$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfdab452-30ce-33d8-b092-188782742a3d.roa File: cfdab452-30ce-33d8-b092-188782742a3d.roa (raw, json) Hash identifier: ncBDEOhLSAa9a0ByfDXPr1P4BAnT/Z9xKOBKTwcUVMU= Subject key identifier: 50:A5:6E:58:D2:81:31:5F:F5:A9:EA:07:13:18:9A:0D:08:57:E2:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3DFFE53E7385EB6B367E6800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfdab452-30ce-33d8-b092-188782742a3d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 71.30.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e5:3e:73:85:eb:6b:36:7e:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1888b226-08e8-43f7-ac58-4f47b9dbeec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:01:fd:6e:9b:ce:f7:0e:6b:61:70:10:ae: 67:96:6f:e4:8b:28:ba:67:4a:30:87:ef:b9:ec:d7: 24:95:85:3e:66:54:86:ec:d5:74:b7:ed:47:b6:4d: ae:4f:bb:12:b5:cc:f7:05:61:8a:be:49:78:6e:7a: 0f:3a:c5:ad:be:2e:9e:17:fd:c7:23:08:70:4a:d5: fb:67:6c:17:4a:22:3c:21:59:a2:4b:83:7d:36:97: 33:43:df:c0:cc:eb:a4:7e:95:29:66:cb:df:ba:b0: 50:a4:d3:5e:ea:42:b8:47:ff:04:a1:e5:3c:a8:68: 30:37:4e:46:94:ab:c0:16:13:fa:ed:bb:57:0d:9b: 14:dd:19:31:2f:e0:c9:b7:d5:ad:76:4e:17:43:eb: d2:fb:2b:66:e2:65:7f:8b:df:ef:91:b2:f5:49:2a: 22:77:d4:99:95:ae:8a:bb:7c:77:37:8b:69:7d:6d: 15:c4:7e:4d:46:6d:0e:28:72:8e:5a:3b:00:ad:54: d1:08:a2:b3:ec:79:33:53:09:69:ac:45:f9:e4:9d: ca:f2:77:07:56:b6:e0:58:c8:a8:4b:7c:f7:03:c5: 11:5f:58:f2:f7:dd:eb:44:a0:55:d9:58:2f:e0:91: 1b:50:ba:5a:6f:94:26:7b:21:00:2d:77:23:fe:68: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A5:6E:58:D2:81:31:5F:F5:A9:EA:07:13:18:9A:0D:08:57:E2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfdab452-30ce-33d8-b092-188782742a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b8:58:bf:89:81:7c:3b:cd:a9:db:63:cf:12:6d:45:28:4c: 49:bf:7b:ae:ab:43:92:df:bb:b2:73:09:f3:8e:3f:7a:bd:5a: 09:8e:ff:e5:b5:d1:5e:a3:43:9c:2d:51:c6:78:57:84:aa:94: 1d:5d:e2:d3:c3:ad:95:b2:45:1d:54:65:47:9f:73:ea:1e:b6: f2:da:76:85:14:04:5d:30:47:65:10:de:33:2e:fe:ca:b1:3f: 96:5f:53:e3:f2:5b:07:7b:d6:35:4a:ff:3e:ee:79:29:60:fa: a2:cd:48:eb:be:23:43:b9:5e:da:b5:be:b0:02:f4:c9:c6:7b: 15:81:20:4c:c0:09:63:49:2c:db:f6:1e:5c:b6:23:87:ec:6b: a0:c3:10:d7:c1:82:b8:d4:0c:47:aa:f3:69:2d:98:17:f5:42: 51:c1:5e:8f:2c:72:94:89:35:5b:01:0c:1b:24:57:7b:77:47: 08:dc:c9:d7:3d:fb:69:05:48:25:ef:08:5a:05:a4:ec:0f:3e: 02:e0:1b:35:96:f4:4f:27:96:0b:db:13:03:9d:3d:ba:32:f9: f2:ce:8d:fb:51:92:87:d9:c1:eb:0e:c3:7e:4f:35:85:4e:7f: 93:c6:c7:27:78:4f:de:a9:cf:39:9b:9e:35:07:9e:d6:09:f4: 69:36:8c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+U+c4XrazZ+aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTg4OGIyMjYtMDhlOC00M2Y3LWFjNTgtNGY0N2I5ZGJlZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPoB/W6bzvcOa2FwEK5nlm/kiyi6Z0owh++5 7NcklYU+ZlSG7NV0t+1Htk2uT7sStcz3BWGKvkl4bnoPOsWtvi6eF/3HIwhwStX7 Z2wXSiI8IVmiS4N9NpczQ9/AzOukfpUpZsvfurBQpNNe6kK4R/8EoeU8qGgwN05G lKvAFhP67btXDZsU3RkxL+DJt9Wtdk4XQ+vS+ytm4mV/i9/vkbL1SSoid9SZla6K u3x3N4tpfW0VxH5NRm0OKHKOWjsArVTRCKKz7HkzUwlprEX55J3K8ncHVrbgWMio S3z3A8URX1jy993rRKBV2Vgv4JEbULpab5QmeyEALXcj/miAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFClbljSgTFf9anqBxMYmg0IV+LBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2ZkYWI0NTItMzBjZS0z M2Q4LWIwOTItMTg4NzgyNzQyYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi4WL+JgXw7zanbY88SbUUoTEm/e66rQ5Lfu7JzCfOOP3q9WgmO/+W1 0V6jQ5wtUcZ4V4SqlB1d4tPDrZWyRR1UZUefc+oetvLadoUUBF0wR2UQ3jMu/sqx P5ZfU+PyWwd71jVK/z7ueSlg+qLNSOu+I0O5Xtq1vrAC9MnGexWBIEzACWNJLNv2 Hly2I4fsa6DDENfBgrjUDEeq82ktmBf1QlHBXo8scpSJNVsBDBskV3t3Rwjcydc9 +2kFSCXvCFoFpOwPPgLgGzWW9E8nlgvbEwOdPboy+fLOjftRkofZwesOw35PNYVO f5PGxyd4T96pzzmbnjUHntYJ9Gk2jKc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:58 2026 by rpki-client