$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c459f915-3c82-3272-9093-be4a7995fca4.roa File: c459f915-3c82-3272-9093-be4a7995fca4.roa (raw, json) Hash identifier: bcseOtlrehGCgeG33u1sqfs7iUiFFatlNCq31AbtR/g= Subject key identifier: 0E:77:FD:D5:8D:20:DB:3F:6D:48:D6:2E:44:7D:8C:E3:A8:59:69:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7D87106E5245A71C1380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c459f915-3c82-3272-9093-be4a7995fca4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 71.7.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7d:87:10:6e:52:45:a7:1c:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=8b0a2e17-527d-414a-a168-37060be4ef51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:52:8b:52:1c:ba:38:07:12:ad:d7:b2:83: ce:90:3b:ec:f1:82:6b:7a:7f:d1:8d:e8:5c:19:38: 4b:7a:6a:d6:a7:44:96:ef:57:f8:66:65:3d:76:d5: 9d:f4:b5:9e:8f:2c:c4:d7:d4:d1:4d:9b:15:cc:dc: b6:d6:9f:40:d0:76:c3:63:94:91:70:4f:69:b7:e9: 1a:bb:3c:80:89:bb:c6:6d:dd:5e:a2:6d:34:fa:8a: ee:f3:cf:02:a9:7f:31:d2:79:35:45:a3:e8:16:d9: f5:44:16:b2:bf:c4:75:80:aa:b7:bf:0a:58:30:88: cc:81:29:d6:d0:c7:30:19:ee:ca:59:fb:88:b4:29: e7:a1:a4:4a:a7:1e:ad:2f:d8:30:d7:f5:8a:a2:cc: 53:ad:28:bb:72:af:4d:2b:b2:7c:ed:0d:f1:f4:be: b6:4b:22:c6:7b:b9:2f:86:54:2b:bf:36:f4:4e:c3: 38:7b:18:f3:82:be:41:3e:54:35:a1:1d:03:26:e7: 91:ea:f2:67:5e:e8:09:d3:71:82:72:80:c2:51:0d: 92:38:60:44:1e:15:84:13:16:d2:99:63:cc:2c:b8: d0:d1:f1:1f:04:97:cb:28:6b:29:17:8e:88:3c:1e: 5f:0d:81:0a:00:d7:1e:63:7b:46:6d:a4:65:55:b4: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:77:FD:D5:8D:20:DB:3F:6D:48:D6:2E:44:7D:8C:E3:A8:59:69:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c459f915-3c82-3272-9093-be4a7995fca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:68:01:4f:26:00:ad:64:57:b5:b2:c3:1b:c9:ba:83:2a:0d: 59:bc:26:7f:2a:2f:7f:ed:dd:79:06:e9:40:ba:14:be:31:75: c6:f3:4d:45:f1:d3:3b:05:70:c3:05:03:7b:98:e8:1a:2b:95: a8:86:00:20:cd:77:fd:98:c2:af:cb:07:dc:6e:b5:2b:60:57: 2c:e6:d1:fd:06:aa:5d:42:7d:b7:77:3a:79:e2:7e:b6:19:0a: 3f:69:b5:d8:d1:56:ac:02:45:a3:07:4e:5b:42:57:df:75:92: 2b:e7:d4:31:01:ce:ad:b0:d9:01:69:a9:cb:8e:be:06:20:ed: 11:8a:68:71:a1:84:4f:04:45:75:e0:b0:3b:3e:75:40:f2:17: dd:b7:24:c2:48:6a:d3:ad:f3:32:bb:6b:2c:4f:f6:59:a6:45: 75:ab:a2:c5:dc:28:e7:d2:bc:a2:97:de:ff:e7:d1:00:f9:c8: 35:85:a8:89:7f:4a:22:18:47:e4:c7:03:51:d7:24:79:be:48: e6:8f:b2:e7:04:bc:ea:06:15:75:d3:ec:a6:af:d5:72:8d:2f: 6c:1c:38:c2:c6:ff:77:9e:99:cb:08:aa:15:8b:55:19:27:16: 07:5d:b8:bb:80:82:84:26:7c:1a:06:49:cb:9d:0e:91:3f:a4: 60:d4:13:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCn2HEG5SRaccE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OGIwYTJlMTctNTI3ZC00MTRhLWExNjgtMzcwNjBiZTRlZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR9Si1IcujgHEq3XsoPOkDvs8YJren/Rjehc GThLemrWp0SW71f4ZmU9dtWd9LWejyzE19TRTZsVzNy21p9A0HbDY5SRcE9pt+ka uzyAibvGbd1eom00+oru888CqX8x0nk1RaPoFtn1RBayv8R1gKq3vwpYMIjMgSnW 0McwGe7KWfuItCnnoaRKpx6tL9gw1/WKosxTrSi7cq9NK7J87Q3x9L62SyLGe7kv hlQrvzb0TsM4exjzgr5BPlQ1oR0DJueR6vJnXugJ03GCcoDCUQ2SOGBEHhWEExbS mWPMLLjQ0fEfBJfLKGspF46IPB5fDYEKANceY3tGbaRlVbSMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA53/dWNINs/bUjWLkR9jOOoWWkLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQ1OWY5MTUtM2M4Mi0z MjcyLTkwOTMtYmU0YTc5OTVmY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIloAU8mAK1kV7WywxvJuoMqDVm8Jn8qL3/t3XkG6UC6FL4xdcbzTUXx 0zsFcMMFA3uY6BorlaiGACDNd/2Ywq/LB9xutStgVyzm0f0Gql1Cfbd3OnnifrYZ Cj9ptdjRVqwCRaMHTltCV991kivn1DEBzq2w2QFpqcuOvgYg7RGKaHGhhE8ERXXg sDs+dUDyF923JMJIatOt8zK7ayxP9lmmRXWrosXcKOfSvKKX3v/n0QD5yDWFqIl/ SiIYR+THA1HXJHm+SOaPsucEvOoGFXXT7Kav1XKNL2wcOMLG/3eemcsIqhWLVRkn FgdduLuAgoQmfBoGScudDpE/pGDUEyc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:23:13 2026 by rpki-client