$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa File: bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa (raw, json) Hash identifier: IUsi59F5w1woymgzUWBpTE3merIDxnCh5hPGUOs1CdM= Subject key identifier: E2:EA:43:66:DC:C1:DE:B4:BB:E2:18:E2:C4:13:98:FC:DB:F6:4B:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA155456FE94AD53A7C020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 71.28.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:15:54:56:fe:94:ad:53:a7:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=9c5798c5-d028-4955-ad2d-20888e30021a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:94:30:09:38:8e:4c:17:b8:40:43:f0:dd: 72:73:6d:1f:f9:38:1c:85:1b:b2:4e:9c:a5:0f:55: 94:4d:2d:5c:3a:8f:43:fe:b1:ae:7a:0c:0d:2d:c5: 2c:d8:11:f3:d0:6d:11:50:4c:43:8e:f3:35:4a:7b: 23:0e:a4:1a:59:ae:79:fe:03:c0:94:e1:f8:33:a9: 32:31:b0:6f:f9:66:06:ef:40:88:ea:d1:7f:95:71: 48:5e:63:df:a6:91:e7:da:f7:31:6e:85:d3:88:9c: 42:10:2f:8d:5c:24:d0:d2:bb:28:20:a5:1f:a0:22: 5a:2d:f3:7b:ff:44:7c:81:9f:8b:1d:0e:23:5c:74: 69:58:03:d8:8c:4c:99:d3:79:92:2d:5b:55:c0:ae: 69:e0:c1:ef:21:7f:da:e5:e5:89:1f:41:42:6b:94: cc:58:6a:4f:1b:3f:71:9c:16:c2:5f:83:d3:09:90: a0:e0:5c:ec:f5:bf:0b:2c:17:69:bc:3d:b0:bf:91: 89:63:10:86:5d:a0:f9:c4:ef:53:1c:7c:4c:eb:6b: 30:d7:28:17:27:52:f9:26:23:02:6b:61:e5:6b:95: 87:5f:65:b3:06:ae:b5:57:9e:34:01:bd:69:12:ae: c4:57:5d:28:01:bf:d0:36:fc:26:3d:95:f1:58:42: 44:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EA:43:66:DC:C1:DE:B4:BB:E2:18:E2:C4:13:98:FC:DB:F6:4B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f0:6a:54:9a:9a:8f:df:ee:61:56:67:75:fb:1c:2c:47:85: 01:1e:66:64:fc:ab:0a:74:28:2a:d3:cd:29:51:95:cb:a0:e3: df:61:fa:6c:5c:ad:8e:df:bd:d6:e3:b2:68:dd:b5:39:2f:36: 8e:8f:b7:e8:62:8c:56:bf:b0:6a:6f:26:f9:97:ca:07:17:21: 2f:0f:9f:bd:33:44:82:ad:ee:73:90:72:b7:18:40:b3:b7:1e: c0:4c:85:4c:ac:dd:36:88:ad:b3:33:85:7c:c8:18:eb:80:75: 6b:bb:8a:27:ef:60:ea:4a:3c:42:05:da:26:07:fc:8b:76:9d: 9e:79:4d:2a:77:59:ae:fb:82:fe:56:df:5f:cc:37:ba:7c:df: 92:f8:b5:27:df:18:d2:52:b3:1b:f7:ed:38:6b:fb:f8:3e:ac: 15:31:43:12:8b:1c:93:6b:70:56:a7:f4:46:62:94:b7:99:8b: 88:50:a1:54:0d:5a:34:91:28:40:9a:24:49:f2:00:07:85:1b: fc:05:60:7e:8b:4d:db:38:b1:00:f2:18:d5:8b:a8:53:37:47: 68:a5:d9:8b:ee:79:96:10:09:ac:1d:f4:7f:ab:08:d3:eb:eb: 3b:34:7e:b0:d6:55:71:6e:6e:b8:c2:14:cc:c3:a1:d6:94:b7: f8:d4:fd:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hVUVv6UrVOnwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk OWM1Nzk4YzUtZDAyOC00OTU1LWFkMmQtMjA4ODhlMzAwMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3uUMAk4jkwXuEBD8N1yc20f+TgchRuyTpyl D1WUTS1cOo9D/rGuegwNLcUs2BHz0G0RUExDjvM1SnsjDqQaWa55/gPAlOH4M6ky MbBv+WYG70CI6tF/lXFIXmPfppHn2vcxboXTiJxCEC+NXCTQ0rsoIKUfoCJaLfN7 /0R8gZ+LHQ4jXHRpWAPYjEyZ03mSLVtVwK5p4MHvIX/a5eWJH0FCa5TMWGpPGz9x nBbCX4PTCZCg4Fzs9b8LLBdpvD2wv5GJYxCGXaD5xO9THHxM62sw1ygXJ1L5JiMC a2Hla5WHX2WzBq61V540Ab1pEq7EV10oAb/QNvwmPZXxWEJEEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLqQ2bcwd60u+IY4sQTmPzb9ktfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQyZDlmNmItOGRiYy0z NzcxLTg5MDctOTliNWU3YmYxYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvwalSamo/f7mFWZ3X7HCxHhQEeZmT8qwp0KCrTzSlRlcug499h+mxc rY7fvdbjsmjdtTkvNo6Pt+hijFa/sGpvJvmXygcXIS8Pn70zRIKt7nOQcrcYQLO3 HsBMhUys3TaIrbMzhXzIGOuAdWu7iifvYOpKPEIF2iYH/It2nZ55TSp3Wa77gv5W 31/MN7p835L4tSffGNJSsxv37Thr+/g+rBUxQxKLHJNrcFan9EZilLeZi4hQoVQN WjSRKECaJEnyAAeFG/wFYH6LTds4sQDyGNWLqFM3R2il2YvueZYQCawd9H+rCNPr 6zs0frDWVXFubrjCFMzDodaUt/jU/ZI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:50 2026 by rpki-client