$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa File: 9df77081-57fb-39ce-9dd0-1a902633477f.roa (raw, json) Hash identifier: lKmiUB9YDxaoZns8sigj3h/xPk1z8teybkVdO81cINo= Subject key identifier: A6:0A:D0:8A:E7:77:31:40:8A:56:A5:3D:D3:84:6C:34:49:71:57:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D422F7E07671D7465D698C1E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 71.28.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:7e:07:67:1d:74:65:d6:98:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=59631da0-cf30-4a07-a8ff-75cc098bc2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:1b:db:1e:5e:57:27:38:0a:c4:72:ce:89: c6:a9:8c:21:9a:17:32:0d:88:e0:c7:ed:c8:46:b6: c1:e9:87:b1:8a:d8:18:a9:c1:8e:a0:d5:2d:0f:ae: eb:24:61:af:2a:ab:88:0d:4c:2a:52:bd:36:ac:1b: f3:2f:c5:24:9e:36:77:38:e7:8f:9c:5c:1e:bf:6b: c0:78:72:e6:6f:f6:61:fb:19:56:af:98:5e:b4:5f: 6b:5f:f9:c9:1b:4e:31:46:e5:fd:7d:59:4c:1f:f4: a0:68:17:98:7b:09:49:f8:5d:67:cd:81:65:a7:72: 5f:fd:99:1f:2c:a0:a4:9b:41:05:32:55:9d:16:de: 1b:45:28:a6:a0:f1:b7:c6:11:98:c8:38:33:a5:60: 6f:8d:14:7d:38:11:ab:88:2b:01:ac:4e:36:84:c2: 13:25:65:af:b6:04:65:72:9b:01:5d:f6:c2:2c:6f: cd:4c:3e:37:18:b7:97:97:9b:be:95:ae:41:26:0e: 9d:86:6f:37:26:58:ae:ae:3a:81:cd:55:86:e0:80: 55:95:29:18:b6:88:db:4f:10:38:00:d0:92:c8:65: a3:9e:9d:d7:7b:50:4f:1d:cc:01:78:a0:61:85:fd: a5:ad:cb:7c:ef:95:f5:73:c4:69:a6:eb:f4:14:d4: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0A:D0:8A:E7:77:31:40:8A:56:A5:3D:D3:84:6C:34:49:71:57:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b4:46:9d:e2:09:f5:11:62:1b:df:20:29:01:a2:06:57:21: 5b:9d:38:b7:0c:4d:cb:87:2b:8e:3a:66:53:ba:aa:b9:a1:ac: 2e:3b:c4:8b:fb:99:92:6a:13:22:97:1a:0e:f9:59:8c:33:34: e1:83:03:9f:cc:72:d8:e9:7b:c7:31:4f:64:2c:48:48:20:50: 02:d0:df:d1:44:95:e8:dd:dd:46:e4:2b:cc:d6:6e:53:d5:b1: 47:60:09:82:f0:f3:d3:f9:7f:ef:77:be:51:3d:96:c8:de:87: f8:2a:6b:56:87:70:0c:05:21:d8:48:99:2b:98:9b:f0:f7:25: 96:2d:1a:51:4d:ea:f4:07:82:78:f8:5b:75:9f:51:06:f7:1f: 14:02:9e:0f:7a:ef:8f:d9:eb:37:67:b7:b8:58:38:ba:a8:e1: 24:2e:27:c6:d1:19:29:9c:6f:a8:98:9b:52:99:1b:33:a2:98: df:2f:ed:28:14:d2:0c:b3:e1:a1:48:e6:4b:76:d1:31:96:b4: e6:d8:bc:61:6f:5c:40:52:41:37:42:ab:b7:87:e8:9a:3e:9f: 4b:fd:56:e4:e5:84:5f:83:41:9d:b6:54:c3:91:f7:f8:01:d0: 23:06:4f:e0:54:3a:d7:ea:2c:3e:2a:99:cb:bd:4f:76:33:df: 09:f9:9b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL34HZx10ZdaYweAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk NTk2MzFkYTAtY2YzMC00YTA3LWE4ZmYtNzVjYzA5OGJjMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kYb2x5eVyc4CsRyzonGqYwhmhcyDYjgx+3I RrbB6YexitgYqcGOoNUtD67rJGGvKquIDUwqUr02rBvzL8UknjZ3OOePnFwev2vA eHLmb/Zh+xlWr5hetF9rX/nJG04xRuX9fVlMH/SgaBeYewlJ+F1nzYFlp3Jf/Zkf LKCkm0EFMlWdFt4bRSimoPG3xhGYyDgzpWBvjRR9OBGriCsBrE42hMITJWWvtgRl cpsBXfbCLG/NTD43GLeXl5u+la5BJg6dhm83JliurjqBzVWG4IBVlSkYtojbTxA4 ANCSyGWjnp3Xe1BPHcwBeKBhhf2lrct875X1c8Rppuv0FNQwawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYK0IrndzFAilalPdOEbDRJcVdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWRmNzcwODEtNTdmYi0z OWNlLTlkZDAtMWE5MDI2MzM0NzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxzjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS0Rp3iCfURYhvfICkBogZXIVudOLcMTcuHK446ZlO6qrmhrC47xIv7 mZJqEyKXGg75WYwzNOGDA5/Mctjpe8cxT2QsSEggUALQ39FElejd3UbkK8zWblPV sUdgCYLw89P5f+93vlE9lsjeh/gqa1aHcAwFIdhImSuYm/D3JZYtGlFN6vQHgnj4 W3WfUQb3HxQCng9674/Z6zdnt7hYOLqo4SQuJ8bRGSmcb6iYm1KZGzOimN8v7SgU 0gyz4aFI5kt20TGWtObYvGFvXEBSQTdCq7eH6Jo+n0v9VuTlhF+DQZ22VMOR9/gB 0CMGT+BUOtfqLD4qmcu9T3Yz3wn5m6A= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:01 2026 by rpki-client