$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa File: d1b55f89-5ffd-3a4b-8e48-37e825835068.roa (raw, json) Hash identifier: MxmTW6ItAGPXnUKAcNeIYAp31Cy9CH00wjMAdgT3zYw= Subject key identifier: 92:86:7B:6B:58:97:7E:F4:7A:9D:C4:E8:57:10:77:41:7E:79:DB:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F866F361B5CDFA2777D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 71.30.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:86:6f:36:1b:5c:df:a2:77:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=881b03d3-7452-48dd-a98e-3d28ecf7d1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:74:cf:59:0f:f6:ff:78:ac:a7:68:9c:48: d6:e6:ba:91:ca:eb:b0:4e:b7:49:2b:3d:19:97:c9: a4:e9:22:06:b5:cc:88:2a:8a:c8:12:9e:63:f5:99: bb:70:04:64:4b:0f:0a:76:77:33:93:f1:ed:d6:ba: 85:9a:c3:db:11:aa:1e:88:32:30:42:8e:cb:5c:33: 87:d3:02:86:66:38:7c:1a:c2:eb:37:45:33:aa:39: c8:cb:45:f8:6b:d2:96:f7:63:03:55:46:1c:cd:9d: 71:af:ea:20:26:ba:af:e7:72:6e:5c:ae:34:d5:8f: a1:60:4f:52:ea:d7:39:d7:45:97:df:9d:5a:26:9a: c7:18:a9:cc:89:2b:92:88:6b:8e:79:47:36:2c:3e: c2:58:bc:4d:eb:0e:a8:9c:0e:0c:2a:10:1e:1f:17: ad:ad:4d:26:9f:ac:d9:77:2a:61:74:da:18:95:46: db:99:e1:08:02:ae:d3:b7:ac:73:0e:f1:07:6b:24: 16:b3:9b:f5:92:fe:2c:95:34:9a:97:11:8f:0f:3e: 97:0e:e9:b9:70:af:cc:6b:92:7f:71:f9:89:56:78: f2:7f:a6:f9:82:6d:a0:09:15:90:db:be:80:d6:99: 83:8b:df:44:df:4b:50:2e:a7:bc:24:f5:f4:0c:ba: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:86:7B:6B:58:97:7E:F4:7A:9D:C4:E8:57:10:77:41:7E:79:DB:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8e:df:c0:c3:b4:02:62:18:38:18:42:3f:70:1d:98:69:1c: da:d2:d6:e7:b4:18:d3:d4:26:5e:29:5a:ab:80:13:ea:e2:5d: 8d:f2:fc:eb:57:ea:dc:b1:9a:6b:0b:28:98:11:37:ed:b9:e3: 97:b4:67:4c:07:fe:c6:69:44:66:4f:6e:ee:db:03:cb:c0:54: 41:25:ee:ce:ad:7b:0c:f2:f1:3c:d3:22:02:7e:33:86:64:49: 56:b1:84:6c:55:a2:d8:7f:5d:41:99:46:47:1d:0e:d5:bb:f2: 13:a2:bb:36:34:c1:05:13:0e:79:3f:f1:1a:49:9b:4f:a1:d7: 7d:fa:94:15:a4:66:37:de:cf:4b:33:04:75:36:8e:29:eb:a9: a1:8d:c9:00:bc:38:fd:42:c1:76:33:9d:15:39:f9:a5:53:a2: bd:42:f0:02:b1:53:ba:7b:1a:1a:69:b8:b1:f5:f2:14:a7:a9: a1:8e:17:fd:3f:70:91:c8:68:97:23:6f:da:63:df:93:a3:cc: 2e:7e:5f:67:90:53:78:b7:58:ad:bf:d1:92:32:af:75:d4:b3: 38:f1:f3:e9:04:b5:05:7b:22:d8:12:98:99:d3:a5:bd:f5:b3: 66:d3:a9:8f:b7:57:e3:c5:ce:2f:68:d2:f9:5e:3d:eb:03:6f: cc:14:8e:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4ZvNhtc36J3fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ODgxYjAzZDMtNzQ1Mi00OGRkLWE5OGUtM2QyOGVjZjdkMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMN0z1kP9v94rKdonEjW5rqRyuuwTrdJKz0Z l8mk6SIGtcyIKorIEp5j9Zm7cARkSw8Kdnczk/Ht1rqFmsPbEaoeiDIwQo7LXDOH 0wKGZjh8GsLrN0UzqjnIy0X4a9KW92MDVUYczZ1xr+ogJrqv53JuXK401Y+hYE9S 6tc510WX351aJprHGKnMiSuSiGuOeUc2LD7CWLxN6w6onA4MKhAeHxetrU0mn6zZ dyphdNoYlUbbmeEIAq7Tt6xzDvEHayQWs5v1kv4slTSalxGPDz6XDum5cK/Ma5J/ cfmJVnjyf6b5gm2gCRWQ276A1pmDi99E30tQLqe8JPX0DLqk6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKGe2tYl370ep3E6FcQd0F+edtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFiNTVmODktNWZmZC0z YTRiLThlNDgtMzdlODI1ODM1MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqO38DDtAJiGDgYQj9wHZhpHNrS1ue0GNPUJl4pWquAE+riXY3y/OtX 6tyxmmsLKJgRN+2545e0Z0wH/sZpRGZPbu7bA8vAVEEl7s6tewzy8TzTIgJ+M4Zk SVaxhGxVoth/XUGZRkcdDtW78hOiuzY0wQUTDnk/8RpJm0+h1336lBWkZjfez0sz BHU2jinrqaGNyQC8OP1CwXYznRU5+aVTor1C8AKxU7p7GhppuLH18hSnqaGOF/0/ cJHIaJcjb9pj35OjzC5+X2eQU3i3WK2/0ZIyr3XUszjx8+kEtQV7ItgSmJnTpb31 s2bTqY+3V+PFzi9o0vlePesDb8wUjs4= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:41 2026 by rpki-client