$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa File: b6644eb8-860e-36c8-9338-e619fe3b172f.roa (raw, json) Hash identifier: k/d4l/BxEiznNQbCgUZa2iofbdmQi0L2rY9lNjxVQXA= Subject key identifier: BE:A9:EA:96:3F:FC:DF:A6:C7:B3:E3:71:28:7E:ED:29:33:50:46:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA02B7D05FACBA7C263220 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 71.28.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:02:b7:d0:5f:ac:ba:7c:26:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=ee8ab51c-e28d-4bb7-8df1-9e4b6a346d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:41:e9:35:df:75:af:d7:07:4e:49:24:23:57: c0:67:16:d1:39:50:54:3e:1a:0b:41:05:61:c8:37: 16:31:01:44:fb:4d:58:91:9f:b3:f7:ea:da:b6:ef: b3:24:27:45:c5:b5:ce:23:ee:c4:2c:d7:6c:74:d6: 04:8e:ba:ba:8d:b3:1f:2b:ce:cc:25:a6:89:62:84: a2:ad:33:d9:a3:80:35:16:0f:b9:de:dc:e2:1c:cf: ef:5f:3d:79:d1:3b:4f:65:20:61:62:82:ac:fd:0e: 43:d7:f3:cd:68:06:0e:ca:ed:24:3b:51:aa:eb:68: c2:ef:bc:cb:a0:46:a8:2b:36:bd:d2:7e:8d:52:7c: 4c:f8:b4:dc:c5:65:0f:fd:be:76:51:21:bf:16:3e: 6f:4f:5d:09:9b:44:af:03:fc:58:aa:ea:f6:6b:83: 06:ee:a4:a4:07:77:09:32:cc:a1:08:07:02:3d:46: fe:f1:f7:76:2d:42:00:b2:bc:23:a6:31:5c:d1:bb: 9f:56:74:52:d6:03:cc:15:e6:41:9c:8a:0c:83:a9: e1:a6:ac:f2:16:cb:2e:14:85:87:8a:6d:98:26:95: ec:16:f8:44:11:ee:76:b2:09:8c:77:78:26:93:4f: 71:85:40:2b:7f:85:1b:2d:f7:34:e9:7e:6f:96:99: 50:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A9:EA:96:3F:FC:DF:A6:C7:B3:E3:71:28:7E:ED:29:33:50:46:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b9:84:44:39:e4:e0:c3:86:5f:74:ef:29:dd:73:98:7b:93: 7c:26:45:98:a8:1c:92:52:d8:40:7f:00:aa:55:eb:ea:4f:f8: 2f:fe:ec:15:ec:89:7e:88:40:4a:25:4b:55:c5:26:d9:c4:96: 4d:54:ec:cb:49:5f:51:bb:e7:71:eb:89:ce:34:b2:e0:58:f1: 37:4a:8d:91:17:9a:01:2f:3c:04:a6:78:5c:3d:04:ea:a5:63: 14:e6:ab:92:d3:31:ef:02:5f:9f:19:97:c3:3e:42:25:07:58: cf:25:41:f4:94:b7:a1:f4:36:e3:ff:28:53:5c:34:44:3e:ce: ca:54:9b:2a:1d:40:04:7d:05:6a:ce:8f:dd:85:3c:ca:68:f1: d2:2a:bd:bc:03:1c:7a:fb:b7:19:8b:8c:4c:49:13:94:1c:88: b5:9b:6e:70:13:bc:6d:0e:06:95:e9:a5:95:76:5b:ff:9d:e4: 5c:63:4b:91:6d:ac:5b:7b:23:84:fb:92:0a:44:d2:be:3e:07: aa:09:cf:62:f4:20:e2:8e:88:e5:33:c1:88:47:1b:36:31:65: b1:eb:3b:72:f6:34:db:59:df:4a:5b:29:2a:1e:37:0c:e7:d6: 64:24:e0:02:61:00:b0:8e:36:27:1c:d0:ba:6d:9d:ed:20:5b: 7a:59:ea:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gK30F+sunwmMiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZWU4YWI1MWMtZTI4ZC00YmI3LThkZjEtOWU0YjZhMzQ2ZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUHpNd91r9cHTkkkI1fAZxbROVBUPhoLQQVh yDcWMQFE+01YkZ+z9+ratu+zJCdFxbXOI+7ELNdsdNYEjrq6jbMfK87MJaaJYoSi rTPZo4A1Fg+53tziHM/vXz150TtPZSBhYoKs/Q5D1/PNaAYOyu0kO1Gq62jC77zL oEaoKza90n6NUnxM+LTcxWUP/b52USG/Fj5vT10Jm0SvA/xYqur2a4MG7qSkB3cJ MsyhCAcCPUb+8fd2LUIAsrwjpjFc0bufVnRS1gPMFeZBnIoMg6nhpqzyFssuFIWH im2YJpXsFvhEEe52sgmMd3gmk09xhUArf4UbLfc06X5vlplQuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6p6pY//N+mx7PjcSh+7SkzUEZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjY2NDRlYjgtODYwZS0z NmM4LTkzMzgtZTYxOWZlM2IxNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+5hEQ55ODDhl907yndc5h7k3wmRZioHJJS2EB/AKpV6+pP+C/+7BXs iX6IQEolS1XFJtnElk1U7MtJX1G753Hric40suBY8TdKjZEXmgEvPASmeFw9BOql YxTmq5LTMe8CX58Zl8M+QiUHWM8lQfSUt6H0NuP/KFNcNEQ+zspUmyodQAR9BWrO j92FPMpo8dIqvbwDHHr7txmLjExJE5QciLWbbnATvG0OBpXppZV2W/+d5FxjS5Ft rFt7I4T7kgpE0r4+B6oJz2L0IOKOiOUzwYhHGzYxZbHrO3L2NNtZ30pbKSoeNwzn 1mQk4AJhALCONicc0Lptne0gW3pZ6nM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:00 2026 by rpki-client