$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa File: d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa (raw, json) Hash identifier: rUcwzXb7UBdVgcJIOq0+oDl/a6WT74vaWJeX5eXtj/Y= Subject key identifier: C7:E7:2B:5A:21:1C:61:68:DE:E4:B3:B0:82:90:A1:E3:10:10:11:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A52CDC87659780DFFE380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 71.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:52:cd:c8:76:59:78:0d:ff:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=df59dd49-1f80-45ae-9e30-0551a2b51ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ea:80:46:45:05:45:90:48:1c:7d:72:0b:ee: 11:74:58:4f:38:26:5c:7d:67:8b:5f:46:80:72:6b: bb:b2:89:fb:8e:ef:53:82:8a:9a:80:ae:da:bc:b0: 75:76:e6:f8:12:5e:e0:8f:e8:a8:68:c3:de:53:81: 3d:93:17:6b:39:0d:f6:80:84:b7:ec:d8:3b:c2:b6: 3e:67:82:60:03:1e:7f:9b:fe:28:38:72:b8:3a:36: cb:bb:26:97:6b:8d:e0:a4:5d:12:39:22:69:48:8e: 99:ee:21:f7:4b:3e:d6:92:85:c1:a7:f3:50:b1:20: 93:87:6d:93:38:92:b1:8a:6f:79:16:54:34:c9:2a: 92:4d:e0:73:cc:e9:98:85:bb:54:d9:51:ea:38:b3: e1:9d:5b:5a:a3:73:52:0a:56:79:6f:4d:c4:b3:a9: aa:49:8f:7f:43:af:28:1e:74:ec:6a:bd:58:b1:1c: a4:91:b4:74:17:1a:ea:02:6e:62:7e:3c:a8:fb:ea: 75:23:0c:f7:4c:f4:00:bc:d3:57:40:91:a5:06:af: cb:69:81:16:53:e7:6a:03:dd:66:15:b7:1a:08:c2: 56:ae:69:e4:a3:9c:ab:a2:07:0b:f0:93:e3:63:15: 80:b6:d9:bb:46:14:19:f2:e0:85:be:68:89:61:03: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E7:2B:5A:21:1C:61:68:DE:E4:B3:B0:82:90:A1:E3:10:10:11:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d0:a1:8e:c0:77:23:c1:4e:8f:83:2a:2e:25:61:f5:ef:61: 4e:38:f1:bf:a7:81:94:73:51:ae:e0:57:e7:d4:d9:f5:be:66: 00:ff:ba:75:3a:c0:cc:d1:12:e3:12:0d:26:3f:e5:e5:17:4b: d2:b0:c8:bc:cc:3f:b1:b6:e4:d3:b8:fe:0c:cd:34:7e:40:d4: 71:09:49:ed:03:c1:c2:3a:95:ca:30:1a:5a:03:42:6e:c2:b4: b7:d8:85:c1:28:73:25:a8:ef:47:80:77:05:5c:70:b7:b0:d0: 9d:5f:ea:5a:8e:0a:09:e5:f7:60:80:95:32:e2:8c:d8:0d:49: cb:41:6b:d1:91:22:0f:52:75:0a:c3:f1:28:64:cb:88:2d:55: ea:74:47:57:71:57:8f:75:89:6f:f0:a3:69:2f:8e:60:3e:a0: 9f:3b:fb:7b:0c:2c:94:8b:2b:7d:a1:f0:99:8e:57:11:db:aa: d9:57:1c:f1:40:60:77:39:b4:49:7e:5d:37:e2:c1:38:e3:7c: 76:28:2c:6c:85:de:dd:7f:4e:2e:f6:d7:ab:fb:4a:01:ea:99: a0:67:2d:31:49:4d:81:44:22:b1:1b:09:1f:28:a1:71:f1:ef: 4b:63:6f:5d:3f:9e:1c:36:93:e3:c6:33:ff:bf:89:20:0c:b6: f9:28:3a:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alLNyHZZeA3/44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZGY1OWRkNDktMWY4MC00NWFlLTllMzAtMDU1MWEyYjUxZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguqARkUFRZBIHH1yC+4RdFhPOCZcfWeLX0aA cmu7son7ju9TgoqagK7avLB1dub4El7gj+ioaMPeU4E9kxdrOQ32gIS37Ng7wrY+ Z4JgAx5/m/4oOHK4OjbLuyaXa43gpF0SOSJpSI6Z7iH3Sz7WkoXBp/NQsSCTh22T OJKxim95FlQ0ySqSTeBzzOmYhbtU2VHqOLPhnVtao3NSClZ5b03Es6mqSY9/Q68o HnTsar1YsRykkbR0FxrqAm5ifjyo++p1Iwz3TPQAvNNXQJGlBq/LaYEWU+dqA91m FbcaCMJWrmnko5yrogcL8JPjYxWAttm7RhQZ8uCFvmiJYQMjPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfnK1ohHGFo3uSzsIKQoeMQEBEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRkY2M1YTQtNmExNS0z MjhmLWEzMjMtOTlhMWQxMjA0ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvQoY7AdyPBTo+DKi4lYfXvYU448b+ngZRzUa7gV+fU2fW+ZgD/unU6 wMzREuMSDSY/5eUXS9KwyLzMP7G25NO4/gzNNH5A1HEJSe0DwcI6lcowGloDQm7C tLfYhcEocyWo70eAdwVccLew0J1f6lqOCgnl92CAlTLijNgNSctBa9GRIg9SdQrD 8Shky4gtVep0R1dxV491iW/wo2kvjmA+oJ87+3sMLJSLK32h8JmOVxHbqtlXHPFA YHc5tEl+XTfiwTjjfHYoLGyF3t1/Ti7216v7SgHqmaBnLTFJTYFEIrEbCR8ooXHx 70tjb10/nhw2k+PGM/+/iSAMtvkoOo0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:03 2026 by rpki-client