:20:f6:f0:f1:c2:d1:d1:6a:08:d8:e4:0b: c4:f1:2b:e9:1f:cb:8c:7f:b8:54:26:5c:68:09:4d: 9b:67:bd:47:39:41:ed:fb:83:2f:d2:64:b6:21:b4: c3:1d:a7:b8:ea:f8:9d:31:a0:85:61:8b:30:39:71: a1:fb:d9:84:be:dc:95:ac:2e:9a:1a:2f:cb:c9:dd: 36:30:51:8d:aa:55:53:cb:90:c7:5f:42:ab:0c:64: f1:54:d5:6b:25:89:a4:a4:83:72:20:56:08:a8:ca: 89:24:11:c6:95:20:f1:a7:76:ab:5e:29:db:a1:ed: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E8:4B:36:E6:D7:80:67:FA:5D:AA:45:A7:BF:A4:F1:9F:94:07:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:55:e7:7b:9c:cd:a1:d6:11:f2:5d:0c:b4:f2:3f:d8:b4:40: 8a:b6:a3:5b:5e:07:c7:57:22:39:6a:6d:59:74:e3:bf:f5:18: 3f:35:21:a2:c0:c2:91:76:1a:8a:56:e2:a0:c1:34:a6:11:30: dd:e4:62:1c:70:ff:4e:c0:32:12:6e:44:83:0a:0a:db:2e:8d: 11:0e:80:6d:90:91:d7:14:93:18:e0:3d:49:06:89:59:2f:9d: 66:ae:61:82:51:c8:dd:ba:82:4f:8d:ec:56:da:2f:b2:05:b2: bf:85:b6:dd:c2:24:94:b2:2b:34:01:d1:f8:d3:fd:d7:fc:96: ee:4d:e3:ba:1b:89:f6:6e:d8:db:26:76:6c:ca:46:92:5f:9d: 43:f2:9a:66:80:ba:c4:8b:50:d8:ea:1c:3c:b4:89:05:08:d6: 9f:71:0a:d9:1a:91:9d:33:5c:7c:09:e4:95:98:67:72:99:51: 42:30:41:3e:62:b5:f3:e0:76:fd:19:14:d9:cf:ed:ed:d2:df: a5:81:ad:66:fc:40:19:72:b7:8d:3b:c4:19:03:68:6a:c9:30: 4d:7d:ae:6b:fc:f2:b5:2a:7a:90:31:5a:61:7e:52:30:41:d2: bf:27:35:c3:3c:95:cd:0e:4e:3f:6d:dc:73:de:02:0c:0d:55: 75:6c:0f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4XBtHqAzI8uskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YTg2MTQ1YjktNTUzOC00MDMxLTg4MWQtYWNkMzE3MjkzNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiRd2UU0iAWvfUUBai9oPmVNJ4JPqHX382z3 uaZywms8AciGMIF4xIUGTw8jh17mBG2WnYmV1uvc9SA5v/BzUCIn8koTDaeSAewo nkalroFmx4AeZ79EvLK8KtOgz2rUlWpu9Bd8uduzPZGfyA9KYmIvVsy6rQKfBnKG I0PDQuCAvZsHeuyl9CIg9vDxwtHRagjY5AvE8SvpH8uMf7hUJlxoCU2bZ71HOUHt +4Mv0mS2IbTDHae46vidMaCFYYswOXGh+9mEvtyVrC6aGi/Lyd02MFGNqlVTy5DH X0KrDGTxVNVrJYmkpINyIFYIqMqJJBHGlSDxp3arXinboe13vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPoSzbm14Bn+l2qRae/pPGflAeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVlY2Y4YjMtYjFkMC0z MjhlLWIyOGQtMGZkNWMyMzlmMTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1V53uczaHWEfJdDLTyP9i0QIq2o1teB8dXIjlqbVl047/1GD81IaLA wpF2GopW4qDBNKYRMN3kYhxw/07AMhJuRIMKCtsujREOgG2QkdcUkxjgPUkGiVkv nWauYYJRyN26gk+N7FbaL7IFsr+Ftt3CJJSyKzQB0fjT/df8lu5N47obifZu2Nsm dmzKRpJfnUPymmaAusSLUNjqHDy0iQUI1p9xCtkakZ0zXHwJ5JWYZ3KZUUIwQT5i tfPgdv0ZFNnP7e3S36WBrWb8QBlyt407xBkDaGrJME19rmv88rUqepAxWmF+UjBB 0r8nNcM8lc0OTj9t3HPeAgwNVXVsD8s= -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:18 2026 by rpki-client